last executing test programs: 7.103178817s ago: executing program 1 (id=659): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) 4.57728541s ago: executing program 1 (id=687): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) close(0x3) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) 2.742738999s ago: executing program 3 (id=697): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 2.603342456s ago: executing program 3 (id=699): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03076003008cb29e08f088a8", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.510457519s ago: executing program 3 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="3078353637380a95349a86b20d25de8024c7d88700da093534e03a932a9ff73cdbd9d33302b451eea5abe67c0548c0060242058f1409ef5c1b749f34788a433eaf24684b181b233d6c66f15a3100bf9fde65e484a31150327e2745a3442cd32d6b7ce88969b79afd77b146a75282b8f8bfc0a73dc83882eaf27d458198cd085af9040e781237af05d8df5939273fc40e5f44c19744249018ad5df4696e890b94f0736b5474aa9dfe6f08348eaa21ef073cd979ce18c4817b2a482e718349", 0xbe) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(r3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 2.432278834s ago: executing program 2 (id=702): socket$inet(0x2, 0x2, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x1, 0x1000000, 0x33d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 2.330646271s ago: executing program 3 (id=703): ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f00000075c0)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) socket(0xa, 0x80805, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x50) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000340)="00015ded58ced60d5414e6f9000000000000000000000080504db7fb71") 2.307198758s ago: executing program 2 (id=704): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x1000a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) socket$igmp(0x2, 0x3, 0x2) move_pages(0x0, 0x0, 0x0, &(0x7f0000000240)=[0x8, 0x4], 0x0, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, &(0x7f0000004d80)={0x2020}, 0xffffffd7) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.186065566s ago: executing program 4 (id=707): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000043c0)=ANY=[@ANYRES32=0x0], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) readv(r0, &(0x7f0000001740)=[{0x0}, {&(0x7f00000016c0)=""/115, 0x73}], 0x2) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff8) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x80008}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2.022602612s ago: executing program 0 (id=709): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) gettid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/138, 0x8a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x43}], 0x1}}], 0x3, 0x60cd894) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) 1.934045162s ago: executing program 0 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2004000) 1.837891485s ago: executing program 0 (id=711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x4070bd2d, 0x25dfdbff, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@broadcast, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfdfffffffffffffe, 0x3, 0x9}, {0x5, 0x9, 0x9, 0x292}, {0x1cb00000}, 0xffffffff, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(twofish)\x00'}}}]}, 0x138}}, 0x44050) 1.577410925s ago: executing program 0 (id=712): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) r0 = epoll_create1(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r0], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffea}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1, @ANYRES64=r2, @ANYRESDEC=r0], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r3, 0x30, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.446743299s ago: executing program 1 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="3078353637380a95349a86b20d25de8024c7d88700da093534e03a932a9ff73cdbd9d33302b451eea5abe67c0548c0060242058f1409ef5c1b749f34788a433eaf24684b181b233d6c66f15a3100bf9fde65e484a31150327e2745a3442cd32d6b7ce88969b79afd77b146a75282b8f8bfc0a73dc83882eaf27d458198cd085af9040e781237af05d8df5939273fc40e5f44c19744249018ad5df4696e890b94f0736b5474aa9dfe6f08348eaa21ef073cd979ce18c4817b2a482e718349", 0xbe) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(r3, &(0x7f0000000500), 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 1.336803262s ago: executing program 2 (id=714): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xebb, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xe85, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453"}}}}}, 0x0) 1.285029315s ago: executing program 3 (id=715): setns(0xc9, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c000280080001"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000041000103030000000000000003"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10040, 0x0) 1.04503836s ago: executing program 2 (id=716): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000040)="639e", 0x2) 748.516238ms ago: executing program 4 (id=717): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 730.755228ms ago: executing program 2 (id=718): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 729.964458ms ago: executing program 1 (id=719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x5, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 611.47363ms ago: executing program 3 (id=720): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 562.004393ms ago: executing program 4 (id=721): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2004000) 529.745663ms ago: executing program 0 (id=722): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x131c4f, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 512.660844ms ago: executing program 2 (id=723): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) close(0x3) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) 379.283119ms ago: executing program 4 (id=724): sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x44842, 0x1ef) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffe82) 306.114823ms ago: executing program 0 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$inet6(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) read(r6, &(0x7f0000000100)=""/43, 0x2b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 299.5643ms ago: executing program 1 (id=726): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xebb, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xe85, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 231.590142ms ago: executing program 1 (id=727): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000043c0)=ANY=[@ANYRES32=0x0], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) readv(r0, &(0x7f0000001740)=[{0x0}, {&(0x7f00000016c0)=""/115, 0x73}], 0x2) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff8) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x80008}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 60.221085ms ago: executing program 4 (id=728): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000040)="639e", 0x2) 0s ago: executing program 4 (id=729): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="3078353637380a95349a86b20d25de8024c7d88700da093534e03a932a9ff73cdbd9d33302b451eea5abe67c0548c0060242058f1409ef5c1b749f34788a433eaf24684b181b233d6c66f15a3100bf9fde65e484a31150327e2745a3442cd32d6b7ce88969b79afd77b146a75282b8f8bfc0a73dc83882eaf27d458198cd085af9040e781237af05d8df5939273fc40e5f44c19744249018ad5df4696e890b94f0736b5474aa9dfe6f08348eaa21ef073cd979ce18c4817b2a482e718349", 0xbe) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(r3, &(0x7f0000000500), 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) kernel console output (not intermixed with test programs): [ 95.983726][ T6468] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.983821][ T6468] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 96.647902][ T5710] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state. [ 96.647989][ T5710] dvb-usb: bulk message failed: -8 (3/0) [ 96.652951][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.656353][ T5710] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner) [ 96.656393][ T5710] usb 5-1: media controller created [ 96.678450][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.696361][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 96.696400][ T31] audit: type=1400 audit(1788365086.030:352): avc: denied { sys_module } for pid=6492 comm="syz.1.222" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 96.778493][ T6491] kvm [6490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 96.782982][ T6491] kvm [6490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 96.797016][ T5695] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.967903][ T5695] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.979754][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.979800][ T5695] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 97.006690][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.015425][ T5695] usb 3-1: Product: syz [ 97.019712][ T5695] usb 3-1: Manufacturer: syz [ 97.024384][ T5695] usb 3-1: SerialNumber: syz [ 97.144539][ T31] audit: type=1400 audit(1788365086.480:353): avc: denied { read write } for pid=6511 comm="syz.1.226" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 97.169505][ T31] audit: type=1400 audit(1788365086.510:354): avc: denied { open } for pid=6511 comm="syz.1.226" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 97.240877][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.252570][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.279100][ T5695] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 97.296089][ T5695] usb 3-1: USB disconnect, device number 5 [ 97.311500][ T31] audit: type=1400 audit(1788365086.650:355): avc: denied { create } for pid=6515 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 97.332972][ T31] audit: type=1400 audit(1788365086.650:356): avc: denied { setopt } for pid=6515 comm="syz.1.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 97.619760][ T31] audit: type=1400 audit(1788365086.960:357): avc: denied { read write } for pid=6521 comm="syz.0.230" name="md0" dev="devtmpfs" ino=2862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.619815][ T31] audit: type=1400 audit(1788365086.960:358): avc: denied { open } for pid=6521 comm="syz.0.230" path="/50/dev/md0" dev="devtmpfs" ino=2862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.699587][ T6523] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.831686][ T6527] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.852588][ T6527] block device autoloading is deprecated and will be removed. [ 97.965324][ T5695] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 98.161028][ T5695] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.178009][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.188810][ T5695] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 98.224736][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.233127][ T5695] usb 3-1: Product: syz [ 98.233209][ T5695] usb 3-1: Manufacturer: syz [ 98.233281][ T5695] usb 3-1: SerialNumber: syz [ 98.540394][ T6539] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 98.540420][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.569145][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 98.575582][ T31] audit: type=1400 audit(1788365087.860:359): avc: denied { read write } for pid=6537 comm="syz.1.235" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.575658][ T31] audit: type=1400 audit(1788365087.860:360): avc: denied { open } for pid=6537 comm="syz.1.235" path="/41/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 98.590847][ T5710] dvb-usb: bulk message failed: -8 (6/0) [ 98.591012][ T5710] dvb-usb: bulk message failed: -8 (6/0) [ 98.591072][ T5710] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner' [ 98.598050][ T5710] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 98.625910][ T5607] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.629165][ T5710] dvb-usb: schedule remote query interval to 150 msecs. [ 98.629182][ T5710] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected. [ 98.723002][ T5695] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 98.734413][ T5695] usb 3-1: USB disconnect, device number 6 [ 98.751105][ T6540] vhci_hcd: connection closed [ 98.761168][ T6531] vhci_hcd vhci_hcd.1: stop threads [ 98.777099][ T6531] vhci_hcd vhci_hcd.1: release socket [ 98.784552][ T6531] vhci_hcd vhci_hcd.1: disconnect device [ 98.807084][ T5607] usb 4-1: Using ep0 maxpacket: 8 [ 98.819911][ T5607] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.834662][ T5607] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 98.834718][ T5607] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.834749][ T5607] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.834773][ T5607] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 98.834796][ T5607] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 98.834819][ T5607] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.834857][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.923038][ T5709] dvb-usb: bulk message failed: -8 (1/0) [ 98.923086][ T5709] dvb-usb: error while querying for an remote control event. [ 98.938832][ T5710] usb 5-1: USB disconnect, device number 6 [ 98.948461][ T5607] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 99.023550][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.238'. [ 99.117642][ T5710] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected. [ 99.149048][ T31] audit: type=1400 audit(1788365088.490:361): avc: denied { ioctl } for pid=6533 comm="syz.3.233" path="/dev/raw-gadget" dev="devtmpfs" ino=818 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.495196][ T5710] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.645155][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 99.653037][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.653099][ T5710] usb 5-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice=30.b3 [ 99.673439][ T5710] usb 5-1: config 127 has an invalid interface number: 39 but max is 0 [ 99.673477][ T5710] usb 5-1: config 127 has no interface number 0 [ 99.673524][ T5710] usb 5-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 99.673553][ T5710] usb 5-1: config 127 interface 39 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 32 [ 99.673578][ T5710] usb 5-1: config 127 interface 39 altsetting 11 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 99.673605][ T5710] usb 5-1: config 127 interface 39 altsetting 11 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 99.673630][ T5710] usb 5-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 99.673647][ T5710] usb 5-1: config 127 interface 39 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 99.673666][ T5710] usb 5-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 99.673686][ T5710] usb 5-1: config 127 interface 39 altsetting 11 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 99.673711][ T5710] usb 5-1: config 127 interface 39 has no altsetting 0 [ 99.701881][ T6579] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.782282][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.782309][ T5710] usb 5-1: Product: syz [ 99.782322][ T5710] usb 5-1: Manufacturer: syz [ 99.782336][ T5710] usb 5-1: SerialNumber: syz [ 99.833501][ T6550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.833848][ T6550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.978493][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.249'. [ 101.059952][ T5710] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state. [ 101.060038][ T5710] dvb-usb: bulk message failed: -8 (3/0) [ 101.065962][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.068062][ T5710] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner) [ 101.068100][ T5710] usb 5-1: media controller created [ 101.075870][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.333582][ T6604] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.397833][ T6606] loop0: detected capacity change from 0 to 128 [ 101.471378][ T1626] usb 4-1: USB disconnect, device number 5 [ 101.493302][ T6607] md: invalid raid superblock magic on ram2 [ 101.493329][ T6607] md: ram2 does not have a valid v0.0 superblock, not importing! [ 101.493402][ T6607] md: md_import_device returned -22 [ 101.509782][ T6606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.650777][ T6618] fuse: Bad value for 'fd' [ 101.712247][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 101.712284][ T31] audit: type=1400 audit(1788365091.050:368): avc: denied { write } for pid=6620 comm="syz.2.258" name="core" dev="configfs" ino=3563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.746473][ T31] audit: type=1400 audit(1788365091.080:369): avc: denied { write } for pid=6620 comm="syz.2.258" name="rd_mcp_0" dev="configfs" ino=12533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.801440][ T6625] jffs2: notice: (6625) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.831915][ T31] audit: type=1400 audit(1788365091.170:370): avc: denied { write } for pid=6624 comm="syz.3.262" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.854299][ T31] audit: type=1400 audit(1788365091.190:371): avc: denied { add_name } for pid=6624 comm="syz.3.262" name="f1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.875970][ T31] audit: type=1400 audit(1788365091.220:372): avc: denied { create } for pid=6624 comm="syz.3.262" name="f1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.900268][ T31] audit: type=1400 audit(1788365091.240:373): avc: denied { read write open } for pid=6624 comm="syz.3.262" path="/54/mnt/f1" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.901116][ T6629] CUSE: info not properly terminated [ 101.968645][ T6625] jffs2: notice: (6625) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 102.150255][ T5710] dvb-usb: bulk message failed: -8 (6/0) [ 102.150457][ T5710] dvb-usb: bulk message failed: -8 (6/0) [ 102.150511][ T5710] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner' [ 102.158612][ T5710] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 102.163003][ T5710] dvb-usb: schedule remote query interval to 150 msecs. [ 102.163021][ T5710] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected. [ 102.192270][ T5710] usb 5-1: USB disconnect, device number 7 [ 103.095124][ T31] audit: type=1400 audit(1788365092.430:374): avc: denied { bind } for pid=6652 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.118243][ T31] audit: type=1400 audit(1788365092.460:375): avc: denied { write } for pid=6652 comm="syz.3.270" path="socket:[13360]" dev="sockfs" ino=13360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.142485][ T6653] Bluetooth: ISO socket layer initialized [ 103.152985][ T1626] dvb-usb: bulk message failed: -19 (1/0) [ 103.153028][ T1626] dvb-usb: error while querying for an remote control event. [ 103.170965][ T31] audit: type=1400 audit(1788365092.510:376): avc: denied { setopt } for pid=6652 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.630198][ T5710] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected. [ 103.806498][ T6667] Need at least one configuration in g1. [ 103.806598][ T6667] udc dummy_udc.0: failed to start g1: -22 [ 103.806616][ T6667] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 103.807127][ T6667] UDC core: g1: couldn't find an available UDC or it's busy [ 104.107902][ T31] audit: type=1400 audit(1788365093.450:377): avc: denied { read } for pid=6677 comm="syz.0.280" name="sg0" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.132279][ T6678] program syz.0.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.174802][ T6680] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.235886][ T6680] md: invalid raid superblock magic on ram2 [ 104.235918][ T6680] md: ram2 does not have a valid v0.0 superblock, not importing! [ 104.235966][ T6680] md: md_import_device returned -22 [ 104.293820][ T6686] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 104.293846][ T6686] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 104.294256][ T6686] vhci_hcd vhci_hcd.0: Device attached [ 104.296865][ T6687] vhci_hcd: connection closed [ 104.297136][ T3301] vhci_hcd vhci_hcd.3: stop threads [ 104.297155][ T3301] vhci_hcd vhci_hcd.3: release socket [ 104.297170][ T3301] vhci_hcd vhci_hcd.3: disconnect device [ 104.426075][ T6692] kvm: failed to shrink bus, removing it completely [ 104.445176][ T5710] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.595161][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 104.597020][ T5710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.597054][ T5710] usb 1-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice=30.b3 [ 104.597855][ T5710] usb 1-1: config 127 has an invalid interface number: 39 but max is 0 [ 104.597876][ T5710] usb 1-1: config 127 has no interface number 0 [ 104.597904][ T5710] usb 1-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 104.597922][ T5710] usb 1-1: config 127 interface 39 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 32 [ 104.597942][ T5710] usb 1-1: config 127 interface 39 altsetting 11 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 104.597965][ T5710] usb 1-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 104.597982][ T5710] usb 1-1: config 127 interface 39 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 104.597999][ T5710] usb 1-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 104.598016][ T5710] usb 1-1: config 127 interface 39 altsetting 11 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 104.598035][ T5710] usb 1-1: config 127 interface 39 has no altsetting 0 [ 104.600067][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.600085][ T5710] usb 1-1: Product: syz [ 104.600097][ T5710] usb 1-1: Manufacturer: syz [ 104.600109][ T5710] usb 1-1: SerialNumber: syz [ 104.605593][ T6683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.605686][ T6683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.615172][ T2315] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.745255][ T5709] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.765761][ T2315] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 104.768305][ T2315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.768326][ T2315] usb 3-1: Product: syz [ 104.768338][ T2315] usb 3-1: Manufacturer: syz [ 104.768350][ T2315] usb 3-1: SerialNumber: syz [ 104.895998][ T5709] usb 5-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 104.906100][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.909031][ T1626] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.979326][ T2315] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 104.979401][ T2315] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 104.979417][ T2315] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 104.985173][ T5709] rc_core: IR keymap rc-rc6-mce not found [ 104.985188][ T5709] Registered IR keymap rc-empty [ 104.997241][ T2315] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 105.055278][ T1626] usb 2-1: Using ep0 maxpacket: 16 [ 105.056114][ T1626] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 105.057135][ T1626] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.057175][ T1626] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.057194][ T1626] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.057239][ T1626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.062888][ T1626] usb 2-1: config 0 descriptor?? [ 105.117721][ T6706] UDC core: g1: couldn't find an available UDC or it's busy [ 105.229889][ T5710] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state. [ 105.229977][ T5710] dvb-usb: bulk message failed: -8 (3/0) [ 105.253295][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.254477][ T5710] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner) [ 105.254519][ T5710] usb 1-1: media controller created [ 105.278577][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.278935][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.285871][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.287971][ T1626] usbhid 2-1:0.0: can't add hid device: -71 [ 105.288071][ T1626] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 105.295933][ T1626] usb 2-1: USB disconnect, device number 5 [ 105.355989][ T6711] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.445250][ T6711] md: invalid raid superblock magic on ram2 [ 105.446017][ T6711] md: ram2 does not have a valid v0.0 superblock, not importing! [ 105.446077][ T6711] md: md_import_device returned -22 [ 105.688359][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.688716][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.698806][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.700121][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.725167][ T1626] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.875596][ T1626] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 105.876622][ T1626] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.876664][ T1626] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.876681][ T1626] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.876704][ T1626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.879335][ T1626] usb 2-1: config 0 descriptor?? [ 106.065857][ T5709] mceusb 5-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 106.070274][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.111516][ T5695] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 106.123371][ T5695] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 106.134515][ T6731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.135186][ T3301] wlan1: authenticated [ 106.140579][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.165715][ T55] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 106.275975][ T55] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 106.290970][ T1626] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0001/input/input11 [ 106.333815][ T1626] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 106.385139][ T1160] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 106.391944][ T5710] dvb-usb: bulk message failed: -8 (6/0) [ 106.392167][ T5710] dvb-usb: bulk message failed: -8 (6/0) [ 106.392229][ T5710] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner' [ 106.399633][ T5710] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 106.401776][ T5710] dvb-usb: schedule remote query interval to 150 msecs. [ 106.401792][ T5710] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected. [ 106.426952][ T5710] usb 1-1: USB disconnect, device number 7 [ 106.495457][ T1160] wlan1: association with 08:02:11:00:00:00 timed out [ 106.519731][ T1626] usb 2-1: USB disconnect, device number 6 [ 106.645654][ T5710] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected. [ 106.823021][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.305'. [ 106.823046][ T6743] tipc: Started in network mode [ 106.823369][ T6743] tipc: Node identity 4, cluster identity 4711 [ 106.823380][ T6743] tipc: Node number set to 4 [ 106.922435][ T6745] FAULT_INJECTION: forcing a failure. [ 106.922435][ T6745] name fail_futex, interval 1, probability 0, space 0, times 0 [ 106.924162][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 106.924176][ T31] audit: type=1400 audit(1788365096.260:382): avc: denied { mounton } for pid=6744 comm="syz.0.307" path="/68/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 106.933460][ T6747] 9pnet_virtio: no channels available for device 127.0.0.1 [ 106.938861][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT(full) [ 106.938884][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 106.938895][ T6745] Call Trace: [ 106.938901][ T6745] [ 106.938907][ T6745] dump_stack_lvl+0x100/0x190 [ 106.938936][ T6745] should_fail_ex.cold+0x5/0xa [ 106.938960][ T6745] get_futex_key+0x1d0/0x14f0 [ 106.938985][ T6745] ? __pfx_get_futex_key+0x10/0x10 [ 106.939012][ T6745] futex_wake+0xf4/0x5e0 [ 106.939039][ T6745] ? __pfx_futex_wake+0x10/0x10 [ 106.939061][ T6745] ? kasan_quarantine_put+0x104/0x240 [ 106.939081][ T6745] ? putname+0xb1/0x110 [ 106.939098][ T6745] ? kmem_cache_free+0x127/0x6c0 [ 106.939125][ T6745] do_futex+0x2b2/0x440 [ 106.939147][ T6745] ? __pfx_do_futex+0x10/0x10 [ 106.939165][ T6745] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.939191][ T6745] __x64_sys_futex+0x34f/0x4d0 [ 106.939212][ T6745] ? __x64_sys_openat+0x12d/0x210 [ 106.939232][ T6745] ? __pfx___x64_sys_futex+0x10/0x10 [ 106.939261][ T6745] do_syscall_64+0x123/0x790 [ 106.939282][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.939298][ T6745] RIP: 0033:0x7ffa74b9e159 [ 106.939312][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.939326][ T6745] RSP: 002b:00007ffa72df60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 106.939343][ T6745] RAX: ffffffffffffffda RBX: 00007ffa74e25fa8 RCX: 00007ffa74b9e159 [ 106.939354][ T6745] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffa74e25fac [ 106.939364][ T6745] RBP: 00007ffa74e25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 106.939373][ T6745] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 106.939383][ T6745] R13: 00007ffa74e26038 R14: 00007ffd8e7716f0 R15: 00007ffd8e7717d8 [ 106.939403][ T6745] [ 107.106322][ T5709] mceusb 5-1:1.0: Error: mce write timed out (expire = 100 (1000ms)) [ 107.127971][ T5709] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/rc/rc0 [ 107.136700][ T5709] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/rc/rc0/input10 [ 107.391778][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.405584][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.417352][ T5800] usb 3-1: USB disconnect, device number 7 [ 107.435184][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.442894][ T5695] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.457004][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.475495][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.497998][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.517498][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.535540][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.557612][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.575441][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.596271][ T5709] mceusb 5-1:1.0: Error: mce write urb status = -71 [ 107.605197][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 107.612063][ T5695] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.612124][ T5695] usb 2-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice=30.b3 [ 107.612908][ T5695] usb 2-1: config 127 has an invalid interface number: 39 but max is 0 [ 107.612928][ T5695] usb 2-1: config 127 has no interface number 0 [ 107.612958][ T5695] usb 2-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 107.612977][ T5695] usb 2-1: config 127 interface 39 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 32 [ 107.612999][ T5695] usb 2-1: config 127 interface 39 altsetting 11 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 107.613022][ T5695] usb 2-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 107.613058][ T5695] usb 2-1: config 127 interface 39 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 107.613082][ T5695] usb 2-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 107.613098][ T5695] usb 2-1: config 127 interface 39 altsetting 11 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 107.613118][ T5695] usb 2-1: config 127 interface 39 has no altsetting 0 [ 107.614688][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.614705][ T5695] usb 2-1: Product: syz [ 107.614716][ T5695] usb 2-1: Manufacturer: syz [ 107.614727][ T5695] usb 2-1: SerialNumber: syz [ 107.623341][ T6754] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.623465][ T6754] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.770161][ T5709] mceusb 5-1:1.0: Registered with mce emulator interface version 1 [ 107.770194][ T5709] mceusb 5-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 107.773628][ T5709] usb 5-1: USB disconnect, device number 8 [ 108.022311][ T31] audit: type=1400 audit(1788365097.360:383): avc: denied { write } for pid=6774 comm="syz.3.316" name="dlm" dev="configfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.042172][ T6777] mmap: syz.4.317 (6777) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.062925][ T31] audit: type=1800 audit(1788365097.400:384): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.316" name="scan_secs" dev="configfs" ino=13706 res=0 errno=0 [ 108.273349][ T5695] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state. [ 108.273438][ T5695] dvb-usb: bulk message failed: -8 (3/0) [ 108.302968][ T5695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.316495][ T5695] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner) [ 108.324637][ T5695] usb 2-1: media controller created [ 108.342058][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.492707][ T6796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.535155][ T1626] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.691643][ T6807] xt_CONNSECMARK: invalid mode: 66 [ 108.695743][ T1626] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 108.698589][ T1626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.698610][ T1626] usb 5-1: Product: syz [ 108.698628][ T1626] usb 5-1: Manufacturer: syz [ 108.698640][ T1626] usb 5-1: SerialNumber: syz [ 108.727937][ T31] audit: type=1400 audit(1788365098.070:385): avc: denied { write } for pid=6799 comm="syz.3.328" name="configs" dev="configfs" ino=6921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.728408][ T31] audit: type=1400 audit(1788365098.070:386): avc: denied { write } for pid=6799 comm="syz.3.328" name="strings" dev="configfs" ino=13031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.733754][ T31] audit: type=1400 audit(1788365098.070:387): avc: denied { write } for pid=6799 comm="syz.3.328" name="c.1" dev="configfs" ino=13030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.733798][ T31] audit: type=1400 audit(1788365098.070:388): avc: denied { create } for pid=6799 comm="syz.3.328" name="ecm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 108.741793][ T31] audit: type=1400 audit(1788365098.080:389): avc: denied { write } for pid=6799 comm="syz.3.328" name="c.1" dev="configfs" ino=13030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.922294][ T1626] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 108.922357][ T1626] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 108.922375][ T1626] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 108.943831][ T1626] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 109.119416][ T31] audit: type=1400 audit(1788365098.460:390): avc: denied { create } for pid=6823 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.140499][ T31] audit: type=1400 audit(1788365098.480:391): avc: denied { write } for pid=6823 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.427931][ T5695] dvb-usb: bulk message failed: -8 (6/0) [ 109.428126][ T5695] dvb-usb: bulk message failed: -8 (6/0) [ 109.428206][ T5695] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner' [ 109.453423][ T5695] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 109.468754][ T5695] dvb-usb: schedule remote query interval to 150 msecs. [ 109.468790][ T5695] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected. [ 109.499063][ T5695] usb 2-1: USB disconnect, device number 7 [ 109.554956][ T5695] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected. [ 109.591706][ T6832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.789969][ T6832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.928124][ T6832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.029745][ T6832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.095197][ T5790] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.266368][ T5790] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 110.276814][ T5790] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 110.276849][ T5790] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.286921][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.305296][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 110.305334][ T5790] usb 3-1: Product: syz [ 110.305356][ T5790] usb 3-1: Manufacturer: syz [ 110.305371][ T5790] usb 3-1: SerialNumber: syz [ 110.315713][ T65] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.345227][ T5790] usb 3-1: config 0 descriptor?? [ 110.361749][ T5790] usb 3-1: selecting invalid altsetting 0 [ 110.405263][ T6531] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.405870][ T6531] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.475291][ T5607] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.607259][ T25] usb 3-1: USB disconnect, device number 8 [ 110.635225][ T5607] usb 4-1: Using ep0 maxpacket: 16 [ 110.644633][ T5607] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.644693][ T5607] usb 4-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice=30.b3 [ 110.664759][ T5607] usb 4-1: config 127 has an invalid interface number: 39 but max is 0 [ 110.664796][ T5607] usb 4-1: config 127 has no interface number 0 [ 110.664842][ T5607] usb 4-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 110.664864][ T5607] usb 4-1: config 127 interface 39 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 32 [ 110.664900][ T5607] usb 4-1: config 127 interface 39 altsetting 11 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 110.664928][ T5607] usb 4-1: config 127 interface 39 altsetting 11 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 110.664953][ T5607] usb 4-1: config 127 interface 39 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 110.664974][ T5607] usb 4-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 110.664994][ T5607] usb 4-1: config 127 interface 39 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 110.665014][ T5607] usb 4-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 110.665035][ T5607] usb 4-1: config 127 interface 39 altsetting 11 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 110.727848][ T5607] usb 4-1: config 127 interface 39 has no altsetting 0 [ 110.792241][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.792267][ T5607] usb 4-1: Product: syz [ 110.792281][ T5607] usb 4-1: Manufacturer: syz [ 110.792294][ T5607] usb 4-1: SerialNumber: syz [ 110.818620][ T6847] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 110.818729][ T6847] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 111.206396][ T6854] loop0: detected capacity change from 0 to 128 [ 111.216914][ T6854] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 111.357196][ T5710] usb 5-1: USB disconnect, device number 9 [ 111.440514][ T5607] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state. [ 111.450435][ T5607] dvb-usb: bulk message failed: -8 (3/0) [ 111.468137][ T5607] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.479778][ T5607] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner) [ 111.479843][ T5607] usb 4-1: media controller created [ 111.511138][ T5607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.581869][ T6865] xt_CONNSECMARK: invalid mode: 66 [ 112.524030][ T6877] FAULT_INJECTION: forcing a failure. [ 112.524030][ T6877] name fail_futex, interval 1, probability 0, space 0, times 0 [ 112.538385][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.2.357 Not tainted syzkaller #0 PREEMPT(full) [ 112.538414][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 112.538427][ T6877] Call Trace: [ 112.538434][ T6877] [ 112.538443][ T6877] dump_stack_lvl+0x100/0x190 [ 112.538475][ T6877] should_fail_ex.cold+0x5/0xa [ 112.538501][ T6877] get_futex_key+0x1d0/0x14f0 [ 112.538527][ T6877] ? __pfx_get_futex_key+0x10/0x10 [ 112.538558][ T6877] futex_wake+0xf4/0x5e0 [ 112.538589][ T6877] ? __pfx_futex_wake+0x10/0x10 [ 112.538615][ T6877] ? kasan_quarantine_put+0x104/0x240 [ 112.538639][ T6877] ? putname+0xb1/0x110 [ 112.538661][ T6877] ? kmem_cache_free+0x127/0x6c0 [ 112.538695][ T6877] do_futex+0x2b2/0x440 [ 112.538720][ T6877] ? __pfx_do_futex+0x10/0x10 [ 112.538742][ T6877] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.538772][ T6877] __x64_sys_futex+0x34f/0x4d0 [ 112.538798][ T6877] ? __x64_sys_openat+0x12d/0x210 [ 112.538823][ T6877] ? __pfx___x64_sys_futex+0x10/0x10 [ 112.538857][ T6877] do_syscall_64+0x123/0x790 [ 112.538882][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.538901][ T6877] RIP: 0033:0x7fe90939e159 [ 112.538917][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.538934][ T6877] RSP: 002b:00007fe90a1d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.538953][ T6877] RAX: ffffffffffffffda RBX: 00007fe909625fa8 RCX: 00007fe90939e159 [ 112.538966][ T6877] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe909625fac [ 112.538978][ T6877] RBP: 00007fe909625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 112.538990][ T6877] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 112.539007][ T6877] R13: 00007fe909626038 R14: 00007ffe62419820 R15: 00007ffe62419908 [ 112.539032][ T6877] [ 112.548580][ T5607] dvb-usb: bulk message failed: -8 (6/0) [ 112.548770][ T5607] dvb-usb: bulk message failed: -8 (6/0) [ 112.548842][ T5607] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner' [ 112.677775][ T5607] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 112.765198][ T5607] dvb-usb: schedule remote query interval to 150 msecs. [ 112.772260][ T5607] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected. [ 112.814465][ T5607] usb 4-1: USB disconnect, device number 6 [ 112.875781][ T5710] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.886819][ T5607] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected. [ 113.030081][ T5710] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.031967][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.031994][ T5710] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 113.033896][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.033915][ T5710] usb 5-1: Product: syz [ 113.033927][ T5710] usb 5-1: Manufacturer: syz [ 113.033939][ T5710] usb 5-1: SerialNumber: syz [ 113.255108][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.266014][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.270808][ T5710] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 113.294609][ T5710] usb 5-1: USB disconnect, device number 10 [ 113.447348][ T5709] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.587000][ T1626] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.605645][ T5709] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 113.608088][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.608108][ T5709] usb 3-1: Product: syz [ 113.608119][ T5709] usb 3-1: Manufacturer: syz [ 113.608129][ T5709] usb 3-1: SerialNumber: syz [ 113.715299][ T5710] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 113.745278][ T1626] usb 4-1: Using ep0 maxpacket: 16 [ 113.752421][ T1626] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.752484][ T1626] usb 4-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice=30.b3 [ 113.773824][ T1626] usb 4-1: config 127 has an invalid interface number: 39 but max is 0 [ 113.773884][ T1626] usb 4-1: config 127 has no interface number 0 [ 113.773929][ T1626] usb 4-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 113.773955][ T1626] usb 4-1: config 127 interface 39 altsetting 11 bulk endpoint 0x9 has invalid maxpacket 32 [ 113.773983][ T1626] usb 4-1: config 127 interface 39 altsetting 11 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 113.774037][ T1626] usb 4-1: config 127 interface 39 altsetting 11 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 113.774065][ T1626] usb 4-1: config 127 interface 39 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 113.774089][ T1626] usb 4-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 113.774111][ T1626] usb 4-1: config 127 interface 39 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 113.774134][ T1626] usb 4-1: config 127 interface 39 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 113.774176][ T1626] usb 4-1: config 127 interface 39 altsetting 11 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 113.774201][ T1626] usb 4-1: config 127 interface 39 has no altsetting 0 [ 113.849710][ T5709] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 113.849773][ T5709] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 113.849792][ T5709] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 113.855433][ T1626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.855452][ T1626] usb 4-1: Product: syz [ 113.855465][ T1626] usb 4-1: Manufacturer: syz [ 113.855477][ T1626] usb 4-1: SerialNumber: syz [ 113.860385][ T6893] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.860480][ T6893] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.814003][ T5709] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 114.823269][ T1626] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state. [ 114.823345][ T1626] dvb-usb: bulk message failed: -8 (3/0) [ 114.831521][ T1626] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.832549][ T1626] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner) [ 114.832589][ T1626] usb 4-1: media controller created [ 114.848182][ T5710] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.857310][ T1626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.012864][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.012925][ T5710] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 115.046897][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.046939][ T5710] usb 5-1: Product: syz [ 115.046955][ T5710] usb 5-1: Manufacturer: syz [ 115.046967][ T5710] usb 5-1: SerialNumber: syz [ 115.335214][ T5607] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.345289][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 115.460775][ T5710] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 115.466489][ T5710] usb 5-1: USB disconnect, device number 11 [ 115.490248][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 115.490289][ T31] audit: type=1400 audit(1788365104.830:395): avc: denied { connect } for pid=6925 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.497491][ T5607] usb 2-1: Using ep0 maxpacket: 8 [ 115.498816][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.499219][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 115.499242][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.500028][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.500044][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.502375][ T10] usb 1-1: string descriptor 0 read error: -22 [ 115.502469][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.513133][ T10] usb 1-1: 0:2 : does not exist [ 115.549826][ T5607] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.569710][ T5607] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 115.569754][ T5607] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.569775][ T5607] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.569795][ T5607] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.569814][ T5607] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.569845][ T5607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.671848][ T31] audit: type=1800 audit(1788365105.010:396): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.378" name="scan_secs" dev="configfs" ino=14039 res=0 errno=0 [ 115.874762][ T5607] usb 2-1: usb_control_msg returned -32 [ 115.874815][ T5607] usbtmc 2-1:16.0: can't read capabilities [ 115.884443][ T31] audit: type=1400 audit(1788365105.220:397): avc: denied { create } for pid=6936 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.890111][ T31] audit: type=1400 audit(1788365105.230:398): avc: denied { connect } for pid=6936 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.897818][ T31] audit: type=1400 audit(1788365105.240:399): avc: denied { listen } for pid=6936 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.959147][ T5607] usb 2-1: USB disconnect, device number 8 [ 116.067953][ T1626] dvb-usb: bulk message failed: -8 (6/0) [ 116.068176][ T1626] dvb-usb: bulk message failed: -8 (6/0) [ 116.068238][ T1626] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner' [ 116.071730][ T1626] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 116.074130][ T1626] dvb-usb: schedule remote query interval to 150 msecs. [ 116.074147][ T1626] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected. [ 116.087715][ T1626] usb 4-1: USB disconnect, device number 7 [ 116.187098][ T1626] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected. [ 116.199070][ T31] audit: type=1400 audit(1788365105.540:400): avc: denied { mount } for pid=6945 comm="syz.3.386" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 116.293056][ T5607] usb 3-1: USB disconnect, device number 9 [ 116.314686][ T31] audit: type=1400 audit(1788365105.650:401): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 116.349865][ T10] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 116.362439][ T10] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 116.374878][ T10] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 116.388119][ T6955] 9p: Bad value for 'wfdno' [ 116.484405][ T10] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 116.498524][ T6961] jffs2: notice: (6961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 116.523229][ T31] audit: type=1400 audit(1788365105.860:402): avc: denied { write } for pid=6960 comm="syz.3.392" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.578166][ T10] usb 1-1: USB disconnect, device number 8 [ 116.795459][ T5607] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 116.945814][ T5607] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.956570][ T5607] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.956613][ T5607] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 116.983729][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.993316][ T5607] usb 5-1: Product: syz [ 116.993335][ T5607] usb 5-1: Manufacturer: syz [ 116.993349][ T5607] usb 5-1: SerialNumber: syz [ 117.073000][ T31] audit: type=1400 audit(1788365106.410:403): avc: denied { create } for pid=6979 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.210194][ T51] Bluetooth: hci0: Malformed Event: 0x02 [ 117.232128][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.234541][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.246747][ T1626] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.258990][ T5607] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 117.271723][ T5607] usb 5-1: USB disconnect, device number 12 [ 117.395860][ T1626] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 117.399749][ T1626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.399770][ T1626] usb 4-1: Product: syz [ 117.399782][ T1626] usb 4-1: Manufacturer: syz [ 117.399795][ T1626] usb 4-1: SerialNumber: syz [ 117.460425][ T6989] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.404'. [ 117.605168][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.614706][ T1626] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 117.614808][ T1626] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 117.614826][ T1626] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 117.627818][ T1626] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 117.775097][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 117.782669][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.784910][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 117.784946][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.784964][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.784982][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.784999][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.785028][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.796286][ T5607] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 117.956728][ T5607] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.967247][ T5607] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 117.967299][ T5607] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 117.967326][ T5607] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 117.967359][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.999561][ T25] usb 3-1: GET_CAPABILITIES returned 0 [ 117.999598][ T25] usbtmc 3-1:16.0: can't read capabilities [ 118.013420][ T5607] cdc_ether 5-1:16.0: probe with driver cdc_ether failed with error -22 [ 118.206022][ T25] usb 3-1: USB disconnect, device number 10 [ 118.384956][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.408'. [ 118.550068][ T7008] For dev_enable ops, only valid value is "1" [ 118.604190][ T31] audit: type=1400 audit(1788365107.940:404): avc: denied { ioctl } for pid=7009 comm="syz.0.412" path="socket:[14247]" dev="sockfs" ino=14247 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.636294][ T7010] overlayfs: upper fs does not support tmpfile. [ 118.835165][ T5710] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 118.945417][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 118.986722][ T5710] usb 2-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 118.987589][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.045132][ T5710] rc_core: IR keymap rc-rc6-mce not found [ 119.045164][ T5710] Registered IR keymap rc-empty [ 119.095141][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 119.095790][ T25] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 119.096590][ T25] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.096608][ T25] usb 1-1: config 0 has no interface number 0 [ 119.096635][ T25] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 119.096757][ T25] usb 1-1: config 0 interface 1 has no altsetting 0 [ 119.098346][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.098362][ T25] usb 1-1: Product: syz [ 119.098373][ T25] usb 1-1: Manufacturer: syz [ 119.098386][ T25] usb 1-1: SerialNumber: syz [ 119.101349][ T25] usb 1-1: config 0 descriptor?? [ 119.311601][ T25] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 119.311951][ T25] cx231xx 1-1:0.1: Failed to read PCB config [ 119.311990][ T25] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 119.317743][ T25] usb 1-1: USB disconnect, device number 9 [ 119.398038][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.405519][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.408431][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.409977][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.612909][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.625363][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.645755][ T5710] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0 [ 119.649559][ T5710] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0/input16 [ 119.672830][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.686746][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.706296][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.725490][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.746559][ T1626] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.748001][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.765389][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.786348][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.805382][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.819348][ T10] usb 5-1: USB disconnect, device number 13 [ 119.829479][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.845402][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.865543][ T5710] mceusb 2-1:1.0: Error: mce write urb status = -71 [ 119.887637][ T5710] mceusb 2-1:1.0: Registered with mce emulator interface version 1 [ 119.890667][ T5710] mceusb 2-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 119.896258][ T1626] usb 1-1: Using ep0 maxpacket: 32 [ 119.896520][ T5710] usb 2-1: USB disconnect, device number 9 [ 119.898429][ T1626] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 119.899249][ T1626] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.899269][ T1626] usb 1-1: config 0 has no interface number 0 [ 119.899296][ T1626] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 119.899313][ T1626] usb 1-1: config 0 interface 1 has no altsetting 0 [ 119.900922][ T1626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.900941][ T1626] usb 1-1: Product: syz [ 119.900952][ T1626] usb 1-1: Manufacturer: syz [ 119.900965][ T1626] usb 1-1: SerialNumber: syz [ 119.904389][ T1626] usb 1-1: config 0 descriptor?? [ 120.062232][ T10] usb 4-1: USB disconnect, device number 8 [ 120.128082][ T1626] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 120.133784][ T1626] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 120.192845][ T7049] 9p: Bad value for 'rfdno' [ 120.236803][ T1626] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 120.237116][ T1626] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 120.237404][ T1626] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 120.237684][ T1626] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 120.237966][ T1626] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 120.237981][ T1626] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 120.252425][ T1626] i2c i2c-2: Added multiplexed i2c bus 4 [ 120.256138][ T5717] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.259539][ T1626] i2c i2c-2: Added multiplexed i2c bus 5 [ 120.259843][ T1626] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 120.259860][ T1626] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 120.277966][ T1626] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 120.336411][ T5710] usb 1-1: USB disconnect, device number 10 [ 120.405234][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 120.406722][ T5717] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 120.407918][ T5717] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024 [ 120.407946][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 120.409496][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 120.409516][ T5717] usb 3-1: Product: syz [ 120.409528][ T5717] usb 3-1: Manufacturer: syz [ 120.420745][ T5717] iuu_phoenix 3-1:1.0: iuu_phoenix converter detected [ 120.423663][ T5717] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 120.467109][ T1626] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 120.555140][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 120.555642][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.556484][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 120.556517][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.556535][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.556554][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.556574][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.556605][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.616996][ T1626] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 120.617923][ T1626] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 120.617946][ T1626] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.619595][ T1626] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 120.619615][ T1626] usb 5-1: Product: syz [ 120.619627][ T1626] usb 5-1: Manufacturer: syz [ 120.619640][ T1626] usb 5-1: SerialNumber: syz [ 120.630575][ T1626] usb 5-1: config 0 descriptor?? [ 120.644796][ T1626] usb 5-1: selecting invalid altsetting 0 [ 120.764444][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 120.764490][ T10] usbtmc 4-1:16.0: can't read capabilities [ 120.840339][ T5800] usb 5-1: USB disconnect, device number 14 [ 120.913655][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 120.920384][ T31] audit: type=1400 audit(1788365110.250:409): avc: denied { write } for pid=7053 comm="syz.0.430" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.943243][ T31] audit: type=1400 audit(1788365110.260:410): avc: denied { transfer } for pid=7053 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 120.979491][ T1626] usb 4-1: USB disconnect, device number 9 [ 121.001009][ T31] audit: type=1400 audit(1788365110.340:411): avc: denied { read } for pid=7055 comm="syz.0.431" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.013136][ T7056] FAULT_INJECTION: forcing a failure. [ 121.013136][ T7056] name failslab, interval 1, probability 0, space 0, times 0 [ 121.013170][ T7056] CPU: 0 UID: 0 PID: 7056 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT(full) [ 121.013190][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 121.013202][ T7056] Call Trace: [ 121.013209][ T7056] [ 121.013217][ T7056] dump_stack_lvl+0x100/0x190 [ 121.013250][ T7056] should_fail_ex.cold+0x5/0xa [ 121.013273][ T7056] should_failslab+0xc2/0x120 [ 121.013295][ T7056] __kmalloc_noprof+0xfc/0x840 [ 121.013313][ T7056] ? tomoyo_encode2+0xfb/0x3c0 [ 121.013336][ T7056] tomoyo_encode2+0xfb/0x3c0 [ 121.013357][ T7056] tomoyo_encode+0x29/0x50 [ 121.013372][ T7056] tomoyo_realpath_from_path+0x18c/0x690 [ 121.013394][ T7056] tomoyo_check_open_permission+0x2af/0x3c0 [ 121.013418][ T7056] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 121.013449][ T7056] ? hook_file_open+0x248/0x8e0 [ 121.013484][ T7056] ? path_get+0x61/0x80 [ 121.013506][ T7056] tomoyo_file_open+0x6b/0x90 [ 121.013526][ T7056] security_file_open+0xb5/0x1e0 [ 121.013543][ T7056] do_dentry_open+0x588/0x14d0 [ 121.013565][ T7056] vfs_open+0x82/0x3f0 [ 121.013587][ T7056] path_openat+0x19fa/0x2440 [ 121.013608][ T7056] ? __pfx_path_openat+0x10/0x10 [ 121.013633][ T7056] do_file_open+0x20e/0x430 [ 121.013653][ T7056] ? __pfx_do_file_open+0x10/0x10 [ 121.013687][ T7056] ? _raw_spin_unlock+0x28/0x50 [ 121.013711][ T7056] ? alloc_fd+0x471/0x7a0 [ 121.013737][ T7056] do_sys_openat2+0x10f/0x1e0 [ 121.013757][ T7056] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.013786][ T7056] __x64_sys_openat+0x12d/0x210 [ 121.013808][ T7056] ? __pfx___x64_sys_openat+0x10/0x10 [ 121.013837][ T7056] do_syscall_64+0x123/0x790 [ 121.013858][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.013876][ T7056] RIP: 0033:0x7ffa74b9e159 [ 121.013892][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.013908][ T7056] RSP: 002b:00007ffa72df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.013925][ T7056] RAX: ffffffffffffffda RBX: 00007ffa74e25fa0 RCX: 00007ffa74b9e159 [ 121.013936][ T7056] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 121.013946][ T7056] RBP: 00007ffa74c35024 R08: 0000000000000000 R09: 0000000000000000 [ 121.013956][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.013965][ T7056] R13: 00007ffa74e26038 R14: 00007ffa74e25fa0 R15: 00007ffd8e7717d8 [ 121.013995][ T7056] [ 121.014029][ T7056] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.014352][ T31] audit: type=1400 audit(1788365110.350:412): avc: denied { open } for pid=7055 comm="syz.0.431" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.022309][ T31] audit: type=1400 audit(1788365110.360:413): avc: denied { ioctl } for pid=7055 comm="syz.0.431" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 121.417465][ T1626] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.531104][ T31] audit: type=1800 audit(1788365110.870:414): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.439" name="scan_secs" dev="configfs" ino=14667 res=0 errno=0 [ 121.576378][ T1626] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.577448][ T1626] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.577493][ T1626] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 121.583040][ T1626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.583077][ T1626] usb 1-1: Product: syz [ 121.583090][ T1626] usb 1-1: Manufacturer: syz [ 121.583102][ T1626] usb 1-1: SerialNumber: syz [ 121.635189][ T5717] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 121.751161][ T7080] 9p: Bad value for 'rfdno' [ 121.760162][ T25] usb 3-1: USB disconnect, device number 11 [ 121.779115][ T25] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 121.786249][ T5717] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 121.790854][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.790875][ T5717] usb 2-1: Product: syz [ 121.790888][ T5717] usb 2-1: Manufacturer: syz [ 121.790901][ T5717] usb 2-1: SerialNumber: syz [ 121.825825][ T25] iuu_phoenix 3-1:1.0: device disconnected [ 121.837584][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.839084][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.854414][ T1626] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 121.881418][ T1626] usb 1-1: USB disconnect, device number 11 [ 122.025986][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 122.026048][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 122.026066][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 122.039157][ T5717] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 122.314219][ T31] audit: type=1400 audit(1788365111.650:415): avc: denied { name_connect } for pid=7087 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 122.337033][ T1626] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 122.486462][ T1626] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 122.487301][ T1626] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 122.487321][ T1626] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 122.487345][ T1626] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 122.487375][ T1626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.494799][ T1626] cdc_ether 1-1:16.0: probe with driver cdc_ether failed with error -22 [ 122.874413][ T31] audit: type=1400 audit(1788365112.210:416): avc: denied { map } for pid=7109 comm="syz.4.455" path="socket:[15389]" dev="sockfs" ino=15389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 124.065963][ T31] audit: type=1400 audit(1788365113.400:417): avc: denied { write } for pid=7156 comm="syz.2.474" name="subsystems" dev="configfs" ino=3559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.236712][ T7165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.290605][ T1626] usb 1-1: USB disconnect, device number 12 [ 124.299985][ T7165] md: loop0 has zero or unknown size, marking faulty! [ 124.463196][ T25] usb 2-1: USB disconnect, device number 10 [ 124.832266][ T7197] jffs2: notice: (7197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 124.857593][ T31] audit: type=1400 audit(1788365114.200:418): avc: denied { write } for pid=7193 comm="syz.4.489" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.125787][ T7204] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.191170][ T7204] md: loop0 has zero or unknown size, marking faulty! [ 125.321511][ T51] Bluetooth: hci0: Malformed Event: 0x02 [ 125.574977][ T7225] Bluetooth: MGMT ver 1.23 [ 125.952694][ T7252] netlink: 68 bytes leftover after parsing attributes in process `syz.4.514'. [ 126.067477][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 126.067519][ T31] audit: type=1400 audit(1788365115.410:422): avc: denied { append } for pid=7258 comm="syz.3.516" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 126.539146][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'. [ 126.539174][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.528'. [ 126.586241][ T1626] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 126.628041][ T31] audit: type=1400 audit(1788365115.970:423): avc: denied { write } for pid=7289 comm="syz.1.529" name="instances" dev="tracefs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.652477][ T31] audit: type=1400 audit(1788365115.990:424): avc: denied { add_name } for pid=7289 comm="syz.1.529" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 126.652525][ T31] audit: type=1400 audit(1788365115.990:425): avc: denied { create } for pid=7289 comm="syz.1.529" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 126.740605][ T1626] usb 3-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 126.741501][ T1626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.767045][ T7295] syz.1.529: vmalloc error: size 57344, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.767199][ T7295] CPU: 1 UID: 0 PID: 7295 Comm: syz.1.529 Not tainted syzkaller #0 PREEMPT(full) [ 126.767221][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 126.767231][ T7295] Call Trace: [ 126.767237][ T7295] [ 126.767245][ T7295] dump_stack_lvl+0x100/0x190 [ 126.767275][ T7295] warn_alloc.cold+0x9e/0xb2 [ 126.767304][ T7295] ? __pfx_warn_alloc+0x10/0x10 [ 126.767327][ T7295] ? policy_nodemask+0xed/0x4f0 [ 126.767351][ T7295] ? alloc_pages_mpol+0x260/0x550 [ 126.767373][ T7295] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 126.767396][ T7295] ? find_held_lock+0x2b/0x80 [ 126.767422][ T7295] ? rcu_read_unlock+0x17/0x60 [ 126.767455][ T7295] __vmalloc_node_range_noprof+0x111c/0x1420 [ 126.767487][ T7295] ? bpf_check+0x112/0xa7c0 [ 126.767511][ T7295] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 126.767534][ T7295] ? __lock_acquire+0x4c5/0x1ec0 [ 126.767561][ T7295] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.767586][ T7295] ? rcu_is_watching+0x13/0xc0 [ 126.767613][ T7295] __kvmalloc_node_noprof+0x3da/0x9b0 [ 126.767631][ T7295] ? bpf_check+0x112/0xa7c0 [ 126.767653][ T7295] ? ktime_get+0x22c/0x320 [ 126.767672][ T7295] ? bpf_check+0x112/0xa7c0 [ 126.767700][ T7295] bpf_check+0x112/0xa7c0 [ 126.767725][ T7295] ? __css_rstat_updated+0x1ce/0x590 [ 126.767747][ T7295] ? __lock_acquire+0x4c5/0x1ec0 [ 126.767775][ T7295] ? __lock_acquire+0x4c5/0x1ec0 [ 126.767792][ T7295] ? find_held_lock+0x2b/0x80 [ 126.767817][ T7295] ? __pfx_bpf_check+0x10/0x10 [ 126.767837][ T7295] ? lock_acquire+0x1d1/0x380 [ 126.767853][ T7295] ? bpf_prog_load+0x1a09/0x2a80 [ 126.767874][ T7295] ? find_held_lock+0x2b/0x80 [ 126.767895][ T7295] ? bpf_prog_load+0x1a09/0x2a80 [ 126.767921][ T7295] ? __asan_memset+0x23/0x50 [ 126.767953][ T7295] ? bpf_prog_load+0x1ac3/0x2a80 [ 126.767976][ T7295] bpf_prog_load+0x1ac3/0x2a80 [ 126.768005][ T7295] ? __pfx_bpf_prog_load+0x10/0x10 [ 126.768048][ T7295] __sys_bpf+0x1f46/0x4a30 [ 126.768071][ T7295] ? __pfx___sys_bpf+0x10/0x10 [ 126.768093][ T7295] ? tomoyo_path_number_perm+0x188/0x580 [ 126.768136][ T7295] ? __lock_acquire+0x4c5/0x1ec0 [ 126.768156][ T7295] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.768184][ T7295] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 126.768228][ T7295] ? rcu_is_watching+0x13/0xc0 [ 126.768252][ T7295] ? kcov_ioctl+0x17a/0x760 [ 126.768270][ T7295] ? kfree+0x1e5/0x6d0 [ 126.768303][ T7295] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 126.768329][ T7295] ? __x64_sys_bpf+0xce/0x140 [ 126.768346][ T7295] __x64_sys_bpf+0xce/0x140 [ 126.768364][ T7295] ? do_syscall_64+0xae/0x790 [ 126.768387][ T7295] do_syscall_64+0x123/0x790 [ 126.768409][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.768429][ T7295] RIP: 0033:0x7f2246f9e159 [ 126.768445][ T7295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.768463][ T7295] RSP: 002b:00007f2247e35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.768483][ T7295] RAX: ffffffffffffffda RBX: 00007f2247226090 RCX: 00007f2246f9e159 [ 126.768495][ T7295] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 126.768507][ T7295] RBP: 00007f2247035024 R08: 0000000000000000 R09: 0000000000000000 [ 126.768518][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.768529][ T7295] R13: 00007f2247226128 R14: 00007f2247226090 R15: 00007ffecedac658 [ 126.768554][ T7295] [ 126.878300][ T7295] Mem-Info: [ 126.878314][ T7295] active_anon:11054 inactive_anon:1 isolated_anon:0 [ 126.878314][ T7295] active_file:0 inactive_file:57300 isolated_file:0 [ 126.878314][ T7295] unevictable:0 dirty:213 writeback:0 [ 126.878314][ T7295] slab_reclaimable:11489 slab_unreclaimable:97693 [ 126.878314][ T7295] mapped:30377 shmem:532 pagetables:1433 [ 126.878314][ T7295] sec_pagetables:0 bounce:0 [ 126.878314][ T7295] kernel_misc_reclaimable:0 [ 126.878314][ T7295] free:1295699 free_pcp:11508 free_cma:0 [ 126.878353][ T7295] Node 0 active_anon:44216kB inactive_anon:4kB active_file:0kB inactive_file:228940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121500kB dirty:840kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12608kB pagetables:5616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 126.878395][ T7295] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 126.878434][ T7295] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.878480][ T7295] lowmem_reserve[]: 0 2470 2471 2471 2471 [ 126.878508][ T7295] Node 0 DMA32 free:1216960kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:44216kB inactive_anon:4kB active_file:0kB inactive_file:228940kB unevictable:0kB writepending:840kB zspages:0kB present:3129332kB managed:2530264kB mlocked:0kB bounce:0kB free_pcp:46032kB local_pcp:27736kB free_cma:0kB [ 126.878552][ T7295] lowmem_reserve[]: 0 0 0 0 0 [ 126.880178][ T7295] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.880227][ T7295] lowmem_reserve[]: 0 0 0 0 0 [ 126.880254][ T7295] Node 1 Normal free:3950476kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.880298][ T7295] lowmem_reserve[]: 0 0 0 0 0 [ 126.880324][ T7295] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.880416][ T7295] Node 0 DMA32: 1087*4kB (UM) 1055*8kB (UME) 464*16kB (UME) 231*32kB (UM) 165*64kB (UM) 135*128kB (UME) 73*256kB (UM) 38*512kB (UME) 29*1024kB (UME) 2*2048kB (UM) 266*4096kB (UM) = 1216916kB [ 126.880541][ T7295] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 126.880617][ T7295] Node 1 Normal: 1*4kB (M) 3*8kB (U) 7*16kB (U) 8*32kB (U) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 963*4096kB (M) = 3950476kB [ 126.880740][ T7295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.880752][ T7295] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 126.880764][ T7295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.880776][ T7295] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.880794][ T7295] 57829 total pagecache pages [ 126.880800][ T7295] 1 pages in swap cache [ 126.880805][ T7295] Free swap = 124968kB [ 126.880811][ T7295] Total swap = 124996kB [ 126.880817][ T7295] 2097051 pages RAM [ 126.880822][ T7295] 0 pages HighMem/MovableOnly [ 126.880827][ T7295] 432850 pages reserved [ 126.880833][ T7295] 0 pages cma reserved [ 126.886343][ T1626] rc_core: IR keymap rc-rc6-mce not found [ 126.886356][ T1626] Registered IR keymap rc-empty [ 127.164703][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.165131][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.175160][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.175514][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.355783][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.355827][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.391612][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.405820][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.426499][ T1626] rc rc0: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0 [ 127.430941][ T1626] input: Media Center Ed. eHome Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0/input17 [ 127.440345][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.458340][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.477515][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.497758][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.516541][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.540427][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.556566][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.576956][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.595371][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.615348][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.637822][ T1626] mceusb 3-1:1.0: Error: mce write urb status = -71 [ 127.656649][ T1626] mceusb 3-1:1.0: Registered with mce emulator interface version 1 [ 127.656670][ T1626] mceusb 3-1:1.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 127.665219][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.665802][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.674603][ T1626] usb 3-1: USB disconnect, device number 12 [ 127.796994][ T7311] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 127.927237][ T7311] md: could not open device unknown-block(0,0). [ 127.936896][ T7311] md: error, md_import_device() returned -6 [ 128.006301][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 128.165675][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 128.176367][ T25] usb 1-1: config 0 has no interfaces? [ 128.176420][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.195979][ T25] usb 1-1: config 0 descriptor?? [ 128.381183][ T31] audit: type=1800 audit(1788365117.720:426): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.543" name="size" dev="configfs" ino=15998 res=0 errno=0 [ 128.406630][ T31] audit: type=1800 audit(1788365117.750:427): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.543" name="zoned" dev="configfs" ino=15999 res=0 errno=0 [ 128.431149][ T31] audit: type=1800 audit(1788365117.770:428): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.543" name="power" dev="configfs" ino=15310 res=0 errno=0 [ 128.457151][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.470688][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.476016][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.478529][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.480579][ T1626] usb 1-1: USB disconnect, device number 13 [ 128.540300][ T7329] FAULT_INJECTION: forcing a failure. [ 128.540300][ T7329] name failslab, interval 1, probability 0, space 0, times 0 [ 128.540344][ T7329] CPU: 1 UID: 0 PID: 7329 Comm: syz.4.544 Not tainted syzkaller #0 PREEMPT(full) [ 128.540366][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 128.540377][ T7329] Call Trace: [ 128.540384][ T7329] [ 128.540392][ T7329] dump_stack_lvl+0x100/0x190 [ 128.540425][ T7329] should_fail_ex.cold+0x5/0xa [ 128.540452][ T7329] should_failslab+0xc2/0x120 [ 128.540477][ T7329] kmem_cache_alloc_noprof+0x92/0x6a0 [ 128.540499][ T7329] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 128.540536][ T7329] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 128.540572][ T7329] idr_get_free+0x52e/0xa00 [ 128.540601][ T7329] idr_alloc_u32+0x1ac/0x320 [ 128.540626][ T7329] ? __pfx_idr_alloc_u32+0x10/0x10 [ 128.540649][ T7329] ? lock_acquire+0x1d1/0x380 [ 128.540669][ T7329] ? __radix_tree_preload+0x7c/0x820 [ 128.540703][ T7329] idr_alloc_cyclic+0x10b/0x230 [ 128.540727][ T7329] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 128.540749][ T7329] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 128.540773][ T7329] ? kfree+0x22b/0x6d0 [ 128.540802][ T7329] btf_new_fd+0x3aa/0x5bc0 [ 128.540829][ T7329] ? avc_has_perm_noaudit+0x145/0x3b0 [ 128.540864][ T7329] ? __pfx_btf_new_fd+0x10/0x10 [ 128.540895][ T7329] ? rcu_is_watching+0x13/0xc0 [ 128.540926][ T7329] ? security_capable+0x80/0x260 [ 128.540952][ T7329] ? ns_capable+0xd2/0xf0 [ 128.540974][ T7329] __sys_bpf+0x13ef/0x4a30 [ 128.541007][ T7329] ? __pfx___sys_bpf+0x10/0x10 [ 128.541023][ T7329] ? find_held_lock+0x2b/0x80 [ 128.541047][ T7329] ? futex_wake+0x4ea/0x5e0 [ 128.541116][ T7329] ? __x64_sys_futex+0x34f/0x4d0 [ 128.541139][ T7329] ? __x64_sys_futex+0x358/0x4d0 [ 128.541168][ T7329] ? __pfx___x64_sys_futex+0x10/0x10 [ 128.541199][ T7329] ? __x64_sys_bpf+0xce/0x140 [ 128.541217][ T7329] __x64_sys_bpf+0xce/0x140 [ 128.541237][ T7329] ? do_syscall_64+0xae/0x790 [ 128.541260][ T7329] do_syscall_64+0x123/0x790 [ 128.541284][ T7329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.541311][ T7329] RIP: 0033:0x7f524699e159 [ 128.541328][ T7329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.541346][ T7329] RSP: 002b:00007f52477b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.541366][ T7329] RAX: ffffffffffffffda RBX: 00007f5246c25fa0 RCX: 00007f524699e159 [ 128.541379][ T7329] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000012 [ 128.541390][ T7329] RBP: 00007f5246a35024 R08: 0000000000000000 R09: 0000000000000000 [ 128.541401][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.541412][ T7329] R13: 00007f5246c26038 R14: 00007f5246c25fa0 R15: 00007ffde11a6908 [ 128.541438][ T7329] [ 128.705242][ T4920] Bluetooth: hci3: command tx timeout [ 128.761863][ T7331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.807845][ T7331] md: loop0 has zero or unknown size, marking faulty! [ 128.929739][ T5710] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 129.095339][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 129.100243][ T5710] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 129.107882][ T5710] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.107903][ T5710] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.114619][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.114641][ T5710] usb 1-1: Product: syz [ 129.114653][ T5710] usb 1-1: Manufacturer: syz [ 129.114665][ T5710] usb 1-1: SerialNumber: syz [ 129.127238][ T5710] usb 1-1: config 0 descriptor?? [ 129.245993][ T31] audit: type=1800 audit(1788365118.590:429): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.554" name="size" dev="configfs" ino=16049 res=0 errno=0 [ 129.269821][ T7268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.284253][ T31] audit: type=1800 audit(1788365118.620:430): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.554" name="zoned" dev="configfs" ino=16050 res=0 errno=0 [ 129.305857][ T25] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 129.315943][ T31] audit: type=1800 audit(1788365118.660:431): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.554" name="power" dev="configfs" ino=16051 res=0 errno=0 [ 129.453104][ T7360] For dev_enable ops, only valid value is "1" [ 129.462274][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 129.472874][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 129.472935][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.494042][ T25] usb 5-1: config 0 descriptor?? [ 129.499841][ T7344] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 129.713078][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.714016][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.738414][ T7372] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.746944][ T4920] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.775234][ T7372] md: array md0 already initialised! [ 129.890267][ T6531] IPVS: starting estimator thread 0... [ 129.975251][ T7376] IPVS: using max 53 ests per chain, 127200 per kthread [ 130.042248][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 130.135331][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 130.135432][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 130.153112][ T25] usb 5-1: USB disconnect, device number 15 [ 130.387427][ T7388] xt_CONNSECMARK: invalid mode: 66 [ 130.750036][ T7400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.799388][ T25] usb 1-1: USB disconnect, device number 14 [ 130.805342][ T7400] md: array md0 already has disks! [ 130.837539][ T7403] md: could not open device unknown-block(1,0). [ 130.837601][ T7403] md: error, md_import_device() returned -16 [ 130.914466][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.917350][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.323071][ T7419] configfs-gadget.g1 gadget.0: HOST MAC ce:06:0e:06:76:93 [ 131.323109][ T7419] configfs-gadget.g1 gadget.0: MAC 5e:e3:a5:72:49:41 [ 131.350644][ T7423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.363118][ T7423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.437746][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 131.437796][ T31] audit: type=1400 audit(1788365120.780:435): avc: denied { map } for pid=7431 comm="syz.3.589" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 131.565403][ T5607] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 131.690397][ T7446] FAULT_INJECTION: forcing a failure. [ 131.690397][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 131.705844][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.4.594 Not tainted syzkaller #0 PREEMPT(full) [ 131.705875][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 131.705887][ T7446] Call Trace: [ 131.705894][ T7446] [ 131.705902][ T7446] dump_stack_lvl+0x100/0x190 [ 131.705935][ T7446] should_fail_ex.cold+0x5/0xa [ 131.705964][ T7446] should_failslab+0xc2/0x120 [ 131.705987][ T7446] __kmalloc_noprof+0xfc/0x840 [ 131.706006][ T7446] ? group_cpus_evenly+0xec/0x660 [ 131.706038][ T7446] group_cpus_evenly+0xec/0x660 [ 131.706069][ T7446] ? __pfx_group_cpus_evenly+0x10/0x10 [ 131.706104][ T7446] blk_mq_map_queues+0x9d/0x430 [ 131.706132][ T7446] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 131.706157][ T7446] ? trace_kmalloc+0xeb/0x110 [ 131.706181][ T7446] ? __kasan_kmalloc+0xaa/0xb0 [ 131.706200][ T7446] ? __kmalloc_node_noprof+0x360/0x880 [ 131.706221][ T7446] blk_mq_update_queue_map+0x305/0x3a0 [ 131.706247][ T7446] blk_mq_alloc_tag_set+0x660/0x1330 [ 131.706266][ T7446] ? idr_alloc+0x77/0x130 [ 131.706303][ T7446] loop_add+0x3b7/0xb60 [ 131.706331][ T7446] ? __pfx_loop_add+0x10/0x10 [ 131.706367][ T7446] ? __fget_files+0x34/0x3d0 [ 131.706394][ T7446] loop_control_ioctl+0xae/0x620 [ 131.706419][ T7446] ? __pfx_loop_control_ioctl+0x10/0x10 [ 131.706444][ T7446] ? selinux_file_ioctl+0x13b/0x290 [ 131.706470][ T7446] ? selinux_file_ioctl+0xb6/0x290 [ 131.706500][ T7446] ? __pfx_loop_control_ioctl+0x10/0x10 [ 131.706526][ T7446] __x64_sys_ioctl+0x18e/0x210 [ 131.706557][ T7446] do_syscall_64+0x123/0x790 [ 131.706580][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.706599][ T7446] RIP: 0033:0x7f524699e159 [ 131.706616][ T7446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.706636][ T7446] RSP: 002b:00007f52477b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.706655][ T7446] RAX: ffffffffffffffda RBX: 00007f5246c25fa0 RCX: 00007f524699e159 [ 131.706668][ T7446] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 131.706681][ T7446] RBP: 00007f5246a35024 R08: 0000000000000000 R09: 0000000000000000 [ 131.706694][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.706706][ T7446] R13: 00007f5246c26038 R14: 00007f5246c25fa0 R15: 00007ffde11a6908 [ 131.706731][ T7446] [ 131.738243][ T5607] usb 1-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 7.03 [ 131.741153][ T5607] usb 1-1: Dual-Role OTG device on HNP port [ 131.741380][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.785140][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 131.850290][ T5607] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, ce:06:0e:06:76:93 [ 131.947190][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 131.950734][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 131.956346][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 131.963909][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.963931][ T25] usb 2-1: Product: syz [ 131.963943][ T25] usb 2-1: Manufacturer: syz [ 131.963955][ T25] usb 2-1: SerialNumber: syz [ 131.995004][ T25] usb 2-1: config 0 descriptor?? [ 132.014802][ T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 132.014832][ T25] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 132.133298][ T31] audit: type=1400 audit(1788365121.470:436): avc: denied { write } for pid=7435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.231410][ T31] audit: type=1400 audit(1788365121.570:437): avc: denied { write } for pid=7460 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.340155][ T7465] xt_CONNSECMARK: invalid mode: 66 [ 132.461817][ T31] audit: type=1400 audit(1788365121.800:438): avc: denied { bind } for pid=7469 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.471147][ T31] audit: type=1400 audit(1788365121.800:439): avc: denied { write } for pid=7469 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.526814][ T31] audit: type=1400 audit(1788365121.870:440): avc: denied { map } for pid=7469 comm="syz.3.602" path="socket:[16321]" dev="sockfs" ino=16321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.550659][ T31] audit: type=1400 audit(1788365121.870:441): avc: denied { read } for pid=7469 comm="syz.3.602" path="socket:[16321]" dev="sockfs" ino=16321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.667369][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 132.886423][ T5800] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 132.935324][ T31] audit: type=1400 audit(1788365122.270:442): avc: denied { write } for pid=7476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.009759][ T31] audit: type=1400 audit(1788365122.350:443): avc: denied { write } for pid=7497 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.049358][ T7499] FAULT_INJECTION: forcing a failure. [ 133.049358][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 133.062656][ T7499] CPU: 0 UID: 0 PID: 7499 Comm: syz.0.608 Not tainted syzkaller #0 PREEMPT(full) [ 133.062685][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 133.062696][ T7499] Call Trace: [ 133.062703][ T7499] [ 133.062711][ T7499] dump_stack_lvl+0x100/0x190 [ 133.062744][ T7499] should_fail_ex.cold+0x5/0xa [ 133.062769][ T7499] should_failslab+0xc2/0x120 [ 133.062793][ T7499] __kmalloc_noprof+0xfc/0x840 [ 133.062811][ T7499] ? group_cpus_evenly+0xec/0x660 [ 133.062843][ T7499] group_cpus_evenly+0xec/0x660 [ 133.062870][ T7499] ? __pfx_group_cpus_evenly+0x10/0x10 [ 133.062904][ T7499] blk_mq_map_queues+0x9d/0x430 [ 133.062934][ T7499] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 133.062958][ T7499] ? trace_kmalloc+0xeb/0x110 [ 133.062979][ T7499] ? __kasan_kmalloc+0xaa/0xb0 [ 133.062998][ T7499] ? __kmalloc_node_noprof+0x360/0x880 [ 133.063019][ T7499] blk_mq_update_queue_map+0x305/0x3a0 [ 133.063047][ T7499] blk_mq_alloc_tag_set+0x660/0x1330 [ 133.063067][ T7499] ? idr_alloc+0x77/0x130 [ 133.063097][ T7499] loop_add+0x3b7/0xb60 [ 133.063123][ T7499] ? __pfx_loop_add+0x10/0x10 [ 133.063160][ T7499] ? __fget_files+0x34/0x3d0 [ 133.063187][ T7499] loop_control_ioctl+0xae/0x620 [ 133.063214][ T7499] ? __pfx_loop_control_ioctl+0x10/0x10 [ 133.063242][ T7499] ? selinux_file_ioctl+0x13b/0x290 [ 133.063269][ T7499] ? selinux_file_ioctl+0xb6/0x290 [ 133.063298][ T7499] ? __pfx_loop_control_ioctl+0x10/0x10 [ 133.063326][ T7499] __x64_sys_ioctl+0x18e/0x210 [ 133.063358][ T7499] do_syscall_64+0x123/0x790 [ 133.063389][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.063410][ T7499] RIP: 0033:0x7ffa74b9e159 [ 133.063428][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.063446][ T7499] RSP: 002b:00007ffa72df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.063465][ T7499] RAX: ffffffffffffffda RBX: 00007ffa74e25fa0 RCX: 00007ffa74b9e159 [ 133.063478][ T7499] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 133.063490][ T7499] RBP: 00007ffa74c35024 R08: 0000000000000000 R09: 0000000000000000 [ 133.063502][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.063514][ T7499] R13: 00007ffa74e26038 R14: 00007ffa74e25fa0 R15: 00007ffd8e7717d8 [ 133.063541][ T7499] [ 133.067641][ T5800] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 133.076141][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.076164][ T5800] usb 5-1: Product: syz [ 133.076176][ T5800] usb 5-1: Manufacturer: syz [ 133.076188][ T5800] usb 5-1: SerialNumber: syz [ 133.348272][ T25] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 133.348326][ T25] em28xx 2-1:0.0: board has no eeprom [ 133.389064][ T7502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.609'. [ 133.508016][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.508376][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.533827][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.547031][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.559432][ T5800] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 133.559536][ T5800] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 133.561824][ T5800] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 133.561864][ T5800] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 133.563073][ T5800] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 133.621199][ T5800] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 133.697131][ T25] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 133.697203][ T25] em28xx 2-1:0.0: dvb set to bulk mode. [ 133.712566][ T5800] em28xx 2-1:0.0: Binding DVB extension [ 133.784759][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.788571][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.808946][ T5607] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 133.842510][ T25] usb 2-1: USB disconnect, device number 11 [ 133.843830][ T25] em28xx 2-1:0.0: Disconnecting em28xx [ 133.902758][ T5800] em28xx 2-1:0.0: Registering input extension [ 133.906564][ T25] em28xx 2-1:0.0: Closing input extension [ 133.930679][ T31] audit: type=1400 audit(1788365123.270:444): avc: denied { write } for pid=7515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.976642][ T5607] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 133.988181][ T5607] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024 [ 133.988260][ T5607] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 133.991317][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 133.991339][ T5607] usb 4-1: Product: syz [ 133.991350][ T5607] usb 4-1: Manufacturer: syz [ 134.028283][ T5607] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected [ 134.038783][ T5607] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 134.051161][ T25] em28xx: Freeing device [ 134.228625][ T5607] usb 4-1: USB disconnect, device number 10 [ 134.248879][ T5607] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 134.253938][ T5607] iuu_phoenix 4-1:1.0: device disconnected [ 134.517905][ T7552] FAULT_INJECTION: forcing a failure. [ 134.517905][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 134.531134][ T7552] CPU: 0 UID: 0 PID: 7552 Comm: syz.1.621 Not tainted syzkaller #0 PREEMPT(full) [ 134.531163][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 134.531175][ T7552] Call Trace: [ 134.531183][ T7552] [ 134.531190][ T7552] dump_stack_lvl+0x100/0x190 [ 134.531221][ T7552] should_fail_ex.cold+0x5/0xa [ 134.531246][ T7552] should_failslab+0xc2/0x120 [ 134.531268][ T7552] __kmalloc_noprof+0xfc/0x840 [ 134.531288][ T7552] ? group_cpus_evenly+0xec/0x660 [ 134.531327][ T7552] group_cpus_evenly+0xec/0x660 [ 134.531358][ T7552] ? __pfx_group_cpus_evenly+0x10/0x10 [ 134.531399][ T7552] blk_mq_map_queues+0x9d/0x430 [ 134.531431][ T7552] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 134.531458][ T7552] ? trace_kmalloc+0xeb/0x110 [ 134.531479][ T7552] ? __kasan_kmalloc+0xaa/0xb0 [ 134.531499][ T7552] ? __kmalloc_node_noprof+0x360/0x880 [ 134.531518][ T7552] blk_mq_update_queue_map+0x305/0x3a0 [ 134.531546][ T7552] blk_mq_alloc_tag_set+0x660/0x1330 [ 134.531565][ T7552] ? idr_alloc+0x77/0x130 [ 134.531596][ T7552] loop_add+0x3b7/0xb60 [ 134.531623][ T7552] ? __pfx_loop_add+0x10/0x10 [ 134.531662][ T7552] ? __fget_files+0x34/0x3d0 [ 134.531690][ T7552] loop_control_ioctl+0xae/0x620 [ 134.531718][ T7552] ? __pfx_loop_control_ioctl+0x10/0x10 [ 134.531747][ T7552] ? selinux_file_ioctl+0x13b/0x290 [ 134.531775][ T7552] ? selinux_file_ioctl+0xb6/0x290 [ 134.531806][ T7552] ? __pfx_loop_control_ioctl+0x10/0x10 [ 134.531832][ T7552] __x64_sys_ioctl+0x18e/0x210 [ 134.531863][ T7552] do_syscall_64+0x123/0x790 [ 134.531886][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.531905][ T7552] RIP: 0033:0x7f2246f9e159 [ 134.531922][ T7552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.531941][ T7552] RSP: 002b:00007f2247e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.531961][ T7552] RAX: ffffffffffffffda RBX: 00007f2247225fa0 RCX: 00007f2246f9e159 [ 134.531974][ T7552] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 134.531985][ T7552] RBP: 00007f2247035024 R08: 0000000000000000 R09: 0000000000000000 [ 134.531996][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.532007][ T7552] R13: 00007f2247226038 R14: 00007f2247225fa0 R15: 00007ffecedac658 [ 134.532032][ T7552] [ 134.601884][ T7557] 9p: Bad value for 'wfdno' [ 134.603087][ T7560] overlayfs: failed to resolve './file1/file0': -2 [ 135.395138][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 135.439032][ T7595] overlayfs: failed to resolve './file1/file0': -2 [ 135.515154][ T1626] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.546766][ T10] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 135.551788][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 135.551816][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.551840][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.557795][ T10] usb 3-1: config 0 descriptor?? [ 135.567681][ T7584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.625727][ T7602] FAULT_INJECTION: forcing a failure. [ 135.625727][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 135.625771][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz.0.637 Not tainted syzkaller #0 PREEMPT(full) [ 135.625793][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 135.625802][ T7602] Call Trace: [ 135.625807][ T7602] [ 135.625812][ T7602] dump_stack_lvl+0x100/0x190 [ 135.625838][ T7602] should_fail_ex.cold+0x5/0xa [ 135.625861][ T7602] should_failslab+0xc2/0x120 [ 135.625882][ T7602] kmem_cache_alloc_noprof+0x92/0x6a0 [ 135.625900][ T7602] ? d_instantiate+0x8a/0xb0 [ 135.625923][ T7602] ? alloc_empty_file+0x5b/0x1c0 [ 135.625949][ T7602] alloc_empty_file+0x5b/0x1c0 [ 135.625970][ T7602] alloc_file_pseudo+0x183/0x290 [ 135.625992][ T7602] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 135.626014][ T7602] ? _raw_spin_unlock+0x28/0x50 [ 135.626039][ T7602] ? alloc_fd+0x471/0x7a0 [ 135.626059][ T7602] __anon_inode_getfile+0xe8/0x280 [ 135.626087][ T7602] __anon_inode_getfd+0x5c/0xe0 [ 135.626113][ T7602] btf_new_fd+0x575/0x5bc0 [ 135.626137][ T7602] ? avc_has_perm_noaudit+0x145/0x3b0 [ 135.626166][ T7602] ? __pfx_btf_new_fd+0x10/0x10 [ 135.626189][ T7602] ? rcu_is_watching+0x13/0xc0 [ 135.626214][ T7602] ? security_capable+0x80/0x260 [ 135.626236][ T7602] ? ns_capable+0xd2/0xf0 [ 135.626255][ T7602] __sys_bpf+0x13ef/0x4a30 [ 135.626277][ T7602] ? __pfx___sys_bpf+0x10/0x10 [ 135.626297][ T7602] ? find_held_lock+0x2b/0x80 [ 135.626318][ T7602] ? futex_wake+0x4ea/0x5e0 [ 135.626376][ T7602] ? __x64_sys_futex+0x34f/0x4d0 [ 135.626398][ T7602] ? __x64_sys_futex+0x358/0x4d0 [ 135.626423][ T7602] ? xfd_validate_state+0x129/0x190 [ 135.626446][ T7602] ? __x64_sys_bpf+0xce/0x140 [ 135.626461][ T7602] __x64_sys_bpf+0xce/0x140 [ 135.626478][ T7602] ? do_syscall_64+0xae/0x790 [ 135.626499][ T7602] do_syscall_64+0x123/0x790 [ 135.626521][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.626538][ T7602] RIP: 0033:0x7ffa74b9e159 [ 135.626553][ T7602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.626568][ T7602] RSP: 002b:00007ffa72df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.626584][ T7602] RAX: ffffffffffffffda RBX: 00007ffa74e25fa0 RCX: 00007ffa74b9e159 [ 135.626594][ T7602] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000012 [ 135.626604][ T7602] RBP: 00007ffa74c35024 R08: 0000000000000000 R09: 0000000000000000 [ 135.626614][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.626623][ T7602] R13: 00007ffa74e26038 R14: 00007ffa74e25fa0 R15: 00007ffd8e7717d8 [ 135.626645][ T7602] [ 135.667111][ T1626] usb 4-1: Using ep0 maxpacket: 16 [ 135.667734][ T1626] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 135.671811][ T1626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 135.674892][ T1626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.674926][ T1626] usb 4-1: Product: syz [ 135.674938][ T1626] usb 4-1: Manufacturer: syz [ 135.674950][ T1626] usb 4-1: SerialNumber: syz [ 135.701464][ T1626] usb 4-1: config 0 descriptor?? [ 135.722083][ T1626] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 135.722112][ T1626] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 135.769236][ T5710] usb 5-1: USB disconnect, device number 16 [ 136.013807][ T10] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x3 [ 136.013861][ T10] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 136.013881][ T10] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 136.013896][ T10] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 136.013932][ T10] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 136.013950][ T10] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 136.013967][ T10] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 136.013984][ T10] hid-steam 0003:28DE:1205.0002: unknown main item tag 0x0 [ 136.014863][ T10] hid-steam 0003:28DE:1205.0002: : USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 136.051931][ T7610] program syz.0.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.096163][ T10] hid-steam 0003:28DE:1205.0002: steam_register:steam_get_attributes failed with error -22 [ 136.096203][ T10] hid-steam 0003:28DE:1205.0002: Steam Deck 'XXXXXXXXXX' connected [ 136.108131][ T10] input: Steam Deck as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.0002/input/input19 [ 136.189615][ T10] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.0002/input/input20 [ 136.303262][ T10] hid-steam 0003:28DE:1205.0003: unknown main item tag 0x3 [ 136.303320][ T10] hid-steam 0003:28DE:1205.0003: unknown main item tag 0x0 [ 136.363581][ T1626] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 136.389243][ T10] hid-steam 0003:28DE:1205.0003: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 136.473532][ T10] usb 3-1: USB disconnect, device number 13 [ 136.608084][ T10] hid-steam 0003:28DE:1205.0002: Steam Deck 'XXXXXXXXXX' disconnected [ 136.655408][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.655903][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.662948][ T7618] fido_id[7618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 136.982579][ T1626] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 136.982625][ T1626] em28xx 4-1:0.0: board has no eeprom [ 137.257994][ T1626] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 137.258039][ T1626] em28xx 4-1:0.0: dvb set to bulk mode. [ 137.278732][ T1626] usb 4-1: USB disconnect, device number 11 [ 137.292089][ T1626] em28xx 4-1:0.0: Disconnecting em28xx [ 137.327602][ T7642] em28xx 4-1:0.0: Binding DVB extension [ 137.382057][ T7620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.394217][ T7620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.504567][ T7642] em28xx 4-1:0.0: Registering input extension [ 137.513169][ T1626] em28xx 4-1:0.0: Closing input extension [ 137.549335][ T1626] em28xx: Freeing device [ 137.661631][ T7621] bridge0: port 3(syz_tun) entered blocking state [ 137.661805][ T7621] bridge0: port 3(syz_tun) entered disabled state [ 137.661961][ T7621] syz_tun: entered allmulticast mode [ 137.696020][ T7621] syz_tun: entered promiscuous mode [ 137.726401][ T7653] program syz.0.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.818951][ T7622] bridge0: port 3(syz_tun) entered blocking state [ 137.819075][ T7622] bridge0: port 3(syz_tun) entered forwarding state [ 137.841739][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.851330][ T7622] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.866157][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.910521][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.910648][ T7622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.925789][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 137.925805][ T31] audit: type=1800 audit(1788365127.270:453): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.656" name="scan_secs" dev="configfs" ino=16895 res=0 errno=0 [ 137.961654][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.961770][ T7622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.992448][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.004090][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.027843][ T7622] veth1_vlan: left promiscuous mode [ 138.034857][ T7622] veth0_vlan: left promiscuous mode [ 138.043141][ T7622] veth0_vlan: entered promiscuous mode [ 138.056260][ T7622] veth1_vlan: entered promiscuous mode [ 138.072651][ T7622] veth1_macvtap: left promiscuous mode [ 138.080141][ T7622] veth0_macvtap: left promiscuous mode [ 138.087833][ T7622] veth0_macvtap: entered promiscuous mode [ 138.097660][ T7622] veth1_macvtap: entered promiscuous mode [ 138.123854][ T7622] 8021q: adding VLAN 0 to HW filter on device eth0 [ 138.141861][ T7622] 8021q: adding VLAN 0 to HW filter on device eth1 [ 138.158199][ T7622] 8021q: adding VLAN 0 to HW filter on device eth2 [ 138.178256][ T7622] 8021q: adding VLAN 0 to HW filter on device eth3 [ 138.307267][ T7641] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 138.455798][ T7641] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 138.460490][ T7641] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 4096, setting to 1024 [ 138.460519][ T7641] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 138.464022][ T7641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.464043][ T7641] usb 3-1: Product: syz [ 138.464055][ T7641] usb 3-1: Manufacturer: syz [ 138.478325][ T7641] iuu_phoenix 3-1:1.0: iuu_phoenix converter detected [ 138.500776][ T7641] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 138.606352][ T31] audit: type=1400 audit(1788365127.950:454): avc: denied { mount } for pid=7681 comm="syz.4.663" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 138.651549][ T31] audit: type=1400 audit(1788365127.990:455): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 138.697288][ T7626] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 138.736778][ T7641] usb 3-1: USB disconnect, device number 14 [ 138.771153][ T31] audit: type=1400 audit(1788365128.110:456): avc: denied { read write } for pid=7688 comm="syz.0.664" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 138.798551][ T31] audit: type=1400 audit(1788365128.140:457): avc: denied { open } for pid=7688 comm="syz.0.664" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 138.803384][ T7641] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 138.803862][ T7641] iuu_phoenix 3-1:1.0: device disconnected [ 138.880119][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.667'. [ 138.892012][ T7692] tipc: Started in network mode [ 138.897464][ T7626] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 138.907354][ T7692] tipc: Node identity 4, cluster identity 4711 [ 138.913930][ T7692] tipc: Node number set to 4 [ 138.920404][ T7626] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 138.920471][ T7626] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 138.933501][ T7637] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 138.952445][ T7626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.952479][ T7626] usb 2-1: Product: syz [ 138.952504][ T7626] usb 2-1: Manufacturer: syz [ 138.984990][ T7626] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected [ 138.997773][ T7626] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 139.091547][ T7693] fido_id[7693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.269925][ T7701] FAULT_INJECTION: forcing a failure. [ 139.269925][ T7701] name failslab, interval 1, probability 0, space 0, times 0 [ 139.269990][ T7701] CPU: 1 UID: 0 PID: 7701 Comm: syz.2.669 Not tainted syzkaller #0 PREEMPT(full) [ 139.270010][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 139.270022][ T7701] Call Trace: [ 139.270027][ T7701] [ 139.270032][ T7701] dump_stack_lvl+0x100/0x190 [ 139.270059][ T7701] should_fail_ex.cold+0x5/0xa [ 139.270081][ T7701] should_failslab+0xc2/0x120 [ 139.270104][ T7701] kmem_cache_alloc_noprof+0x92/0x6a0 [ 139.270122][ T7701] ? d_instantiate+0x8a/0xb0 [ 139.270144][ T7701] ? alloc_empty_file+0x5b/0x1c0 [ 139.270168][ T7701] alloc_empty_file+0x5b/0x1c0 [ 139.270188][ T7701] alloc_file_pseudo+0x183/0x290 [ 139.270210][ T7701] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 139.270231][ T7701] ? _raw_spin_unlock+0x28/0x50 [ 139.270256][ T7701] ? alloc_fd+0x471/0x7a0 [ 139.270276][ T7701] __anon_inode_getfile+0xe8/0x280 [ 139.270303][ T7701] __anon_inode_getfd+0x5c/0xe0 [ 139.270331][ T7701] btf_new_fd+0x575/0x5bc0 [ 139.270354][ T7701] ? avc_has_perm_noaudit+0x145/0x3b0 [ 139.270382][ T7701] ? __pfx_btf_new_fd+0x10/0x10 [ 139.270407][ T7701] ? rcu_is_watching+0x13/0xc0 [ 139.270432][ T7701] ? security_capable+0x80/0x260 [ 139.270455][ T7701] ? ns_capable+0xd2/0xf0 [ 139.270473][ T7701] __sys_bpf+0x13ef/0x4a30 [ 139.270494][ T7701] ? __pfx___sys_bpf+0x10/0x10 [ 139.270507][ T7701] ? find_held_lock+0x2b/0x80 [ 139.270527][ T7701] ? futex_wake+0x4ea/0x5e0 [ 139.270583][ T7701] ? __x64_sys_futex+0x34f/0x4d0 [ 139.270603][ T7701] ? __x64_sys_futex+0x358/0x4d0 [ 139.270625][ T7701] ? xfd_validate_state+0x129/0x190 [ 139.270646][ T7701] ? __x64_sys_bpf+0xce/0x140 [ 139.270660][ T7701] __x64_sys_bpf+0xce/0x140 [ 139.270676][ T7701] ? do_syscall_64+0xae/0x790 [ 139.270701][ T7701] do_syscall_64+0x123/0x790 [ 139.270720][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.270737][ T7701] RIP: 0033:0x7fe90939e159 [ 139.270751][ T7701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.270768][ T7701] RSP: 002b:00007fe90a1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.270786][ T7701] RAX: ffffffffffffffda RBX: 00007fe909625fa0 RCX: 00007fe90939e159 [ 139.270798][ T7701] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000012 [ 139.270809][ T7701] RBP: 00007fe909435024 R08: 0000000000000000 R09: 0000000000000000 [ 139.270820][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.270831][ T7701] R13: 00007fe909626038 R14: 00007fe909625fa0 R15: 00007ffe62419908 [ 139.270854][ T7701] [ 139.583894][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.592870][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.868688][ T7721] netlink: 'syz.3.678': attribute type 4 has an invalid length. [ 139.968944][ T7725] binder: BC_ATTEMPT_ACQUIRE not supported [ 139.968963][ T7725] binder: 7724:7725 ioctl c0306201 2000000008c0 returned -22 [ 140.230465][ T7676] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 140.238928][ T7626] usb 2-1: USB disconnect, device number 12 [ 140.269683][ T7626] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 140.270359][ T7626] iuu_phoenix 2-1:1.0: device disconnected [ 140.555117][ T7641] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 140.707581][ T7641] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 140.709858][ T7641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 140.709894][ T7641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.712843][ T7641] usb 3-1: config 0 descriptor?? [ 140.714724][ T7738] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.920899][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.921271][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.943856][ T31] audit: type=1400 audit(1788365130.280:458): avc: denied { ioctl } for pid=7748 comm="syz.3.689" path="/dev/sg0" dev="devtmpfs" ino=814 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 141.035309][ T7640] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.165131][ T7640] usb 2-1: device descriptor read/64, error -71 [ 141.329947][ T7641] usbhid 3-1:0.0: can't add hid device: -71 [ 141.330046][ T7641] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 141.341087][ T7641] usb 3-1: USB disconnect, device number 15 [ 141.405144][ T7640] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.535147][ T7640] usb 2-1: device descriptor read/64, error -71 [ 141.647315][ T7640] usb usb2-port1: attempt power cycle [ 141.995144][ T7640] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.016747][ T7640] usb 2-1: device descriptor read/8, error -71 [ 142.141558][ T7695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.258345][ T7640] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 142.289315][ T7640] usb 2-1: device descriptor read/8, error -71 [ 142.397924][ T7640] usb usb2-port1: unable to enumerate USB device [ 142.553372][ T7769] kvm: failed to shrink bus, removing it completely [ 143.556742][ T31] audit: type=1400 audit(1788365132.890:459): avc: denied { nlmsg_write } for pid=7806 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.561879][ T7824] ovs-system: entered promiscuous mode [ 145.205669][ T7640] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 145.230889][ T31] audit: type=1400 audit(1788365134.570:460): avc: denied { write } for pid=7829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.274721][ T7857] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 145.274768][ T7857] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 145.355129][ T7640] usb 3-1: device descriptor read/64, error -71 [ 145.366948][ T7857] udc dummy_udc.3: failed to start USB Gadget filesystem: -12 [ 145.382857][ T7857] gadgetfs gadget.3: probe with driver gadgetfs failed with error -12 [ 145.406382][ T7857] ================================================================== [ 145.406397][ T7857] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0x82e/0x890 [ 145.406429][ T7857] Write of size 8 at addr ffff888054a6f8c0 by task syz.0.725/7857 [ 145.406445][ T7857] [ 145.406455][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.0.725 Not tainted syzkaller #0 PREEMPT(full) [ 145.406477][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 145.406488][ T7857] Call Trace: [ 145.406495][ T7857] [ 145.406502][ T7857] dump_stack_lvl+0x100/0x190 [ 145.406530][ T7857] print_report+0x13d/0x4b0 [ 145.406556][ T7857] ? __virt_addr_valid+0x239/0x430 [ 145.406577][ T7857] ? gadgetfs_bind+0x82e/0x890 [ 145.406599][ T7857] kasan_report+0xdf/0x1c0 [ 145.406622][ T7857] ? gadgetfs_bind+0x82e/0x890 [ 145.406648][ T7857] gadgetfs_bind+0x82e/0x890 [ 145.406672][ T7857] ? kernfs_create_link+0x1bd/0x240 [ 145.406694][ T7857] gadget_bind_driver+0x28c/0xbf0 [ 145.406728][ T7857] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 145.406753][ T7857] ? __pfx_gadget_bind_driver+0x10/0x10 [ 145.406781][ T7857] really_probe+0x241/0xa60 [ 145.406800][ T7857] __driver_probe_device+0x210/0x460 ** replaying previous printk message ** [ 145.406800][ T7857] __driver_probe_device+0x210/0x460 [ 145.406816][ T7857] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 145.406836][ T7857] driver_probe_device+0x4a/0x140 [ 145.406853][ T7857] __driver_attach+0x21f/0x5b0 [ 145.406870][ T7857] ? __pfx___driver_attach+0x10/0x10 [ 145.406887][ T7857] bus_for_each_dev+0x13e/0x1d0 [ 145.406911][ T7857] ? __pfx_bus_for_each_dev+0x10/0x10 [ 145.406935][ T7857] ? bus_add_driver+0x2b5/0x5b0 [ 145.406963][ T7857] bus_add_driver+0x305/0x5b0 [ 145.406988][ T7857] driver_register+0x1e2/0x360 [ 145.407009][ T7857] usb_gadget_register_driver_owner+0x132/0x210 [ 145.407038][ T7857] dev_config+0xdce/0x1610 [ 145.407061][ T7857] ? ksys_write+0xc0/0x250 [ 145.407078][ T7857] ? __pfx_dev_config+0x10/0x10 [ 145.407104][ T7857] vfs_write+0x2aa/0x1050 [ 145.407131][ T7857] ? __pfx_dev_config+0x10/0x10 [ 145.407154][ T7857] ? lock_acquire+0x1d1/0x380 [ 145.407173][ T7857] ? __fget_files+0x34/0x3d0 [ 145.407194][ T7857] ? __pfx_vfs_write+0x10/0x10 [ 145.407220][ T7857] ? find_held_lock+0x2b/0x80 [ 145.407244][ T7857] ? __fget_files+0x215/0x3d0 [ 145.407265][ T7857] ? __fget_files+0x21f/0x3d0 [ 145.407287][ T7857] ksys_write+0x12a/0x250 [ 145.407303][ T7857] ? __pfx_ksys_write+0x10/0x10 [ 145.407321][ T7857] do_syscall_64+0x123/0x790 [ 145.407342][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.407360][ T7857] RIP: 0033:0x7ffa74b9e159 [ 145.407375][ T7857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.407393][ T7857] RSP: 002b:00007ffa72df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.407411][ T7857] RAX: ffffffffffffffda RBX: 00007ffa74e25fa0 RCX: 00007ffa74b9e159 [ 145.407424][ T7857] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 145.407435][ T7857] RBP: 00007ffa74c35024 R08: 0000000000000000 R09: 0000000000000000 [ 145.407446][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.407456][ T7857] R13: 00007ffa74e26038 R14: 00007ffa74e25fa0 R15: 00007ffd8e7717d8 [ 145.407473][ T7857] [ 145.407479][ T7857] [ 145.407484][ T7857] Allocated by task 5598: [ 145.407492][ T7857] kasan_save_stack+0x30/0x50 [ 145.407510][ T7857] kasan_save_track+0x14/0x30 [ 145.407527][ T7857] __kasan_kmalloc+0xaa/0xb0 [ 145.407543][ T7857] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 145.407567][ T7857] gadgetfs_fill_super+0x1da/0x430 [ 145.407588][ T7857] get_tree_single+0xe2/0x190 [ 145.407603][ T7857] vfs_get_tree+0x92/0x320 [ 145.407628][ T7857] path_mount+0x7d0/0x24c0 [ 145.407651][ T7857] __x64_sys_mount+0x293/0x310 [ 145.407674][ T7857] do_syscall_64+0x123/0x790 [ 145.407691][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.407708][ T7857] [ 145.407711][ T7857] Freed by task 7857: [ 145.407719][ T7857] kasan_save_stack+0x30/0x50 [ 145.407742][ T7857] kasan_save_track+0x14/0x30 [ 145.407759][ T7857] kasan_save_free_info+0x3b/0x70 [ 145.407783][ T7857] __kasan_slab_free+0x5f/0x80 [ 145.407802][ T7857] kfree+0x22b/0x6d0 [ 145.407823][ T7857] put_dev+0xb4/0xd0 [ 145.407841][ T7857] gadgetfs_bind+0x6bc/0x890 [ 145.407860][ T7857] gadget_bind_driver+0x28c/0xbf0 [ 145.407885][ T7857] really_probe+0x241/0xa60 [ 145.407899][ T7857] __driver_probe_device+0x210/0x460 [ 145.407915][ T7857] driver_probe_device+0x4a/0x140 [ 145.407930][ T7857] __driver_attach+0x21f/0x5b0 [ 145.407944][ T7857] bus_for_each_dev+0x13e/0x1d0 [ 145.407966][ T7857] bus_add_driver+0x305/0x5b0 [ 145.407988][ T7857] driver_register+0x1e2/0x360 [ 145.408004][ T7857] usb_gadget_register_driver_owner+0x132/0x210 [ 145.408030][ T7857] dev_config+0xdce/0x1610 [ 145.408051][ T7857] vfs_write+0x2aa/0x1050 [ 145.408076][ T7857] ksys_write+0x12a/0x250 [ 145.408090][ T7857] do_syscall_64+0x123/0x790 [ 145.408107][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.408124][ T7857] [ 145.408128][ T7857] The buggy address belongs to the object at ffff888054a6f800 [ 145.408128][ T7857] which belongs to the cache kmalloc-1k of size 1024 [ 145.408141][ T7857] The buggy address is located 192 bytes inside of [ 145.408141][ T7857] freed 1024-byte region [ffff888054a6f800, ffff888054a6fc00) [ 145.408158][ T7857] [ 145.408163][ T7857] The buggy address belongs to the physical page: [ 145.408170][ T7857] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888054a6f000 pfn:0x54a68 [ 145.408187][ T7857] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 145.408200][ T7857] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 145.408218][ T7857] page_type: f5(slab) [ 145.408233][ T7857] raw: 00fff00000000240 ffff88801c02edc0 ffffea000150b010 ffffea0001416610 [ 145.408249][ T7857] raw: ffff888054a6f000 000000000010000e 00000000f5000000 0000000000000000 [ 145.408266][ T7857] head: 00fff00000000240 ffff88801c02edc0 ffffea000150b010 ffffea0001416610 [ 145.408281][ T7857] head: ffff888054a6f000 000000000010000e 00000000f5000000 0000000000000000 [ 145.408297][ T7857] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 145.408314][ T7857] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 145.408324][ T7857] page dumped because: kasan: bad access detected [ 145.408332][ T7857] page_owner tracks the page as allocated [ 145.408338][ T7857] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5597, tgid 5597 (syz-executor), ts 68927994938 [ 145.408368][ T7857] post_alloc_hook+0xfd/0x120 [ 145.408392][ T7857] get_page_from_freelist+0x110d/0x35d0 [ 145.408418][ T7857] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 145.408444][ T7857] new_slab+0xa9/0x6e0 [ 145.408466][ T7857] refill_objects+0xe3/0x410 [ 145.408490][ T7857] __pcs_replace_empty_main+0x35e/0x650 [ 145.408514][ T7857] __kmalloc_node_noprof+0x6ad/0x880 [ 145.408531][ T7857] qdisc_alloc+0xbb/0xb30 [ 145.408552][ T7857] qdisc_create_dflt+0x93/0x490 [ 145.408571][ T7857] dev_activate+0x64f/0xce0 [ 145.408589][ T7857] __dev_open+0x490/0x8f0 [ 145.408608][ T7857] __dev_change_flags+0x596/0x850 [ 145.408634][ T7857] netif_change_flags+0x8d/0x160 [ 145.408660][ T7857] do_setlink.isra.0+0x1ac4/0x3e60 [ 145.408678][ T7857] rtnl_newlink+0x13c1/0x2620 [ 145.408695][ T7857] rtnetlink_rcv_msg+0x95e/0xe90 [ 145.408712][ T7857] page last free pid 1 tgid 1 ts 15255233978 stack trace: [ 145.408729][ T7857] free_pages_prepare+0x586/0xe00 [ 145.408750][ T7857] __free_contig_range_common+0x14f/0x250 [ 145.408774][ T7857] destroy_args+0xa8/0x7a0 [ 145.408789][ T7857] debug_vm_pgtable+0x1d69/0x3490 [ 145.408805][ T7857] do_one_initcall+0x11c/0x6f0 [ 145.408822][ T7857] kernel_init_freeable+0x6ea/0x7b0 [ 145.408849][ T7857] kernel_init+0x21/0x1e0 [ 145.408870][ T7857] ret_from_fork+0x730/0xd60 [ 145.408887][ T7857] ret_from_fork_asm+0x1a/0x30 [ 145.408904][ T7857] [ 145.408908][ T7857] Memory state around the buggy address: [ 145.408917][ T7857] ffff888054a6f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 145.408929][ T7857] ffff888054a6f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.408942][ T7857] >ffff888054a6f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.408952][ T7857] ^ [ 145.408961][ T7857] ffff888054a6f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.408973][ T7857] ffff888054a6f980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.408983][ T7857] ================================================================== [ 145.458008][ T31] audit: type=1400 audit(1788365134.790:461): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 145.458052][ T31] audit: type=1400 audit(1788365134.790:462): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.462866][ T31] audit: type=1400 audit(1788365134.800:463): avc: denied { write search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.462907][ T31] audit: type=1400 audit(1788365134.800:464): avc: denied { add_name } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.462936][ T31] audit: type=1400 audit(1788365134.800:465): avc: denied { create } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.467067][ T31] audit: type=1400 audit(1788365134.800:466): avc: denied { append open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.470739][ T31] audit: type=1400 audit(1788365134.820:467): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.517633][ T31] audit: type=1400 audit(1788365134.860:468): avc: denied { write } for pid=7865 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.531515][ T7857] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.426806][ T7857] CPU: 1 UID: 0 PID: 7857 Comm: syz.0.725 Not tainted syzkaller #0 PREEMPT(full) [ 146.436000][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 146.446057][ T7857] Call Trace: [ 146.449329][ T7857] [ 146.452252][ T7857] dump_stack_lvl+0x100/0x190 [ 146.456927][ T7857] vpanic+0x553/0x970 [ 146.460891][ T7857] ? __pfx_vpanic+0x10/0x10 [ 146.465375][ T7857] ? mark_held_locks+0x40/0x70 [ 146.470125][ T7857] ? gadgetfs_bind+0x82e/0x890 [ 146.474877][ T7857] panic+0xd1/0xe0 [ 146.478579][ T7857] ? __pfx_panic+0x10/0x10 [ 146.482984][ T7857] ? gadgetfs_bind+0x82e/0x890 [ 146.487757][ T7857] ? preempt_schedule_common+0x3c/0xb0 [ 146.493209][ T7857] check_panic_on_warn.cold+0x19/0x34 [ 146.498572][ T7857] end_report.part.0+0x3a/0x90 [ 146.503331][ T7857] kasan_report.cold+0xe/0x18 [ 146.507999][ T7857] ? gadgetfs_bind+0x82e/0x890 [ 146.512751][ T7857] gadgetfs_bind+0x82e/0x890 [ 146.517326][ T7857] ? kernfs_create_link+0x1bd/0x240 [ 146.522510][ T7857] gadget_bind_driver+0x28c/0xbf0 [ 146.527526][ T7857] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 146.533145][ T7857] ? __pfx_gadget_bind_driver+0x10/0x10 [ 146.538768][ T7857] really_probe+0x241/0xa60 [ 146.543255][ T7857] __driver_probe_device+0x210/0x460 [ 146.548527][ T7857] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 146.554326][ T7857] driver_probe_device+0x4a/0x140 [ 146.559335][ T7857] __driver_attach+0x21f/0x5b0 [ 146.564091][ T7857] ? __pfx___driver_attach+0x10/0x10 [ 146.569394][ T7857] bus_for_each_dev+0x13e/0x1d0 [ 146.574255][ T7857] ? __pfx_bus_for_each_dev+0x10/0x10 [ 146.579620][ T7857] ? bus_add_driver+0x2b5/0x5b0 [ 146.584461][ T7857] bus_add_driver+0x305/0x5b0 [ 146.589127][ T7857] driver_register+0x1e2/0x360 [ 146.593894][ T7857] usb_gadget_register_driver_owner+0x132/0x210 [ 146.600141][ T7857] dev_config+0xdce/0x1610 [ 146.604549][ T7857] ? ksys_write+0xc0/0x250 [ 146.608953][ T7857] ? __pfx_dev_config+0x10/0x10 [ 146.613792][ T7857] vfs_write+0x2aa/0x1050 [ 146.618114][ T7857] ? __pfx_dev_config+0x10/0x10 [ 146.622952][ T7857] ? lock_acquire+0x1d1/0x380 [ 146.627613][ T7857] ? __fget_files+0x34/0x3d0 [ 146.632198][ T7857] ? __pfx_vfs_write+0x10/0x10 [ 146.636959][ T7857] ? find_held_lock+0x2b/0x80 [ 146.641651][ T7857] ? __fget_files+0x215/0x3d0 [ 146.646336][ T7857] ? __fget_files+0x21f/0x3d0 [ 146.651002][ T7857] ksys_write+0x12a/0x250 [ 146.655316][ T7857] ? __pfx_ksys_write+0x10/0x10 [ 146.660151][ T7857] do_syscall_64+0x123/0x790 [ 146.664725][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.670601][ T7857] RIP: 0033:0x7ffa74b9e159 [ 146.675008][ T7857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.694705][ T7857] RSP: 002b:00007ffa72df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.703104][ T7857] RAX: ffffffffffffffda RBX: 00007ffa74e25fa0 RCX: 00007ffa74b9e159 [ 146.711057][ T7857] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 146.719010][ T7857] RBP: 00007ffa74c35024 R08: 0000000000000000 R09: 0000000000000000 [ 146.726963][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.734916][ T7857] R13: 00007ffa74e26038 R14: 00007ffa74e25fa0 R15: 00007ffd8e7717d8 [ 146.742975][ T7857] [ 146.746184][ T7857] Kernel Offset: disabled [ 146.750483][ T7857] Rebooting in 86400 seconds..