last executing test programs: 6m58.538738364s ago: executing program 1 (id=2230): socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) listen(r0, 0x1000027b) 6m55.395240079s ago: executing program 1 (id=2235): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) inotify_init1(0x800) 6m54.3513917s ago: executing program 1 (id=2236): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000500)={0x0, 0x80000001}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioprio_set$uid(0x3, 0x0, 0x2004) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 6m53.330008761s ago: executing program 1 (id=2240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x10, 0x1, 0xa43a, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x2, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f0000000500)='GPL\x00', 0x7, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x1}, {0x4, 0x1, 0x10}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="1d0000001000000000000000", @ANYRES32=r8, @ANYBLOB="27983b", @ANYRES64=r6], 0x20) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r9 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r9, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000600)={0x1, r4}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 6m52.111471819s ago: executing program 1 (id=2245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09832dbd700791b51e001f"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x40) 6m51.156842147s ago: executing program 1 (id=2247): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x810) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1002, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) 6m35.556367651s ago: executing program 32 (id=2247): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x810) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1002, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) 5m39.703661817s ago: executing program 0 (id=2550): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0x541b, 0x0) 5m39.350750878s ago: executing program 0 (id=2555): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) 5m38.992896159s ago: executing program 0 (id=2557): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace(0x4208, r2) tkill(r2, 0x12) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x800000000000002) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000002114000000110001"], 0xdc}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020}, 0x2020) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = gettid() r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x11, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x300, 0xc0000000, 0x1, 0x400, 0xe, 0x800005, 0x3, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x6c18, 0x4007a, 0x3, 0x20000003, 0x89, 0x12, 0x7f, 0xfffff801, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) 5m38.080692623s ago: executing program 0 (id=2560): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000004c0)={0xc}) ioctl(r1, 0x3b92, &(0x7f0000000580)="10") sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3508, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) 5m37.534829737s ago: executing program 0 (id=2561): syz_emit_ethernet(0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001800050000000000000000002d000000000000010000000005000100080000000c000500000000000a000000300000001800050000000000000000002d000000000000010000000005000100090000000c000500000000000a"], 0x1bb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040056) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m36.468150098s ago: executing program 0 (id=2565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='2049\n', 0x5) close(r0) 5m20.5287958s ago: executing program 33 (id=2565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='2049\n', 0x5) close(r0) 2m42.125371108s ago: executing program 3 (id=3358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2m41.994379946s ago: executing program 3 (id=3361): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000300)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r5, 0x80045440, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002", @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 2m41.017966444s ago: executing program 3 (id=3366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 2m39.8165651s ago: executing program 3 (id=3372): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x38) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x0, 0x4, 0x0, 0x4, 0x6, 0xa, 0x3, 0xa42c}) 2m39.230128145s ago: executing program 3 (id=3374): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1) 2m38.64579741s ago: executing program 3 (id=3376): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m22.795761596s ago: executing program 34 (id=3376): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m22.126526127s ago: executing program 5 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='1234\n', 0x5) 2m21.84757289s ago: executing program 5 (id=3459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 2m21.471500122s ago: executing program 5 (id=3462): r0 = socket$netlink(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x13f2e, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 2m19.76369747s ago: executing program 5 (id=3465): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x18, 0x4, "339f020bbe82b398000000000000369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x6, 0x3fd]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 2m18.83508582s ago: executing program 5 (id=3468): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000002100)='smaps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2m18.356884692s ago: executing program 5 (id=3472): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() 2m2.859920173s ago: executing program 35 (id=3472): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() 24.11428475s ago: executing program 2 (id=3993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x138, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x108, 0x2, {{0xe, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xffff, 0x0, 0x8, 0x0, 0xfffa, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x5}, {0xc}, {0xc, 0x3, 0x66}, {0xc, 0x3, 0xd}, {0xc, 0x3, 0xb}, {0xc, 0x3, 0x5}]}, @TCA_MQPRIO_MIN_RATE64={0x64, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x5}, {0xc}, {0xc, 0x3, 0x7ff}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x1b}, {0xc, 0x3, 0x81}, {0xc, 0x3, 0x1}]}]}}}]}, 0x138}}, 0x20000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.842099962s ago: executing program 2 (id=3994): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x420b40, 0x0) syz_clone(0xca80300, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x80000b6, @local, 0x8}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01040000000000000000050000000900010073797a30000000004c000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000020000480080001000000000008000200000000000c00030073797a5f74756e0054000000060a01040000000000000000050000000900010073797a30000000000900020073797a300000000028000480240001800b00010072656a6563740000140002800800010000000000050002000000000014000000110001"], 0xe8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000014"], 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', &(0x7f0000000240)={0x2000, 0xe7, 0x8}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x42200, 0x0) ioctl$TCSETS(r5, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2eea00, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 19.901731825s ago: executing program 2 (id=4003): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "a2eaadb2febc3989", "1aa05aecef89e0b42632905fb55c3056dd747ef606a10aabd0f080b3ac7a75ad", "0f00", "0100008000"}, 0x38) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) 19.700229889s ago: executing program 2 (id=4006): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 19.608666796s ago: executing program 2 (id=4008): mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='localhost /\n\x00', 0xc) 19.170182904s ago: executing program 2 (id=4012): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 7.422243398s ago: executing program 7 (id=4083): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000400)='PASV\r\n', 0x6) write(r3, &(0x7f0000000500)='227 Entering Passive Mo', 0x17) 7.095342202s ago: executing program 8 (id=4086): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 6.892388913s ago: executing program 8 (id=4089): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000156c0)={0x44, &(0x7f0000015400)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.903219997s ago: executing program 7 (id=4091): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040810) 5.677812634s ago: executing program 7 (id=4096): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000780)={0x40, 0x30, 0x1, "b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.794976672s ago: executing program 6 (id=4097): write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x0, 0x77ff}], 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write$tun(r0, 0x0, 0x42) 4.552827649s ago: executing program 6 (id=4100): syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.508309539s ago: executing program 4 (id=4101): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 4.447285548s ago: executing program 6 (id=4102): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000040)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x33f81def, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0xa}, 0x30, 0x0) landlock_restrict_self(r4, 0xe) 4.337077961s ago: executing program 8 (id=4103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.083607439s ago: executing program 8 (id=4104): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x10, 0x1, 0xa43a, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x2, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f0000000500)='GPL\x00', 0x7, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x1}, {0x4, 0x1, 0x10}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="1d0000001000000000000000", @ANYRES32=r7, @ANYBLOB="27983b"], 0x20) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r8 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r8, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000600)={0x1, r4}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4.066201363s ago: executing program 36 (id=4012): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 3.030279352s ago: executing program 6 (id=4106): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) 2.842914077s ago: executing program 8 (id=4107): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000206050000000000003487000026bdf2130084"], 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.838810948s ago: executing program 4 (id=4108): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, 0x0, 0x0, 0xfffffffffffffffc, 0x31}, @fda={0x66646185, 0x1, 0x0, 0x1c}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.774939204s ago: executing program 7 (id=4109): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) close(0x3) 1.765544864s ago: executing program 4 (id=4110): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x8000007, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x4, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x9, 0x14, 0xd, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x8, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000003, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff8, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x2851, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/63, 0x18}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mount(0x0, 0x0, 0x0, 0x0, 0x0) 1.687707072s ago: executing program 7 (id=4111): write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x0, 0x77ff}], 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write$tun(r0, 0x0, 0x42) 1.276155646s ago: executing program 6 (id=4112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x10, 0x1, 0xa43a, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x2, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f0000000500)='GPL\x00', 0x7, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x1}, {0x4, 0x1, 0x10}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="1d0000001000000000000000", @ANYRES32=r8, @ANYBLOB="27983b", @ANYRES64=r6], 0x20) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r9 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r9, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000600)={0x1, r4}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1.131083009s ago: executing program 4 (id=4113): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x1, 0x6, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 255.280818ms ago: executing program 8 (id=4114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000801000)="0000000000000000ffff0000009acf00ffff00000092cf0067000010008b0000670000200089", 0x26) write(0xffffffffffffffff, &(0x7f0000802400)="0000200000e5", 0x6) write(0xffffffffffffffff, &(0x7f0000803000)="cd80", 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x5, 0x2, 0x0, 0x400000, &(0x7f0000800000/0x400000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4}, {0x200000, 0xffffffff, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x87}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0xb, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0xff, 0x1, 0x0, 0x1}, {0xffc, 0x67, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x7f}, {0x2000, 0x7ff}, 0x31, 0x0, 0x30000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000800)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], 0x3000, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 198.074661ms ago: executing program 4 (id=4115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, {@loopback, 0x4e20, 0x1, 0x1}}, 0x44) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) read(r2, &(0x7f0000000500), 0x1000) 185.751671ms ago: executing program 6 (id=4116): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r0, &(0x7f0000000240)="ffffffffffff0011223344664305000f32000000000100112233446600112233446600ff0000", 0x26, 0x0, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) sendto$packet(r0, &(0x7f0000000400)="ffffffffffff00112233445508060001080006040001001122334455ac141463000000000000ac14140a", 0x2a, 0x0, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) sendto$packet(r0, &(0x7f0000000600)="ffffffffffff00112233445508060001080006040001001122334455ac14140a000000000000ac141463", 0x2a, 0x0, &(0x7f0000000700)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) nanosleep(&(0x7f0000000800)={0x1}, 0x0) 118.673719ms ago: executing program 7 (id=4117): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x10, 0x1, 0xa43a, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x2, &(0x7f0000000480)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f0000000500)='GPL\x00', 0x7, 0x85, &(0x7f00000006c0)=""/133, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x7, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x2, 0x7, 0x1}, {0x4, 0x1, 0x10}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="1d0000001000000000000000", @ANYRES32=r7, @ANYBLOB="27983b"], 0x20) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000300)) r8 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r8, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000600)={0x1, r4}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=4118): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) kernel console output (not intermixed with test programs): __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 925.800896][T17008] ? __cgroup_account_cputime+0xd8/0x130 [ 925.800929][T17008] ? __css_rstat_updated+0x1ce/0x590 [ 925.800964][T17008] ? pick_eevdf+0x23e/0x880 [ 925.801003][T17008] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 925.801035][T17008] ? policy_nodemask+0xed/0x4f0 [ 925.801072][T17008] alloc_pages_mpol+0x201/0x550 [ 925.801106][T17008] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 925.801137][T17008] ? lock_acquire+0x1d1/0x380 [ 925.801162][T17008] ? finish_task_switch.isra.0+0x149/0x10d0 [ 925.801192][T17008] ? find_held_lock+0x2b/0x80 [ 925.801230][T17008] alloc_pages_noprof+0x1a/0x160 [ 925.801254][T17008] anon_pipe_prefill_and_lock+0x102/0x580 [ 925.801292][T17008] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 925.801324][T17008] ? rcu_is_watching+0x13/0xc0 [ 925.801361][T17008] ? __lock_acquire+0x5c0/0x1f40 [ 925.801392][T17008] anon_pipe_write+0x164/0x1b50 [ 925.801432][T17008] ? lock_acquire+0x1d1/0x380 [ 925.801459][T17008] ? futex_unqueue+0x29/0x2c0 [ 925.801492][T17008] ? find_held_lock+0x2b/0x80 [ 925.801523][T17008] ? __pfx_anon_pipe_write+0x10/0x10 [ 925.801553][T17008] ? futex_unqueue+0x133/0x2c0 [ 925.801589][T17008] ? futex_unqueue+0x13d/0x2c0 [ 925.801626][T17008] fifo_pipe_write+0x28/0x510 [ 925.801655][T17008] ? __pfx___futex_wait+0x10/0x10 [ 925.801682][T17008] do_iter_readv_writev+0x6f7/0x930 [ 925.801709][T17008] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 925.801731][T17008] ? avc_policy_seqno+0x9/0x20 [ 925.801751][T17008] ? selinux_file_permission+0x8f/0x6d0 [ 925.801788][T17008] ? bpf_lsm_file_permission+0x9/0x10 [ 925.801818][T17008] ? security_file_permission+0x76/0x210 [ 925.801850][T17008] ? rw_verify_area+0xce/0x6d0 [ 925.801875][T17008] vfs_writev+0x360/0xdd0 [ 925.801902][T17008] ? __lock_acquire+0x5c0/0x1f40 [ 925.801930][T17008] ? __pfx_vfs_writev+0x10/0x10 [ 925.801957][T17008] ? lock_acquire+0x1d1/0x380 [ 925.801981][T17008] ? __fget_files+0x34/0x3d0 [ 925.802019][T17008] ? __fget_files+0x21f/0x3d0 [ 925.802058][T17008] ? do_writev+0x28a/0x340 [ 925.802080][T17008] do_writev+0x28a/0x340 [ 925.802104][T17008] ? __pfx_do_writev+0x10/0x10 [ 925.802137][T17008] do_syscall_64+0x123/0x790 [ 925.802166][T17008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.802189][T17008] RIP: 0033:0x7f3db259e159 [ 925.802208][T17008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.802230][T17008] RSP: 002b:00007f3db3437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 925.802253][T17008] RAX: ffffffffffffffda RBX: 00007f3db2825fa0 RCX: 00007f3db259e159 [ 925.802269][T17008] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 925.802282][T17008] RBP: 00007f3db263506b R08: 0000000000000000 R09: 0000000000000000 [ 925.802296][T17008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.802309][T17008] R13: 00007f3db2826038 R14: 00007f3db2825fa0 R15: 00007fff8b5668f8 [ 925.802339][T17008] [ 926.127583][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.127636][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.152121][ T44] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 926.315376][ T44] usb 7-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 926.321751][ T44] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.321785][ T44] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 926.321812][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 926.321843][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.329329][ T44] usb 7-1: config 0 descriptor?? [ 926.572367][ T5717] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 926.747319][ T5717] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 926.750997][ T5717] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.751128][ T5717] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.861250][ T5717] usb 9-1: config 0 descriptor?? [ 926.901582][ T5717] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 926.947326][T17029] FAULT_INJECTION: forcing a failure. [ 926.947326][T17029] name failslab, interval 1, probability 0, space 0, times 0 [ 926.947359][T17029] CPU: 1 UID: 0 PID: 17029 Comm: syz.4.3726 Not tainted syzkaller #0 PREEMPT(full) [ 926.947386][T17029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 926.947400][T17029] Call Trace: [ 926.947408][T17029] [ 926.947418][T17029] dump_stack_lvl+0x100/0x190 [ 926.947460][T17029] should_fail_ex.cold+0x5/0xa [ 926.947491][T17029] should_failslab+0xc2/0x120 [ 926.947526][T17029] __kmalloc_noprof+0xfc/0x840 [ 926.947556][T17029] ? n_hdlc_alloc_buf+0x5b/0xf0 [ 926.947591][T17029] n_hdlc_alloc_buf+0x5b/0xf0 [ 926.947630][T17029] n_hdlc_tty_open+0x257/0x520 [ 926.947660][T17029] ? __pfx_n_hdlc_tty_open+0x10/0x10 [ 926.947690][T17029] tty_ldisc_open+0xa2/0x120 [ 926.947717][T17029] tty_set_ldisc+0x325/0x740 [ 926.947750][T17029] tty_ioctl+0x695/0x1800 [ 926.947787][T17029] ? __pfx_tty_ioctl+0x10/0x10 [ 926.947823][T17029] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 926.947862][T17029] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 926.947900][T17029] ? __fget_files+0x34/0x3d0 [ 926.947945][T17029] ? selinux_file_ioctl+0x13b/0x290 [ 926.947974][T17029] ? selinux_file_ioctl+0xb6/0x290 [ 926.948006][T17029] ? __pfx_tty_ioctl+0x10/0x10 [ 926.948039][T17029] __x64_sys_ioctl+0x18e/0x210 [ 926.948073][T17029] do_syscall_64+0x123/0x790 [ 926.948105][T17029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.948131][T17029] RIP: 0033:0x7f3929d9e159 [ 926.948151][T17029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.948173][T17029] RSP: 002b:00007f392ac10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 926.948196][T17029] RAX: ffffffffffffffda RBX: 00007f392a025fa0 RCX: 00007f3929d9e159 [ 926.948214][T17029] RDX: 0000200000000040 RSI: 0000000000005423 RDI: 0000000000000004 [ 926.948229][T17029] RBP: 00007f3929e3506b R08: 0000000000000000 R09: 0000000000000000 [ 926.948244][T17029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.948259][T17029] R13: 00007f392a026038 R14: 00007f392a025fa0 R15: 00007fff92c68918 [ 926.948294][T17029] [ 927.013851][ T44] input: HID 12ba:0100 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:12BA:0100.0028/input/input45 [ 927.149146][ T44] sony 0003:12BA:0100.0028: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.6-1/input0 [ 927.195407][ T44] usb 9-1: USB disconnect, device number 5 [ 927.271749][ T25] usb 7-1: USB disconnect, device number 21 [ 927.301511][T17035] input: syz0 as /devices/virtual/input/input46 [ 927.452903][ T5717] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 927.481943][T17045] FAULT_INJECTION: forcing a failure. [ 927.481943][T17045] name failslab, interval 1, probability 0, space 0, times 0 [ 927.481975][T17045] CPU: 1 UID: 0 PID: 17045 Comm: syz.4.3730 Not tainted syzkaller #0 PREEMPT(full) [ 927.482003][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 927.482017][T17045] Call Trace: [ 927.482028][T17045] [ 927.482037][T17045] dump_stack_lvl+0x100/0x190 [ 927.482074][T17045] should_fail_ex.cold+0x5/0xa [ 927.482106][T17045] should_failslab+0xc2/0x120 [ 927.482139][T17045] __kmalloc_noprof+0xfc/0x840 [ 927.482167][T17045] ? do_handle_open+0x62b/0xf20 [ 927.482200][T17045] do_handle_open+0x62b/0xf20 [ 927.482229][T17045] ? __pfx_do_handle_open+0x10/0x10 [ 927.482263][T17045] ? xfd_validate_state+0x129/0x190 [ 927.482308][T17045] ? do_syscall_64+0x123/0x790 [ 927.482334][T17045] do_syscall_64+0x123/0x790 [ 927.482362][T17045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.482387][T17045] RIP: 0033:0x7f3929d9e159 [ 927.482406][T17045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.482428][T17045] RSP: 002b:00007f392ac10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 927.482451][T17045] RAX: ffffffffffffffda RBX: 00007f392a025fa0 RCX: 00007f3929d9e159 [ 927.482467][T17045] RDX: 0000000000000400 RSI: 0000200000000340 RDI: 0000000000000003 [ 927.482481][T17045] RBP: 00007f3929e3506b R08: 0000000000000000 R09: 0000000000000000 [ 927.482496][T17045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.482509][T17045] R13: 00007f392a026038 R14: 00007f392a025fa0 R15: 00007fff92c68918 [ 927.482542][T17045] [ 927.652263][ T44] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 927.692125][ T5717] usb 8-1: Using ep0 maxpacket: 8 [ 927.692636][ T5717] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 927.693535][ T5717] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 927.693582][ T5717] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 927.693607][ T5717] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 927.693633][ T5717] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 927.693660][ T5717] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.693700][ T5717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.780917][T17051] FAULT_INJECTION: forcing a failure. [ 927.780917][T17051] name failslab, interval 1, probability 0, space 0, times 0 [ 927.780975][T17051] CPU: 0 UID: 0 PID: 17051 Comm: syz.4.3732 Not tainted syzkaller #0 PREEMPT(full) [ 927.781003][T17051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 927.781018][T17051] Call Trace: [ 927.781027][T17051] [ 927.781037][T17051] dump_stack_lvl+0x100/0x190 [ 927.781091][T17051] should_fail_ex.cold+0x5/0xa [ 927.781127][T17051] should_failslab+0xc2/0x120 [ 927.781160][T17051] __kmalloc_cache_noprof+0x91/0x6d0 [ 927.781186][T17051] ? quota_mt_check+0xa9/0x1d0 [ 927.781223][T17051] quota_mt_check+0xa9/0x1d0 [ 927.781254][T17051] ? __pfx_quota_mt_check+0x10/0x10 [ 927.781284][T17051] xt_check_match+0x117/0x1c0 [ 927.781308][T17051] find_check_entry.isra.0+0x356/0xa00 [ 927.781350][T17051] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 927.781395][T17051] ? kasan_quarantine_put+0x104/0x240 [ 927.781422][T17051] ? lockdep_hardirqs_on+0x7d/0x110 [ 927.781449][T17051] ? translate_table+0xbb0/0x1770 [ 927.781480][T17051] ? translate_table+0xbd8/0x1770 [ 927.781511][T17051] ? kfree+0x22b/0x6d0 [ 927.781532][T17051] ? xt_check_table_hooks+0x206/0x330 [ 927.781570][T17051] translate_table+0xcb9/0x1770 [ 927.781618][T17051] ? __pfx_translate_table+0x10/0x10 [ 927.781660][T17051] do_ip6t_set_ctl+0x689/0xd00 [ 927.781692][T17051] ? nf_sockopt_find.isra.0+0x222/0x290 [ 927.781727][T17051] ? nf_sockopt_find.isra.0+0x222/0x290 [ 927.781774][T17051] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 927.781808][T17051] ? __mutex_unlock_slowpath+0x35d/0x930 [ 927.781838][T17051] ? futex_wait+0x11e/0x370 [ 927.781864][T17051] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 927.781906][T17051] ? nf_sockopt_find.isra.0+0x222/0x290 [ 927.781945][T17051] nf_setsockopt+0x8d/0xf0 [ 927.781984][T17051] ipv6_setsockopt+0x135/0x170 [ 927.782021][T17051] tcp_setsockopt+0xa7/0x100 [ 927.782049][T17051] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 927.782076][T17051] do_sock_setsockopt+0xf3/0x1d0 [ 927.782105][T17051] __sys_setsockopt+0x195/0x220 [ 927.782141][T17051] __x64_sys_setsockopt+0xbd/0x160 [ 927.782170][T17051] ? do_syscall_64+0xae/0x790 [ 927.782195][T17051] ? lockdep_hardirqs_on+0x7d/0x110 [ 927.782220][T17051] do_syscall_64+0x123/0x790 [ 927.782247][T17051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.782272][T17051] RIP: 0033:0x7f3929d9e159 [ 927.782292][T17051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.782315][T17051] RSP: 002b:00007f392ac10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 927.782339][T17051] RAX: ffffffffffffffda RBX: 00007f392a025fa0 RCX: 00007f3929d9e159 [ 927.782355][T17051] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 927.782371][T17051] RBP: 00007f3929e3506b R08: 0000000000000350 R09: 0000000000000000 [ 927.782386][T17051] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.782401][T17051] R13: 00007f392a026038 R14: 00007f392a025fa0 R15: 00007fff92c68918 [ 927.782433][T17051] [ 927.804309][ T44] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 927.806848][ T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.806888][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.814219][ T44] usb 9-1: config 0 descriptor?? [ 927.824172][ T44] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 928.056642][ T5717] usb 8-1: usb_control_msg returned -32 [ 928.056684][ T5717] usbtmc 8-1:16.0: can't read capabilities [ 928.065131][T17027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.065534][T17027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.084522][ T44] usb 9-1: USB disconnect, device number 6 [ 928.572292][ T44] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 928.770415][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 929.042269][ T44] usb 9-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.00 [ 929.080160][ T44] usb 9-1: config index 0 descriptor too short (expected 53, got 36) [ 929.080194][ T44] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.080237][ T44] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 129 [ 929.080263][ T44] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 929.080304][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.320172][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 929.500313][ T44] usb 9-1: can't set config #1, error -71 [ 929.506271][ T44] usb 9-1: USB disconnect, device number 7 [ 929.527088][T17075] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 929.534629][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.555634][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.555660][ T10] usb 3-1: Product: syz [ 929.555684][ T10] usb 3-1: Manufacturer: syz [ 929.555702][ T10] usb 3-1: SerialNumber: syz [ 929.598851][T17080] capability: warning: `syz.8.3741' uses 32-bit capabilities (legacy support in use) [ 929.723421][T10790] usb 8-1: USB disconnect, device number 10 [ 929.922376][ T44] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 930.072731][ T44] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 930.073638][ T44] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.073681][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 930.073707][ T44] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 930.073733][ T44] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 930.073766][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.112580][ T30] audit: type=1400 audit(1791178184.501:747): avc: denied { connect } for pid=17093 comm="syz.8.3747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 930.432333][T12727] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 930.597541][T12727] usb 9-1: Using ep0 maxpacket: 16 [ 930.601817][T12727] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 930.606901][T12727] usb 9-1: config 0 has no interfaces? [ 930.627553][T12727] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.627578][T12727] usb 9-1: Product: syz [ 930.627595][T12727] usb 9-1: Manufacturer: syz [ 930.627612][T12727] usb 9-1: SerialNumber: syz [ 930.717851][T12727] usb 9-1: config 0 descriptor?? [ 930.729838][ T10] cdc_ncm 3-1:1.0: bind() failure [ 931.253252][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 931.253297][ T10] cdc_ncm 3-1:1.1: bind() failure [ 931.257166][ T10] usb 3-1: USB disconnect, device number 55 [ 931.325866][T16666] tipc: Subscription rejected, illegal request [ 931.338571][T10790] usb 9-1: USB disconnect, device number 8 [ 931.406434][ T44] gud 7-1:1.0: USB-1: Failed to add TV modes (ret=-5) [ 931.406482][ T44] gud 7-1:1.0: USB-1: Failed to add properties (ret=-5) [ 931.406523][ T44] gud 7-1:1.0: Failed to get connectors (error=-5) [ 931.406549][ T44] gud 7-1:1.0: probe with driver gud failed with error -5 [ 931.410949][ T30] audit: type=1400 audit(1791178185.801:748): avc: denied { open } for pid=17104 comm="syz.4.3751" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 931.505404][T17107] nbd4: detected capacity change from 0 to 18 [ 931.506882][T15082] block nbd4: Receive control failed (result -107) [ 931.519176][T13584] block nbd4: Dead connection, failed to find a fallback [ 931.519197][T13584] block nbd4: shutting down sockets [ 931.519211][T13584] blk_print_req_error: 10 callbacks suppressed [ 931.519225][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.519252][T13584] buffer_io_error: 10 callbacks suppressed [ 931.519263][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.519685][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.519711][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.520816][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.520843][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.520935][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.520959][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.521044][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.521067][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.521249][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.521272][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.521372][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.521406][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.521492][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.521522][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.521550][T15978] ldm_validate_partition_table(): Disk read failed. [ 931.521622][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.521646][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.521730][T13584] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 931.521754][T13584] Buffer I/O error on dev nbd4, logical block 0, async page read [ 931.521923][T15978] Dev nbd4: unable to read RDB block 0 [ 931.524220][T15978] nbd4: unable to read partition table [ 931.524393][T15978] nbd4: partition table beyond EOD, truncated [ 931.540984][T15978] ldm_validate_partition_table(): Disk read failed. [ 931.541283][T15978] Dev nbd4: unable to read RDB block 0 [ 931.541519][T15978] nbd4: unable to read partition table [ 931.541687][T15978] nbd4: partition table beyond EOD, truncated [ 931.590397][T17107] nbd4: detected capacity change from 18 to 8589934592 [ 931.649904][T10790] usb 7-1: USB disconnect, device number 22 [ 931.857349][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3755'. [ 931.964732][T17122] FAULT_INJECTION: forcing a failure. [ 931.964732][T17122] name failslab, interval 1, probability 0, space 0, times 0 [ 931.964765][T17122] CPU: 1 UID: 0 PID: 17122 Comm: syz.8.3759 Not tainted syzkaller #0 PREEMPT(full) [ 931.964793][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 931.964807][T17122] Call Trace: [ 931.964816][T17122] [ 931.964825][T17122] dump_stack_lvl+0x100/0x190 [ 931.964865][T17122] should_fail_ex.cold+0x5/0xa [ 931.964901][T17122] should_failslab+0xc2/0x120 [ 931.964934][T17122] __kmalloc_cache_noprof+0x91/0x6d0 [ 931.964959][T17122] ? create_filter_start.constprop.0+0x1c4/0x310 [ 931.965004][T17122] create_filter_start.constprop.0+0x1c4/0x310 [ 931.965039][T17122] apply_subsystem_event_filter+0x188/0x17a0 [ 931.965071][T17122] ? __might_fault+0xc5/0x140 [ 931.965096][T17122] ? __might_fault+0xc5/0x140 [ 931.965122][T17122] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 931.965160][T17122] ? _copy_from_user+0x59/0xd0 [ 931.965192][T17122] subsystem_filter_write+0x95/0x120 [ 931.965224][T17122] vfs_write+0x2aa/0x1050 [ 931.965252][T17122] ? __pfx_subsystem_filter_write+0x10/0x10 [ 931.965281][T17122] ? lock_acquire+0x1d1/0x380 [ 931.965307][T17122] ? __fget_files+0x34/0x3d0 [ 931.965338][T17122] ? __pfx_vfs_write+0x10/0x10 [ 931.965366][T17122] ? find_held_lock+0x2b/0x80 [ 931.965400][T17122] ? __fget_files+0x215/0x3d0 [ 931.965437][T17122] ? __fget_files+0x21f/0x3d0 [ 931.965477][T17122] ksys_write+0x12a/0x250 [ 931.965503][T17122] ? __pfx_ksys_write+0x10/0x10 [ 931.965540][T17122] do_syscall_64+0x123/0x790 [ 931.965575][T17122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.965601][T17122] RIP: 0033:0x7f3db259e159 [ 931.965620][T17122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.965642][T17122] RSP: 002b:00007f3db3437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.965665][T17122] RAX: ffffffffffffffda RBX: 00007f3db2825fa0 RCX: 00007f3db259e159 [ 931.965679][T17122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 931.965692][T17122] RBP: 00007f3db263506b R08: 0000000000000000 R09: 0000000000000000 [ 931.965705][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.965718][T17122] R13: 00007f3db2826038 R14: 00007f3db2825fa0 R15: 00007fff8b5668f8 [ 931.965749][T17122] [ 932.268088][T17129] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 932.497074][T17147] hsr0: entered allmulticast mode [ 932.497097][T17147] hsr_slave_0: entered allmulticast mode [ 932.497116][T17147] hsr_slave_1: entered allmulticast mode [ 932.498092][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3768'. [ 932.532624][T17147] hsr_slave_0: left promiscuous mode [ 932.533484][T17147] hsr_slave_1: left promiscuous mode [ 932.613361][ T44] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 932.763405][ T44] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 932.764744][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.768557][ T44] usb 7-1: config 0 descriptor?? [ 932.796997][ T44] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 932.974747][ T44] gp8psk: usb in 128 operation failed. [ 932.975094][ T44] gp8psk: usb in 137 operation failed. [ 932.975116][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 932.975728][ T44] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 932.975788][ T44] usb 7-1: media controller created [ 933.038312][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 933.063333][ T44] gp8psk_fe: Frontend attached [ 933.063722][ T44] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 933.064393][ T44] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 933.161517][ T44] gp8psk: usb in 138 operation failed. [ 933.161535][ T44] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 933.161549][ T44] gp8psk: found Genpix USB device pID = 203 (hex) [ 933.195877][ T44] usb 7-1: USB disconnect, device number 23 [ 933.311880][ T44] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 933.488261][T17165] kvm: pic: non byte write [ 933.688012][T17180] FAULT_INJECTION: forcing a failure. [ 933.688012][T17180] name failslab, interval 1, probability 0, space 0, times 0 [ 933.688043][T17180] CPU: 1 UID: 0 PID: 17180 Comm: syz.8.3781 Not tainted syzkaller #0 PREEMPT(full) [ 933.688071][T17180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 933.688086][T17180] Call Trace: [ 933.688094][T17180] [ 933.688103][T17180] dump_stack_lvl+0x100/0x190 [ 933.688143][T17180] should_fail_ex.cold+0x5/0xa [ 933.688176][T17180] should_failslab+0xc2/0x120 [ 933.688208][T17180] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 933.688238][T17180] ? __d_alloc+0x35/0xa50 [ 933.688277][T17180] __d_alloc+0x35/0xa50 [ 933.688315][T17180] d_alloc_pseudo+0x1c/0xc0 [ 933.688342][T17180] alloc_file_pseudo+0x118/0x290 [ 933.688379][T17180] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 933.688416][T17180] ? _iommufd_object_alloc+0x191/0x210 [ 933.688449][T17180] ? _iommufd_object_alloc+0x191/0x210 [ 933.688486][T17180] __anon_inode_getfile+0xe8/0x280 [ 933.688513][T17180] ? __init_waitqueue_head+0xca/0x150 [ 933.688547][T17180] iommufd_eventq_init+0xa5/0x200 [ 933.688574][T17180] iommufd_fault_alloc+0x184/0x3f0 [ 933.688601][T17180] iommufd_fops_ioctl+0x358/0x520 [ 933.688633][T17180] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 933.688663][T17180] ? __fget_files+0x34/0x3d0 [ 933.688714][T17180] ? selinux_file_ioctl+0x13b/0x290 [ 933.688745][T17180] ? selinux_file_ioctl+0xb6/0x290 [ 933.688775][T17180] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 933.688809][T17180] __x64_sys_ioctl+0x18e/0x210 [ 933.688839][T17180] do_syscall_64+0x123/0x790 [ 933.688868][T17180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.688894][T17180] RIP: 0033:0x7f3db259e159 [ 933.688914][T17180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.688936][T17180] RSP: 002b:00007f3db3437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 933.688959][T17180] RAX: ffffffffffffffda RBX: 00007f3db2825fa0 RCX: 00007f3db259e159 [ 933.688975][T17180] RDX: 0000200000000580 RSI: 0000000000003b8e RDI: 0000000000000004 [ 933.688990][T17180] RBP: 00007f3db263506b R08: 0000000000000000 R09: 0000000000000000 [ 933.689005][T17180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.689018][T17180] R13: 00007f3db2826038 R14: 00007f3db2825fa0 R15: 00007fff8b5668f8 [ 933.689051][T17180] [ 934.148192][T17193] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3785'. [ 934.152414][T10790] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 934.305834][T10790] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 934.306933][T10790] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 934.306965][T10790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 934.306994][T10790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 934.308894][T10790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.308919][T10790] usb 5-1: Product: syz [ 934.308938][T10790] usb 5-1: Manufacturer: syz [ 934.308954][T10790] usb 5-1: SerialNumber: syz [ 934.313414][T10790] usb 5-1: config 0 descriptor?? [ 934.468662][T17203] FAULT_INJECTION: forcing a failure. [ 934.468662][T17203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 934.468697][T17203] CPU: 0 UID: 0 PID: 17203 Comm: syz.7.3789 Not tainted syzkaller #0 PREEMPT(full) [ 934.468724][T17203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 934.468738][T17203] Call Trace: [ 934.468747][T17203] [ 934.468767][T17203] dump_stack_lvl+0x100/0x190 [ 934.468807][T17203] should_fail_ex.cold+0x5/0xa [ 934.468836][T17203] ? prepare_alloc_pages+0x16d/0x5b0 [ 934.468873][T17203] should_fail_alloc_page+0xeb/0x140 [ 934.468910][T17203] prepare_alloc_pages+0x1f0/0x5b0 [ 934.468943][T17203] ? find_held_lock+0x2b/0x80 [ 934.468980][T17203] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 934.469011][T17203] ? folio_batch_move_lru+0x3a9/0xc00 [ 934.469047][T17203] ? __pfx_lru_add+0x10/0x10 [ 934.469085][T17203] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 934.469127][T17203] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 934.469158][T17203] ? __lock_acquire+0x5c0/0x1f40 [ 934.469202][T17203] ? find_held_lock+0x2b/0x80 [ 934.469234][T17203] ? page_table_check_set+0x30f/0x580 [ 934.469266][T17203] ? page_table_check_set+0x30f/0x580 [ 934.469302][T17203] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 934.469334][T17203] ? policy_nodemask+0xed/0x4f0 [ 934.469371][T17203] alloc_pages_mpol+0x201/0x550 [ 934.469407][T17203] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 934.469441][T17203] ? folio_add_new_anon_rmap+0x52d/0x18c0 [ 934.469483][T17203] folio_alloc_mpol_noprof+0x36/0x260 [ 934.469510][T17203] vma_alloc_folio_noprof+0xed/0x1d0 [ 934.469534][T17203] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 934.469559][T17203] ? __pfx___might_resched+0x10/0x10 [ 934.469582][T17203] ? copy_page_range+0x1c91/0x57c0 [ 934.469624][T17203] copy_page_range+0x4096/0x57c0 [ 934.469694][T17203] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 934.469724][T17203] ? __pfx_copy_page_range+0x10/0x10 [ 934.469766][T17203] ? mas_wr_store_entry+0xa4/0x1d50 [ 934.469810][T17203] ? mas_store+0x745/0xe20 [ 934.469854][T17203] ? __pfx___vma_start_write+0x10/0x10 [ 934.469898][T17203] dup_mmap+0x1230/0x2370 [ 934.469944][T17203] ? __pfx_dup_mmap+0x10/0x10 [ 934.469976][T17203] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 934.470002][T17203] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 934.470031][T17203] ? __lock_acquire+0x5c0/0x1f40 [ 934.470073][T17203] ? lock_acquire+0x1d1/0x380 [ 934.470099][T17203] ? copy_process+0x4816/0x8380 [ 934.470141][T17203] copy_process+0x4821/0x8380 [ 934.470187][T17203] ? __pfx_copy_process+0x10/0x10 [ 934.470215][T17203] ? futex_wake+0x4ea/0x5e0 [ 934.470250][T17203] kernel_clone+0x176/0x9d0 [ 934.470281][T17203] ? __pfx_kernel_clone+0x10/0x10 [ 934.470314][T17203] ? ksys_write+0x190/0x250 [ 934.470364][T17203] __do_sys_clone+0xd9/0x120 [ 934.470392][T17203] ? __pfx___do_sys_clone+0x10/0x10 [ 934.470419][T17203] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 934.470476][T17203] do_syscall_64+0x123/0x790 [ 934.470506][T17203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.470530][T17203] RIP: 0033:0x7f0bb099e159 [ 934.470551][T17203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.470574][T17203] RSP: 002b:00007f0bb1785fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 934.470599][T17203] RAX: ffffffffffffffda RBX: 00007f0bb0c26090 RCX: 00007f0bb099e159 [ 934.470616][T17203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100011 [ 934.470631][T17203] RBP: 00007f0bb0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 934.470646][T17203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 934.470660][T17203] R13: 00007f0bb0c26128 R14: 00007f0bb0c26090 R15: 00007fff1625ebe8 [ 934.470693][T17203] [ 934.569768][T10790] powermate: unknown product id 0240 [ 934.569783][T10790] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 934.569981][T10790] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 934.605500][T10790] usb 5-1: USB disconnect, device number 40 [ 934.892240][T17210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 935.053147][T17215] FAULT_INJECTION: forcing a failure. [ 935.053147][T17215] name failslab, interval 1, probability 0, space 0, times 0 [ 935.053180][T17215] CPU: 1 UID: 0 PID: 17215 Comm: syz.6.3794 Not tainted syzkaller #0 PREEMPT(full) [ 935.053215][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 935.053230][T17215] Call Trace: [ 935.053238][T17215] [ 935.053248][T17215] dump_stack_lvl+0x100/0x190 [ 935.053287][T17215] should_fail_ex.cold+0x5/0xa [ 935.053321][T17215] should_failslab+0xc2/0x120 [ 935.053355][T17215] kmem_cache_alloc_noprof+0x92/0x6a0 [ 935.053384][T17215] ? prepare_creds+0x2c/0x950 [ 935.053413][T17215] prepare_creds+0x2c/0x950 [ 935.053439][T17215] __sys_setregid+0x109/0x910 [ 935.053468][T17215] do_syscall_64+0x123/0x790 [ 935.053497][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.053521][T17215] RIP: 0033:0x7f61acd9e159 [ 935.053540][T17215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.053562][T17215] RSP: 002b:00007f61aaff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 935.053585][T17215] RAX: ffffffffffffffda RBX: 00007f61ad025fa0 RCX: 00007f61acd9e159 [ 935.053601][T17215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 935.053615][T17215] RBP: 00007f61ace3506b R08: 0000000000000000 R09: 0000000000000000 [ 935.053629][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.053644][T17215] R13: 00007f61ad026038 R14: 00007f61ad025fa0 R15: 00007ffe609c43a8 [ 935.053676][T17215] [ 935.061757][T17213] FAULT_INJECTION: forcing a failure. [ 935.061757][T17213] name failslab, interval 1, probability 0, space 0, times 0 [ 935.061790][T17213] CPU: 0 UID: 0 PID: 17213 Comm: syz.8.3793 Not tainted syzkaller #0 PREEMPT(full) [ 935.061818][T17213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 935.061834][T17213] Call Trace: [ 935.061843][T17213] [ 935.061853][T17213] dump_stack_lvl+0x100/0x190 [ 935.061892][T17213] should_fail_ex.cold+0x5/0xa [ 935.061928][T17213] should_failslab+0xc2/0x120 [ 935.061962][T17213] __kmalloc_cache_noprof+0x91/0x6d0 [ 935.061988][T17213] ? __debugfs_file_get+0x2ac/0x860 [ 935.062029][T17213] __debugfs_file_get+0x2ac/0x860 [ 935.062069][T17213] ? __pfx___debugfs_file_get+0x10/0x10 [ 935.062104][T17213] ? path_get+0x61/0x80 [ 935.062139][T17213] full_proxy_open_regular+0x4f/0x370 [ 935.062171][T17213] do_dentry_open+0x6ab/0x14d0 [ 935.062196][T17213] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 935.062239][T17213] vfs_open+0x82/0x3f0 [ 935.062275][T17213] path_openat+0x19fa/0x2440 [ 935.062310][T17213] ? __pfx_path_openat+0x10/0x10 [ 935.062349][T17213] do_file_open+0x20e/0x430 [ 935.062382][T17213] ? __pfx_do_file_open+0x10/0x10 [ 935.062434][T17213] ? _raw_spin_unlock+0x28/0x50 [ 935.062469][T17213] ? alloc_fd+0x471/0x7a0 [ 935.062508][T17213] do_sys_openat2+0x10f/0x1e0 [ 935.062542][T17213] ? __pfx_do_sys_openat2+0x10/0x10 [ 935.062586][T17213] __x64_sys_openat+0x12d/0x210 [ 935.062621][T17213] ? __pfx___x64_sys_openat+0x10/0x10 [ 935.062667][T17213] do_syscall_64+0x123/0x790 [ 935.062695][T17213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.062718][T17213] RIP: 0033:0x7f3db259e159 [ 935.062736][T17213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.062759][T17213] RSP: 002b:00007f3db3437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 935.062781][T17213] RAX: ffffffffffffffda RBX: 00007f3db2825fa0 RCX: 00007f3db259e159 [ 935.062797][T17213] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 935.062812][T17213] RBP: 00007f3db263506b R08: 0000000000000000 R09: 0000000000000000 [ 935.062826][T17213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.062841][T17213] R13: 00007f3db2826038 R14: 00007f3db2825fa0 R15: 00007fff8b5668f8 [ 935.062872][T17213] [ 936.528177][T17235] hsr0: entered allmulticast mode [ 936.528200][T17235] hsr_slave_0: entered allmulticast mode [ 936.528220][T17235] hsr_slave_1: entered allmulticast mode [ 936.560955][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3800'. [ 936.561201][T17235] hsr_slave_0: left promiscuous mode [ 936.578653][T17235] hsr_slave_1: left promiscuous mode [ 936.601382][T17235] hsr0 (unregistering): left allmulticast mode [ 937.143009][ T5588] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 937.304780][ T5588] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 937.329147][ T5588] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.432875][ T5588] usb 9-1: config 0 descriptor?? [ 938.054803][ T5588] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 939.058963][ T5588] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 939.058981][ T5588] [drm] Initialized udl on minor 1 [ 939.061276][ T5588] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 939.061624][ T5588] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 939.101838][ T5588] usb 9-1: USB disconnect, device number 9 [ 941.255375][T17292] input: syz0 as /devices/virtual/input/input48 [ 941.416004][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3815'. [ 943.973234][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 944.172920][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 944.190284][ T10] usb 9-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 944.207071][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.207142][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.207175][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 944.207317][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.398517][ T10] usb 9-1: config 0 descriptor?? [ 944.768947][T17311] FAULT_INJECTION: forcing a failure. [ 944.768947][T17311] name failslab, interval 1, probability 0, space 0, times 0 [ 944.768976][T17311] CPU: 0 UID: 0 PID: 17311 Comm: syz.7.3823 Not tainted syzkaller #0 PREEMPT(full) [ 944.769006][T17311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 944.769020][T17311] Call Trace: [ 944.769028][T17311] [ 944.769038][T17311] dump_stack_lvl+0x100/0x190 [ 944.769078][T17311] should_fail_ex.cold+0x5/0xa [ 944.769112][T17311] should_failslab+0xc2/0x120 [ 944.769146][T17311] __kmalloc_cache_noprof+0x91/0x6d0 [ 944.769172][T17311] ? sctp_add_bind_addr+0xae/0x3e0 [ 944.769203][T17311] sctp_add_bind_addr+0xae/0x3e0 [ 944.769232][T17311] sctp_copy_local_addr_list+0x349/0x550 [ 944.769267][T17311] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 944.769303][T17311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 944.769337][T17311] sctp_bind_addr_copy+0x331/0x530 [ 944.769369][T17311] sctp_connect_new_asoc+0x1c9/0x770 [ 944.769417][T17311] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 944.769468][T17311] sctp_sendmsg+0x1743/0x22e0 [ 944.769513][T17311] ? __pfx_sctp_sendmsg+0x10/0x10 [ 944.769542][T17311] ? sock_has_perm+0x25a/0x2f0 [ 944.769567][T17311] ? __pfx_sock_has_perm+0x10/0x10 [ 944.769613][T17311] ? __pfx_sctp_sendmsg+0x10/0x10 [ 944.769649][T17311] inet_sendmsg+0x11c/0x140 [ 944.769686][T17311] ____sys_sendmsg+0x9c9/0xbe0 [ 944.769711][T17311] ? __pfx_inet_sendmsg+0x10/0x10 [ 944.769741][T17311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 944.769773][T17311] ? futex_unqueue+0x133/0x2c0 [ 944.769822][T17311] ___sys_sendmsg+0x190/0x1e0 [ 944.769853][T17311] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.769881][T17311] ? __pfx___futex_wait+0x10/0x10 [ 944.769904][T17311] ? __pfx_try_to_wake_up+0x10/0x10 [ 944.769932][T17311] ? futex_hash+0x311/0x400 [ 944.769970][T17311] ? __fget_files+0x34/0x3d0 [ 944.770026][T17311] __sys_sendmmsg+0x20c/0x440 [ 944.770065][T17311] ? __pfx___sys_sendmmsg+0x10/0x10 [ 944.770096][T17311] ? file_init_path+0x48e/0x670 [ 944.770139][T17311] ? __pfx_do_futex+0x10/0x10 [ 944.770185][T17311] ? __sys_socket+0xac/0x260 [ 944.770212][T17311] ? xfd_validate_state+0x129/0x190 [ 944.770248][T17311] __x64_sys_sendmmsg+0x9c/0x100 [ 944.770280][T17311] ? lockdep_hardirqs_on+0x7d/0x110 [ 944.770306][T17311] do_syscall_64+0x123/0x790 [ 944.770336][T17311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.770361][T17311] RIP: 0033:0x7f0bb099e159 [ 944.770380][T17311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.770404][T17311] RSP: 002b:00007f0bb17a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 944.770429][T17311] RAX: ffffffffffffffda RBX: 00007f0bb0c25fa0 RCX: 00007f0bb099e159 [ 944.770445][T17311] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000004 [ 944.770461][T17311] RBP: 00007f0bb0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 944.770476][T17311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.770491][T17311] R13: 00007f0bb0c26038 R14: 00007f0bb0c25fa0 R15: 00007fff1625ebe8 [ 944.770526][T17311] [ 945.418574][ T10] sony 0003:054C:042F.0029: can't set operational mode: step 1 [ 945.418624][ T10] sony 0003:054C:042F.0029: Failed to set controller into operational mode [ 945.428436][ T10] sony 0003:054C:042F.0029: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.8-1/input0 [ 945.428464][ T10] sony 0003:054C:042F.0029: failed to claim input [ 945.499864][ T10] usb 9-1: USB disconnect, device number 10 [ 946.161344][T17325] fido_id[17325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 947.672438][ T25] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 947.832134][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 947.832890][ T25] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 947.849017][ T25] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.849062][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 947.849102][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 947.849126][ T25] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 947.849144][ T25] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 948.293211][ T25] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 948.293278][ T25] usb 9-1: Manufacturer: syz [ 950.647493][ T25] usb 9-1: config 0 descriptor?? [ 951.380651][ T25] usb 9-1: can't set config #0, error -71 [ 951.434029][ T25] usb 9-1: USB disconnect, device number 11 [ 951.712125][ T44] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 951.866468][ T44] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 951.889712][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.889776][ T44] usb 7-1: Product: syz [ 951.889813][ T44] usb 7-1: Manufacturer: syz [ 951.889886][ T44] usb 7-1: SerialNumber: syz [ 952.087171][ T44] usb 7-1: config 0 descriptor?? [ 952.406703][ T44] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 953.052566][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 953.203420][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 953.205294][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 953.208932][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 953.208949][ T10] usb 8-1: config 0 has no interface number 0 [ 953.208969][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 953.208988][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 953.209016][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 953.209044][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 953.209077][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.299178][ T10] usb 8-1: config 0 descriptor?? [ 953.318844][ T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 953.331186][ T30] audit: type=1400 audit(1791178207.721:749): avc: denied { audit_write } for pid=17369 comm="syz.4.3837" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 953.762567][ T10] usb 8-1: USB disconnect, device number 11 [ 953.762671][ C0] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 953.816571][ T44] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 953.821032][ T44] usb 7-1: USB disconnect, device number 24 [ 953.876288][T17365] ldusb: No device or device unplugged -19 [ 953.876415][ T10] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 956.122578][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 956.273935][ T10] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 956.276136][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 956.276169][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 956.276194][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 956.276234][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.279328][T17414] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 956.279455][T17414] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 956.284359][ T10] pl2303 7-1:1.0: pl2303 converter detected [ 956.326826][ T10] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 956.386929][T17433] input: syz0 as /devices/virtual/input/input50 [ 956.597581][ T30] audit: type=1400 audit(1791178210.991:750): avc: denied { create_files_as } for pid=17438 comm="syz.4.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 956.624042][T17414] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 956.624373][T17414] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 956.624731][T17414] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 956.642283][T17414] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 956.643029][T17414] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 956.661210][ T30] audit: type=1400 audit(1791178211.051:751): avc: denied { connect } for pid=17443 comm="syz.8.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 956.693783][T17439] netfs: Cache "CacheFiles" added (type cachefiles) [ 956.693819][T17439] CacheFiles: File cache on CacheFiles registered [ 956.698282][T17438] CacheFiles: File cache on CacheFiles unregistering [ 956.698296][T17438] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 956.915244][T17414] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 956.917066][T17414] pl2303 ttyUSB0: error sending break = -32 [ 956.936034][ T44] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 956.949817][T12727] usb 7-1: USB disconnect, device number 25 [ 956.964254][T12727] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 956.964924][T12727] pl2303 7-1:1.0: device disconnected [ 957.083061][ T44] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.085156][ T44] usb 3-1: config 0 has no interfaces? [ 957.109439][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 957.109467][ T44] usb 3-1: SerialNumber: syz [ 957.113617][ T44] usb 3-1: config 0 descriptor?? [ 959.015764][T17468] input: syz0 as /devices/virtual/input/input51 [ 959.047047][ T44] usb 3-1: USB disconnect, device number 56 [ 959.289742][T17480] FAULT_INJECTION: forcing a failure. [ 959.289742][T17480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.289779][T17480] CPU: 0 UID: 0 PID: 17480 Comm: syz.6.3878 Not tainted syzkaller #0 PREEMPT(full) [ 959.289806][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 959.289821][T17480] Call Trace: [ 959.289830][T17480] [ 959.289839][T17480] dump_stack_lvl+0x100/0x190 [ 959.289879][T17480] should_fail_ex.cold+0x5/0xa [ 959.289915][T17480] _copy_from_user+0x2e/0xd0 [ 959.289946][T17480] io_uring_setup+0xc0/0x160 [ 959.289978][T17480] ? lock_acquire+0x1d1/0x380 [ 959.290005][T17480] ? avc_has_perm_noaudit+0x56/0x470 [ 959.290043][T17480] ? __pfx_io_uring_setup+0x10/0x10 [ 959.290074][T17480] ? find_held_lock+0x2b/0x80 [ 959.290107][T17480] ? avc_has_perm_noaudit+0x11e/0x470 [ 959.290143][T17480] ? avc_has_perm_noaudit+0x11e/0x470 [ 959.290198][T17480] ? xfd_validate_state+0x129/0x190 [ 959.290232][T17480] __x64_sys_io_uring_setup+0xc2/0x170 [ 959.290266][T17480] do_syscall_64+0x123/0x790 [ 959.290295][T17480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.290320][T17480] RIP: 0033:0x7f61acd9e159 [ 959.290349][T17480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.290373][T17480] RSP: 002b:00007f61aaff5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 959.290396][T17480] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f61acd9e159 [ 959.290412][T17480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000003009 [ 959.290428][T17480] RBP: 00007f61ace3506b R08: 0000000000000000 R09: 0000000000000000 [ 959.290443][T17480] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 959.290459][T17480] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe609c43a8 [ 959.290490][T17480] [ 959.413799][ T25] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 959.573813][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 959.574677][ T25] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 959.575815][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 959.581725][ T25] usb 5-1: string descriptor 0 read error: -22 [ 959.581857][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.972189][T12727] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 959.993870][T17474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.994351][T17474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.002544][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x0 [ 960.002575][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x6 [ 960.002600][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x0 [ 960.002627][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x0 [ 960.002652][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x0 [ 960.002677][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x0 [ 960.002702][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x0 [ 960.002727][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x0 [ 960.002751][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x0 [ 960.002776][ T25] sony 0003:054C:0268.002A: unknown main item tag 0x0 [ 960.110460][ T25] sony 0003:054C:0268.002A: hiddev0,hidraw0: USB HID v80.08 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 960.110498][ T25] sony 0003:054C:0268.002A: failed to claim input [ 960.146197][T12727] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 960.161251][T12727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.161284][T12727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.161321][T12727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.167003][T12727] usb 3-1: config 0 descriptor?? [ 960.294277][ T25] usb 5-1: USB disconnect, device number 41 [ 961.280671][T17510] FAULT_INJECTION: forcing a failure. [ 961.280671][T17510] name failslab, interval 1, probability 0, space 0, times 0 [ 961.280707][T17510] CPU: 0 UID: 0 PID: 17510 Comm: syz.8.3889 Not tainted syzkaller #0 PREEMPT(full) [ 961.280736][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 961.280751][T17510] Call Trace: [ 961.280760][T17510] [ 961.280770][T17510] dump_stack_lvl+0x100/0x190 [ 961.280812][T17510] should_fail_ex.cold+0x5/0xa [ 961.280848][T17510] should_failslab+0xc2/0x120 [ 961.280881][T17510] __kmalloc_noprof+0xfc/0x840 [ 961.280911][T17510] ? sk_prot_alloc+0x10b/0x2a0 [ 961.280943][T17510] sk_prot_alloc+0x10b/0x2a0 [ 961.280969][T17510] sk_alloc+0x36/0xe80 [ 961.281004][T17510] __netlink_create+0x5e/0x2c0 [ 961.281030][T17510] ? __wake_up+0x3f/0x60 [ 961.281055][T17510] netlink_create+0x29b/0x610 [ 961.281082][T17510] ? __pfx_genl_bind+0x10/0x10 [ 961.281112][T17510] ? __pfx_genl_unbind+0x10/0x10 [ 961.281145][T17510] ? __pfx_genl_release+0x10/0x10 [ 961.281181][T17510] __sock_create+0x339/0x860 [ 961.281215][T17510] __sys_socket+0x14d/0x260 [ 961.281244][T17510] ? __pfx___sys_socket+0x10/0x10 [ 961.281282][T17510] __x64_sys_socket+0x72/0xb0 [ 961.281309][T17510] ? lockdep_hardirqs_on+0x7d/0x110 [ 961.281335][T17510] do_syscall_64+0x123/0x790 [ 961.281365][T17510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.281390][T17510] RIP: 0033:0x7f3db259e159 [ 961.281411][T17510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.281433][T17510] RSP: 002b:00007f3db3437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 961.281463][T17510] RAX: ffffffffffffffda RBX: 00007f3db2825fa0 RCX: 00007f3db259e159 [ 961.281480][T17510] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 961.281495][T17510] RBP: 00007f3db263506b R08: 0000000000000000 R09: 0000000000000000 [ 961.281509][T17510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.281524][T17510] R13: 00007f3db2826038 R14: 00007f3db2825fa0 R15: 00007fff8b5668f8 [ 961.281555][T17510] [ 961.594106][T12727] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 961.773106][T12727] cp2112 0003:10C4:EA90.002B: Part Number: 0x00 Device Version: 0x00 [ 963.970455][T12727] cp2112 0003:10C4:EA90.002B: error reading lock byte: -71 [ 963.974729][T12727] usb 3-1: USB disconnect, device number 57 [ 964.108391][ T30] audit: type=1400 audit(1791178218.491:752): avc: denied { node_bind } for pid=17538 comm="syz.6.3896" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 964.147962][T17541] CIFS: Attempting to mount //127.0.0.1/share [ 964.179935][T17541] CIFS: VFS: Error connecting to socket. Aborting operation. [ 964.179969][T17541] CIFS: VFS: cifs_mount failed w/return code = -101 [ 965.667596][ T30] audit: type=1400 audit(1791178220.061:753): avc: denied { mounton } for pid=17568 comm="syz.6.3907" path="/217/file0" dev="tmpfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 965.795053][T17572] FAULT_INJECTION: forcing a failure. [ 965.795053][T17572] name failslab, interval 1, probability 0, space 0, times 0 [ 965.795090][T17572] CPU: 0 UID: 0 PID: 17572 Comm: syz.4.3911 Not tainted syzkaller #0 PREEMPT(full) [ 965.795120][T17572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 965.795136][T17572] Call Trace: [ 965.795145][T17572] [ 965.795154][T17572] dump_stack_lvl+0x100/0x190 [ 965.795193][T17572] should_fail_ex.cold+0x5/0xa [ 965.795228][T17572] should_failslab+0xc2/0x120 [ 965.795262][T17572] __kvmalloc_node_noprof+0x113/0x9b0 [ 965.795293][T17572] ? net_generic+0xea/0x2a0 [ 965.795323][T17572] ? net_generic+0xea/0x2a0 [ 965.795363][T17572] ? recent_mt_check.isra.0+0x53d/0xb30 [ 965.795405][T17572] recent_mt_check.isra.0+0x53d/0xb30 [ 965.795442][T17572] ? __pfx_recent_mt_check.isra.0+0x10/0x10 [ 965.795477][T17572] ? trace_contention_end+0x126/0x160 [ 965.795509][T17572] ? __mutex_lock+0x26c/0x1bd0 [ 965.795540][T17572] recent_mt_check_v0+0xf5/0x160 [ 965.795573][T17572] ? __pfx_recent_mt_check_v0+0x10/0x10 [ 965.795633][T17572] ? xt_find_match+0x1dc/0x280 [ 965.795670][T17572] ? __pfx_recent_mt_check_v0+0x10/0x10 [ 965.795702][T17572] xt_check_match+0x117/0x1c0 [ 965.795726][T17572] find_check_entry.isra.0+0x356/0xa00 [ 965.795768][T17572] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 965.795811][T17572] ? kasan_quarantine_put+0x104/0x240 [ 965.795844][T17572] ? translate_table+0xbd8/0x1770 [ 965.795875][T17572] ? kfree+0x22b/0x6d0 [ 965.795895][T17572] ? xt_check_table_hooks+0x206/0x330 [ 965.795932][T17572] translate_table+0xcb9/0x1770 [ 965.795980][T17572] ? __pfx_translate_table+0x10/0x10 [ 965.796022][T17572] do_ip6t_set_ctl+0x689/0xd00 [ 965.796054][T17572] ? nf_sockopt_find.isra.0+0x222/0x290 [ 965.796089][T17572] ? nf_sockopt_find.isra.0+0x222/0x290 [ 965.796130][T17572] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 965.796163][T17572] ? __mutex_unlock_slowpath+0x35d/0x930 [ 965.796192][T17572] ? futex_wait+0x11e/0x370 [ 965.796220][T17572] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 965.796261][T17572] ? nf_sockopt_find.isra.0+0x222/0x290 [ 965.796302][T17572] nf_setsockopt+0x8d/0xf0 [ 965.796346][T17572] ipv6_setsockopt+0x135/0x170 [ 965.796386][T17572] tcp_setsockopt+0xa7/0x100 [ 965.796417][T17572] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 965.796445][T17572] do_sock_setsockopt+0xf3/0x1d0 [ 965.796472][T17572] __sys_setsockopt+0x195/0x220 [ 965.796511][T17572] __x64_sys_setsockopt+0xbd/0x160 [ 965.796542][T17572] ? do_syscall_64+0xae/0x790 [ 965.796567][T17572] ? lockdep_hardirqs_on+0x7d/0x110 [ 965.796592][T17572] do_syscall_64+0x123/0x790 [ 965.796621][T17572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.796646][T17572] RIP: 0033:0x7f3929d9e159 [ 965.796667][T17572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.796691][T17572] RSP: 002b:00007f392ac10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 965.796715][T17572] RAX: ffffffffffffffda RBX: 00007f392a025fa0 RCX: 00007f3929d9e159 [ 965.796732][T17572] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 965.796747][T17572] RBP: 00007f3929e3506b R08: 00000000000005f8 R09: 0000000000000000 [ 965.796764][T17572] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 965.796779][T17572] R13: 00007f392a026038 R14: 00007f392a025fa0 R15: 00007fff92c68918 [ 965.796814][T17572] [ 965.946195][T17574] FAULT_INJECTION: forcing a failure. [ 965.946195][T17574] name failslab, interval 1, probability 0, space 0, times 0 [ 965.946229][T17574] CPU: 1 UID: 0 PID: 17574 Comm: syz.8.3908 Not tainted syzkaller #0 PREEMPT(full) [ 965.946256][T17574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 965.946272][T17574] Call Trace: [ 965.946281][T17574] [ 965.946290][T17574] dump_stack_lvl+0x100/0x190 [ 965.946330][T17574] should_fail_ex.cold+0x5/0xa [ 965.946364][T17574] should_failslab+0xc2/0x120 [ 965.946398][T17574] __kmalloc_noprof+0xfc/0x840 [ 965.946427][T17574] ? tcf_pedit_dump+0x1ef/0x10d0 [ 965.946464][T17574] tcf_pedit_dump+0x1ef/0x10d0 [ 965.946493][T17574] ? tcf_action_dump_terse+0x2ea/0x6b0 [ 965.946532][T17574] ? __pfx_tcf_pedit_dump+0x10/0x10 [ 965.946559][T17574] ? skb_put+0x138/0x180 [ 965.946581][T17574] ? __asan_memset+0x23/0x50 [ 965.946608][T17574] ? __nla_put+0x27/0x40 [ 965.946626][T17574] ? __asan_memcpy+0x3c/0x60 [ 965.946655][T17574] tcf_action_dump_1+0x360/0x660 [ 965.946689][T17574] ? __pfx_tcf_action_dump_1+0x10/0x10 [ 965.946723][T17574] ? __nla_reserve+0x9c/0xc0 [ 965.946745][T17574] ? __nla_put+0x27/0x40 [ 965.946766][T17574] ? __asan_memcpy+0x3c/0x60 [ 965.946796][T17574] tcf_action_dump+0x1ec/0x2e0 [ 965.946844][T17574] tca_get_fill.constprop.0+0x301/0x5d0 [ 965.946888][T17574] tcf_action_add+0x2c7/0x5c0 [ 965.946928][T17574] ? __pfx_tcf_action_add+0x10/0x10 [ 965.947012][T17574] ? __nla_parse+0x40/0x60 [ 965.947040][T17574] tc_ctl_action+0x2e3/0x470 [ 965.947074][T17574] ? __pfx_tc_ctl_action+0x10/0x10 [ 965.947119][T17574] ? __pfx_tc_ctl_action+0x10/0x10 [ 965.947154][T17574] rtnetlink_rcv_msg+0x3c9/0xe90 [ 965.947180][T17574] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 965.947214][T17574] ? ref_tracker_free+0x37e/0x6c0 [ 965.947251][T17574] netlink_rcv_skb+0x159/0x420 [ 965.947283][T17574] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 965.947309][T17574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 965.947353][T17574] ? netlink_deliver_tap+0x1ae/0xcc0 [ 965.947387][T17574] netlink_unicast+0x585/0x850 [ 965.947439][T17574] ? __pfx_netlink_unicast+0x10/0x10 [ 965.947481][T17574] netlink_sendmsg+0x8b0/0xda0 [ 965.947518][T17574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 965.947554][T17574] ? selinux_socket_sendmsg+0x198/0x2f0 [ 965.947589][T17574] ____sys_sendmsg+0xa4d/0xbe0 [ 965.947611][T17574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 965.947644][T17574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 965.947684][T17574] ___sys_sendmsg+0x190/0x1e0 [ 965.947712][T17574] ? __pfx____sys_sendmsg+0x10/0x10 [ 965.947739][T17574] ? futex_wait+0x11e/0x370 [ 965.947775][T17574] ? find_held_lock+0x2b/0x80 [ 965.947835][T17574] __sys_sendmsg+0x160/0x210 [ 965.947868][T17574] ? __pfx___sys_sendmsg+0x10/0x10 [ 965.947919][T17574] do_syscall_64+0x123/0x790 [ 965.947949][T17574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.947972][T17574] RIP: 0033:0x7f3db259e159 [ 965.947992][T17574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.948014][T17574] RSP: 002b:00007f3db3437028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.948036][T17574] RAX: ffffffffffffffda RBX: 00007f3db2825fa0 RCX: 00007f3db259e159 [ 965.948051][T17574] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 965.948066][T17574] RBP: 00007f3db263506b R08: 0000000000000000 R09: 0000000000000000 [ 965.948082][T17574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.948095][T17574] R13: 00007f3db2826038 R14: 00007f3db2825fa0 R15: 00007fff8b5668f8 [ 965.948128][T17574] [ 966.309949][T17581] jffs2: notice: (17581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 966.499768][ T30] audit: type=1400 audit(1791178220.881:754): avc: denied { write } for pid=17579 comm="syz.6.3913" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 966.507905][ T30] audit: type=1400 audit(1791178220.891:755): avc: denied { create } for pid=17579 comm="syz.6.3913" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 966.588761][ T30] audit: type=1400 audit(1791178220.961:756): avc: denied { write } for pid=17579 comm="syz.6.3913" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 966.588796][ T30] audit: type=1400 audit(1791178220.961:757): avc: denied { write } for pid=17579 comm="syz.6.3913" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 966.588829][ T30] audit: type=1400 audit(1791178220.961:758): avc: denied { remove_name } for pid=17579 comm="syz.6.3913" name="file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 966.588854][ T30] audit: type=1400 audit(1791178220.961:759): avc: denied { rename } for pid=17579 comm="syz.6.3913" name="file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 966.691078][T17592] FAULT_INJECTION: forcing a failure. [ 966.691078][T17592] name fail_futex, interval 1, probability 0, space 0, times 1 [ 966.691180][T17592] CPU: 1 UID: 0 PID: 17592 Comm: syz.7.3915 Not tainted syzkaller #0 PREEMPT(full) [ 966.691208][T17592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 966.691224][T17592] Call Trace: [ 966.691233][T17592] [ 966.691241][T17592] dump_stack_lvl+0x100/0x190 [ 966.691282][T17592] should_fail_ex.cold+0x5/0xa [ 966.691319][T17592] get_futex_key+0x1d0/0x14f0 [ 966.691355][T17592] ? __pfx_get_futex_key+0x10/0x10 [ 966.691384][T17592] ? __pfx_do_brk_flags+0x10/0x10 [ 966.691417][T17592] futex_wake+0xf4/0x5e0 [ 966.691441][T17592] ? userfaultfd_unmap_complete+0x267/0x380 [ 966.691473][T17592] ? __pfx_futex_wake+0x10/0x10 [ 966.691510][T17592] do_futex+0x2b2/0x440 [ 966.691544][T17592] ? __pfx_do_futex+0x10/0x10 [ 966.691584][T17592] __x64_sys_futex+0x34f/0x4d0 [ 966.691620][T17592] ? __pfx___x64_sys_futex+0x10/0x10 [ 966.691662][T17592] do_syscall_64+0x123/0x790 [ 966.691690][T17592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.691715][T17592] RIP: 0033:0x7f0bb099e159 [ 966.691734][T17592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.691763][T17592] RSP: 002b:00007f0bb17a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 966.691787][T17592] RAX: ffffffffffffffda RBX: 00007f0bb0c25fa8 RCX: 00007f0bb099e159 [ 966.691804][T17592] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0bb0c25fac [ 966.691819][T17592] RBP: 00007f0bb0c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 966.691834][T17592] R10: 0000200000ffc000 R11: 0000000000000246 R12: 0000000000000000 [ 966.691847][T17592] R13: 00007f0bb0c26038 R14: 00007fff1625eb00 R15: 00007fff1625ebe8 [ 966.691877][T17592] [ 968.068061][T17617] syzkaller1: entered promiscuous mode [ 968.068076][T17617] syzkaller1: entered allmulticast mode [ 971.354476][T17651] FAULT_INJECTION: forcing a failure. [ 971.354476][T17651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 971.354512][T17651] CPU: 1 UID: 0 PID: 17651 Comm: syz.8.3935 Not tainted syzkaller #0 PREEMPT(full) [ 971.354541][T17651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 971.354557][T17651] Call Trace: [ 971.354565][T17651] [ 971.354575][T17651] dump_stack_lvl+0x100/0x190 [ 971.354615][T17651] should_fail_ex.cold+0x5/0xa [ 971.354643][T17651] ? prepare_alloc_pages+0x16d/0x5b0 [ 971.354687][T17651] should_fail_alloc_page+0xeb/0x140 [ 971.354723][T17651] prepare_alloc_pages+0x1f0/0x5b0 [ 971.354756][T17651] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 971.354788][T17651] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 971.354822][T17651] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 971.354852][T17651] ? rcu_is_watching+0x13/0xc0 [ 971.354886][T17651] ? trace_sched_exit_tp+0x120/0x160 [ 971.354922][T17651] ? __lock_acquire+0x5c0/0x1f40 [ 971.354951][T17651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 971.354988][T17651] ? lock_acquire+0x1d1/0x380 [ 971.355014][T17651] ? futex_unqueue+0x29/0x2c0 [ 971.355046][T17651] ? find_held_lock+0x2b/0x80 [ 971.355079][T17651] ? futex_unqueue+0x133/0x2c0 [ 971.355108][T17651] ? futex_unqueue+0x133/0x2c0 [ 971.355144][T17651] ? futex_unqueue+0x13d/0x2c0 [ 971.355176][T17651] ? __futex_wait+0x256/0x300 [ 971.355200][T17651] ? look_up_lock_class+0x55/0x120 [ 971.355224][T17651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 971.355256][T17651] ? policy_nodemask+0xed/0x4f0 [ 971.355295][T17651] alloc_pages_mpol+0x201/0x550 [ 971.355330][T17651] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 971.355364][T17651] ? find_held_lock+0x2b/0x80 [ 971.355402][T17651] alloc_pages_noprof+0x1a/0x160 [ 971.355425][T17651] __pmd_alloc+0x3b/0x950 [ 971.355460][T17651] __handle_mm_fault+0xa9d/0x2f60 [ 971.355499][T17651] ? lock_vma_under_rcu+0x11d/0x590 [ 971.355533][T17651] ? __pfx___handle_mm_fault+0x10/0x10 [ 971.355574][T17651] ? lock_vma_under_rcu+0x17c/0x590 [ 971.355625][T17651] handle_mm_fault+0x363/0xa20 [ 971.355672][T17651] do_user_addr_fault+0x59c/0x12f0 [ 971.355713][T17651] exc_page_fault+0x6f/0xd0 [ 971.355738][T17651] asm_exc_page_fault+0x26/0x30 [ 971.355759][T17651] RIP: 0033:0x7f3db2452c43 [ 971.355779][T17651] Code: 10 4c 89 44 24 08 4c 89 0c 24 4c 8b 54 24 28 45 31 c9 48 8b 7c 24 20 48 8b 74 24 18 48 8b 54 24 10 48 8b 4c 24 08 48 8b 2c 24 <48> 8b 59 38 48 81 4b 18 80 00 00 00 e8 1c ff ff ff 48 83 ec 08 b9 [ 971.355801][T17651] RSP: 002b:00007f3db3436fd0 EFLAGS: 00010246 [ 971.355821][T17651] RAX: 00007f3db2452c00 RBX: 00007f3db2825fa0 RCX: 0000000000000000 [ 971.355836][T17651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 971.355849][T17651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 971.355863][T17651] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 971.355876][T17651] R13: 00007f3db2826038 R14: 00007f3db2825fa0 R15: 00007fff8b5668f8 [ 971.355908][T17651] [ 971.359298][T17651] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 971.740269][T17670] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3941'. [ 971.740909][ T30] audit: type=1400 audit(1791178226.131:760): avc: denied { read } for pid=17666 comm="syz.7.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 971.790684][T17670] syzkaller1: entered promiscuous mode [ 971.790704][T17670] syzkaller1: entered allmulticast mode [ 972.083285][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 972.142285][T12727] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 972.304412][T12727] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 972.307429][T12727] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 972.307461][T12727] usb 8-1: config 0 has no interface number 0 [ 972.307641][T12727] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.357193][T12727] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.357231][T12727] usb 8-1: Product: syz [ 972.357304][T12727] usb 8-1: Manufacturer: syz [ 972.357378][T12727] usb 8-1: SerialNumber: syz [ 972.402737][T12727] usb 8-1: config 0 descriptor?? [ 972.522169][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 972.545680][T12727] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 972.566345][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 972.589445][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 972.589473][ T10] usb 5-1: config 0 has no interface number 0 [ 972.648185][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.648214][ T10] usb 5-1: Product: syz [ 972.648231][ T10] usb 5-1: Manufacturer: syz [ 972.648249][ T10] usb 5-1: SerialNumber: syz [ 973.125436][ T10] usb 5-1: config 0 descriptor?? [ 973.143552][T12727] usb 8-1: USB disconnect, device number 12 [ 973.160601][T12727] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 973.301750][ T30] audit: type=1800 audit(1791178227.691:761): pid=17688 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3948" name="(" dev="sda1" ino=2056 res=0 errno=0 [ 973.335164][T17690] input: syz0 as /devices/virtual/input/input52 [ 973.563916][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 973.564021][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 974.038960][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 974.040101][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 974.054038][ T10] usb 5-1: USB disconnect, device number 42 [ 975.644974][ T30] audit: type=1326 audit(1791178230.041:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.4.3955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3929d9e159 code=0x0 [ 975.822688][ T44] hid_parser_main: 3987 callbacks suppressed [ 975.822711][ T44] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 975.825248][ T44] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 976.547233][T17747] FAULT_INJECTION: forcing a failure. [ 976.547233][T17747] name failslab, interval 1, probability 0, space 0, times 0 [ 976.547271][T17747] CPU: 1 UID: 0 PID: 17747 Comm: syz.4.3968 Not tainted syzkaller #0 PREEMPT(full) [ 976.547300][T17747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 976.547315][T17747] Call Trace: [ 976.547324][T17747] [ 976.547334][T17747] dump_stack_lvl+0x100/0x190 [ 976.547375][T17747] should_fail_ex.cold+0x5/0xa [ 976.547411][T17747] should_failslab+0xc2/0x120 [ 976.547445][T17747] __kmalloc_cache_noprof+0x91/0x6d0 [ 976.547471][T17747] ? find_css_set+0x922/0x1ec0 [ 976.547507][T17747] find_css_set+0x922/0x1ec0 [ 976.547549][T17747] ? __pfx_find_css_set+0x10/0x10 [ 976.547583][T17747] ? __lock_acquire+0xe8b/0x1f40 [ 976.547634][T17747] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 976.547682][T17747] cgroup_attach_task+0x3e4/0x770 [ 976.547708][T17747] ? __pfx_cgroup_attach_task+0x10/0x10 [ 976.547735][T17747] ? lock_acquire+0x1d1/0x380 [ 976.547776][T17747] ? get_task_cred+0x189/0x360 [ 976.547805][T17747] __cgroup1_procs_write.isra.0+0x2c4/0x420 [ 976.547843][T17747] ? __pfx___cgroup1_procs_write.isra.0+0x10/0x10 [ 976.547881][T17747] ? kernfs_root+0xf8/0x2a0 [ 976.547924][T17747] cgroup_file_write+0x1e6/0x8a0 [ 976.547955][T17747] ? __pfx_cgroup1_procs_write+0x10/0x10 [ 976.547991][T17747] ? __pfx_cgroup_file_write+0x10/0x10 [ 976.548022][T17747] ? __kmalloc_noprof+0x350/0x840 [ 976.548058][T17747] kernfs_fop_write_iter+0x3e0/0x5f0 [ 976.548085][T17747] ? __pfx_cgroup_file_write+0x10/0x10 [ 976.548122][T17747] vfs_write+0x6af/0x1050 [ 976.548151][T17747] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 976.548180][T17747] ? __fget_files+0x34/0x3d0 [ 976.548221][T17747] ? __pfx_vfs_write+0x10/0x10 [ 976.548246][T17747] ? find_held_lock+0x2b/0x80 [ 976.548304][T17747] ksys_write+0x12a/0x250 [ 976.548331][T17747] ? __pfx_ksys_write+0x10/0x10 [ 976.548369][T17747] do_syscall_64+0x123/0x790 [ 976.548400][T17747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.548426][T17747] RIP: 0033:0x7f3929d9e159 [ 976.548447][T17747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.548470][T17747] RSP: 002b:00007f392ac10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 976.548493][T17747] RAX: ffffffffffffffda RBX: 00007f392a025fa0 RCX: 00007f3929d9e159 [ 976.548510][T17747] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 976.548526][T17747] RBP: 00007f3929e3506b R08: 0000000000000000 R09: 0000000000000000 [ 976.548541][T17747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.548557][T17747] R13: 00007f392a026038 R14: 00007f392a025fa0 R15: 00007fff92c68918 [ 976.548593][T17747] [ 976.564159][ T30] audit: type=1326 audit(1791178230.961:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17748 comm="syz.6.3969" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61acd9e159 code=0x0 [ 977.936943][ T30] audit: type=1400 audit(1791178232.331:764): avc: denied { accept } for pid=17775 comm="syz.7.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 978.423727][ T5717] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 978.575449][ T5717] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 978.576561][ T5717] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 978.576589][ T5717] usb 7-1: config 0 has no interface number 0 [ 978.576628][ T5717] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 978.578586][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.578614][ T5717] usb 7-1: Product: syz [ 978.578632][ T5717] usb 7-1: Manufacturer: syz [ 978.578649][ T5717] usb 7-1: SerialNumber: syz [ 978.593846][ T5717] usb 7-1: config 0 descriptor?? [ 978.611050][ T5717] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 978.732117][ T44] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 978.815168][T17815] ip_tables: iptables: counters copy to user failed while replacing table [ 978.895201][ T44] usb 5-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 978.896134][ T44] usb 5-1: config 230 has an invalid interface number: 217 but max is 0 [ 978.896160][ T44] usb 5-1: config 230 has no interface number 0 [ 978.896189][ T44] usb 5-1: config 230 interface 217 has no altsetting 0 [ 978.900779][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.900804][ T44] usb 5-1: Product: syz [ 978.900821][ T44] usb 5-1: Manufacturer: syz [ 978.900837][ T44] usb 5-1: SerialNumber: syz [ 979.142119][ T5717] usb 7-1: USB disconnect, device number 26 [ 979.173254][ T44] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 979.212791][ T44] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 979.212855][ T44] dib0700: firmware download failed at 5 with -22 [ 979.215961][ T44] usb 5-1: USB disconnect, device number 43 [ 979.219417][T15978] udevd[15978]: setting mode of /dev/bus/usb/005/043 to 020664 failed: No such file or directory [ 979.219547][T15978] udevd[15978]: setting owner of /dev/bus/usb/005/043 to uid=0, gid=0 failed: No such file or directory [ 980.890875][ T5717] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 981.767804][T17840] FAULT_INJECTION: forcing a failure. [ 981.767804][T17840] name failslab, interval 1, probability 0, space 0, times 0 [ 981.767829][T17840] CPU: 0 UID: 0 PID: 17840 Comm: syz.6.3998 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.767847][T17840] Tainted: [L]=SOFTLOCKUP [ 981.767851][T17840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 981.767859][T17840] Call Trace: [ 981.767864][T17840] [ 981.767873][T17840] dump_stack_lvl+0x100/0x190 [ 981.767914][T17840] should_fail_ex.cold+0x5/0xa [ 981.767946][T17840] should_failslab+0xc2/0x120 [ 981.767978][T17840] __kvmalloc_node_noprof+0x113/0x9b0 [ 981.768007][T17840] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 981.768022][T17840] ? bpf_uprobe_multi_link_attach+0xf8f/0x1510 [ 981.768048][T17840] bpf_uprobe_multi_link_attach+0xf8f/0x1510 [ 981.768070][T17840] ? find_held_lock+0x2b/0x80 [ 981.768092][T17840] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 981.768111][T17840] ? __fget_files+0x21f/0x3d0 [ 981.768131][T17840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 981.768149][T17840] __sys_bpf+0x427a/0x4a30 [ 981.768168][T17840] ? __pfx___sys_bpf+0x10/0x10 [ 981.768180][T17840] ? find_held_lock+0x2b/0x80 [ 981.768197][T17840] ? futex_wake+0x4ea/0x5e0 [ 981.768221][T17840] ? rcu_read_lock_any_held+0x6a/0x90 [ 981.768240][T17840] ? find_held_lock+0x2b/0x80 [ 981.768257][T17840] ? ksys_write+0x190/0x250 [ 981.768271][T17840] ? ksys_write+0x190/0x250 [ 981.768295][T17840] ? __x64_sys_futex+0x34f/0x4d0 [ 981.768312][T17840] ? __x64_sys_futex+0x358/0x4d0 [ 981.768331][T17840] ? xfd_validate_state+0x129/0x190 [ 981.768347][T17840] ? __x64_sys_bpf+0xce/0x140 [ 981.768360][T17840] __x64_sys_bpf+0xce/0x140 [ 981.768374][T17840] ? do_syscall_64+0xae/0x790 [ 981.768389][T17840] do_syscall_64+0x123/0x790 [ 981.768404][T17840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.768417][T17840] RIP: 0033:0x7f61acd9e159 [ 981.768429][T17840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.768440][T17840] RSP: 002b:00007f61aaff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 981.768453][T17840] RAX: ffffffffffffffda RBX: 00007f61ad025fa0 RCX: 00007f61acd9e159 [ 981.768462][T17840] RDX: 0000000000000040 RSI: 00002000000012c0 RDI: 000000000000001c [ 981.768470][T17840] RBP: 00007f61ace3506b R08: 0000000000000000 R09: 0000000000000000 [ 981.768478][T17840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.768486][T17840] R13: 00007f61ad026038 R14: 00007f61ad025fa0 R15: 00007ffe609c43a8 [ 981.768504][T17840] [ 982.078368][T17846] netlink: 'syz.7.4001': attribute type 1 has an invalid length. [ 982.100149][T17846] bond1: entered promiscuous mode [ 982.100406][T17846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 982.191743][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4001'. [ 982.256845][ T25] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 982.313349][ T44] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 982.457789][ T25] usb 9-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 982.492238][ T44] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.511044][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.511230][ T44] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 982.562521][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 982.562541][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 982.567685][T17846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 982.567876][T17846] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 982.568146][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.568169][ T44] usb 7-1: Product: syz [ 982.568178][ T44] usb 7-1: Manufacturer: syz [ 982.568188][ T44] usb 7-1: SerialNumber: syz [ 982.584307][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 982.584324][ T25] usb 9-1: Product: syz [ 982.584334][ T25] usb 9-1: Manufacturer: syz [ 982.598120][ T25] mos7840 9-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 982.652762][T17846] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 982.658816][T17846] bond1: (slave gre1): making interface the new active one [ 982.658838][T17846] gre1: entered promiscuous mode [ 982.679843][T17846] bond1: (slave gre1): Enslaving as an active interface with an up link [ 982.715939][ T44] cdc_mbim 7-1:1.0: skipping garbage [ 982.986442][T17845] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 983.009807][T17851] bond1 (unregistering): (slave gre1): Releasing backup interface [ 983.009869][T17851] gre1: left promiscuous mode [ 983.014921][T17851] bond1 (unregistering): Released all slaves [ 983.197113][T17861] FAULT_INJECTION: forcing a failure. [ 983.197113][T17861] name failslab, interval 1, probability 0, space 0, times 0 [ 983.197153][T17861] CPU: 0 UID: 0 PID: 17861 Comm: syz.7.4004 Tainted: G L syzkaller #0 PREEMPT(full) [ 983.197185][T17861] Tainted: [L]=SOFTLOCKUP [ 983.197199][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 983.197214][T17861] Call Trace: [ 983.197222][T17861] [ 983.197232][T17861] dump_stack_lvl+0x100/0x190 [ 983.197270][T17861] should_fail_ex.cold+0x5/0xa [ 983.197303][T17861] should_failslab+0xc2/0x120 [ 983.197335][T17861] kmem_cache_alloc_noprof+0x92/0x6a0 [ 983.197365][T17861] ? seq_open+0x55/0x170 [ 983.197396][T17861] seq_open+0x55/0x170 [ 983.197422][T17861] kernfs_fop_open+0x590/0xd50 [ 983.197457][T17861] do_dentry_open+0x6ab/0x14d0 [ 983.197485][T17861] ? __pfx_kernfs_fop_open+0x10/0x10 [ 983.197520][T17861] vfs_open+0x82/0x3f0 [ 983.197557][T17861] path_openat+0x19fa/0x2440 [ 983.197603][T17861] ? __pfx_path_openat+0x10/0x10 [ 983.197646][T17861] do_file_open+0x20e/0x430 [ 983.197679][T17861] ? __pfx_do_file_open+0x10/0x10 [ 983.197732][T17861] ? _raw_spin_unlock+0x28/0x50 [ 983.197767][T17861] ? alloc_fd+0x471/0x7a0 [ 983.197806][T17861] do_sys_openat2+0x10f/0x1e0 [ 983.197841][T17861] ? __pfx_do_sys_openat2+0x10/0x10 [ 983.197876][T17861] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 983.197913][T17861] __x64_sys_openat+0x12d/0x210 [ 983.197947][T17861] ? __pfx___x64_sys_openat+0x10/0x10 [ 983.197995][T17861] do_syscall_64+0x123/0x790 [ 983.198024][T17861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.198048][T17861] RIP: 0033:0x7f0bb099e159 [ 983.198068][T17861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.198090][T17861] RSP: 002b:00007f0bb17a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 983.198112][T17861] RAX: ffffffffffffffda RBX: 00007f0bb0c25fa0 RCX: 00007f0bb099e159 [ 983.198129][T17861] RDX: 0000000000000002 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 983.198145][T17861] RBP: 00007f0bb0a3506b R08: 0000000000000000 R09: 0000000000000000 [ 983.198160][T17861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.198175][T17861] R13: 00007f0bb0c26038 R14: 00007f0bb0c25fa0 R15: 00007fff1625ebe8 [ 983.198208][T17861] [ 983.288083][ T30] audit: type=1400 audit(1791178237.681:765): avc: denied { connect } for pid=17865 comm="syz.2.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 983.486505][ T30] audit: type=1400 audit(1791178237.881:766): avc: denied { mounton } for pid=17870 comm="syz.7.4007" path="/119/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 983.490569][T17871] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 983.620280][T17845] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 983.620800][ T44] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 983.630529][ T44] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 983.687436][ T44] wwan wwan0: port wwan0mbim0 attached [ 983.697206][ T44] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 86:f6:44:14:70:b1 [ 983.880288][ T44] usb 7-1: USB disconnect, device number 27 [ 983.888584][ T44] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 983.949712][T17883] ERROR: Out of memory at tomoyo_memory_ok. [ 983.989143][ T44] wwan wwan0: port wwan0mbim0 disconnected [ 984.138151][ T30] audit: type=1800 audit(1791178238.531:767): pid=17893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4015" name=03 dev="sda1" ino=2057 res=0 errno=0 [ 984.369830][ T30] audit: type=1400 audit(1791178238.761:768): avc: denied { write } for pid=17881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.466905][ T30] audit: type=1400 audit(1791178238.861:769): avc: denied { write } for pid=17909 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.585460][ T25] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 984.619361][ T25] usb 9-1: USB disconnect, device number 12 [ 984.647696][ T25] mos7840 9-1:1.0: device disconnected [ 984.926164][ T30] audit: type=1400 audit(1791178239.321:770): avc: denied { write } for pid=17913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.012173][ T5717] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 985.043824][ T30] audit: type=1400 audit(1791178239.441:771): avc: denied { write } for pid=17935 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 985.092093][ T25] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 985.162923][ T5717] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 985.164182][ T5717] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.164239][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.168676][ T5717] usb 7-1: config 0 descriptor?? [ 985.183664][ T5717] pwc: Askey VC010 type 2 USB webcam detected. [ 985.252808][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 985.252851][ T25] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 985.253570][ T25] usb 5-1: config 0 has no interfaces? [ 985.254280][ T25] usb 5-1: config 0 has no interfaces? [ 985.254875][ T25] usb 5-1: config 0 has no interfaces? [ 985.255474][ T25] usb 5-1: config 0 has no interfaces? [ 985.255898][ T25] usb 5-1: config 0 has no interfaces? [ 985.256896][ T25] usb 5-1: config 0 has no interfaces? [ 985.257630][ T25] usb 5-1: config 0 has no interfaces? [ 985.258248][ T25] usb 5-1: config 0 has no interfaces? [ 985.261927][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.261953][ T25] usb 5-1: Product: syz [ 985.261971][ T25] usb 5-1: Manufacturer: syz [ 985.261989][ T25] usb 5-1: SerialNumber: syz [ 985.348121][ T25] usb 5-1: config 0 descriptor?? [ 985.580797][ T5588] usb 5-1: USB disconnect, device number 44 [ 985.592443][ T5717] pwc: recv_control_msg error -32 req 02 val 2b00 [ 985.594317][ T5717] pwc: recv_control_msg error -32 req 02 val 2700 [ 985.596057][ T5717] pwc: recv_control_msg error -32 req 02 val 2c00 [ 985.596868][ T5717] pwc: recv_control_msg error -32 req 04 val 1000 [ 985.597650][ T5717] pwc: recv_control_msg error -32 req 04 val 1300 [ 985.799438][ T5717] pwc: recv_control_msg error -71 req 02 val 2000 [ 985.799830][ T5717] pwc: recv_control_msg error -71 req 02 val 2100 [ 985.802236][ T5717] pwc: recv_control_msg error -71 req 04 val 1500 [ 985.803614][ T5717] pwc: recv_control_msg error -71 req 02 val 2500 [ 985.804698][ T5717] pwc: recv_control_msg error -71 req 02 val 2400 [ 985.805090][ T5717] pwc: recv_control_msg error -71 req 02 val 2600 [ 985.805430][ T5717] pwc: recv_control_msg error -71 req 02 val 2900 [ 985.807032][ T5717] pwc: recv_control_msg error -71 req 02 val 2800 [ 985.808478][ T5717] pwc: recv_control_msg error -71 req 04 val 1100 [ 985.809271][ T5717] pwc: recv_control_msg error -71 req 04 val 1200 [ 985.813761][ T5717] pwc: Registered as video103. [ 985.816863][ T5717] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input53 [ 985.838738][ T5717] usb 7-1: USB disconnect, device number 28 [ 985.999307][T17949] CIFS: Attempting to mount //127.0.0.1/share [ 985.999603][T17949] CIFS: VFS: Error connecting to socket. Aborting operation. [ 985.999625][T17949] CIFS: VFS: cifs_mount failed w/return code = -101 [ 986.222133][ T5588] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 986.375870][ T5588] usb 5-1: Using ep0 maxpacket: 32 [ 986.385121][ T5588] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 986.387838][ T5588] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 986.390744][ T5588] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 986.390769][ T5588] usb 5-1: Product: syz [ 986.390786][ T5588] usb 5-1: Manufacturer: syz [ 986.390802][ T5588] usb 5-1: SerialNumber: syz [ 986.394084][ T5588] usb 5-1: config 0 descriptor?? [ 986.395016][T17924] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 987.581529][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.581615][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.254128][ T25] usb 5-1: USB disconnect, device number 45 [ 988.299156][T17974] FAULT_INJECTION: forcing a failure. [ 988.299156][T17974] name failslab, interval 1, probability 0, space 0, times 0 [ 988.299193][T17974] CPU: 0 UID: 0 PID: 17974 Comm: syz.7.4037 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.299226][T17974] Tainted: [L]=SOFTLOCKUP [ 988.299236][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 988.299252][T17974] Call Trace: [ 988.299260][T17974] [ 988.299271][T17974] dump_stack_lvl+0x100/0x190 [ 988.299311][T17974] should_fail_ex.cold+0x5/0xa [ 988.299345][T17974] should_failslab+0xc2/0x120 [ 988.299384][T17974] kmem_cache_alloc_noprof+0x92/0x6a0 [ 988.299414][T17974] ? look_up_lock_class+0x55/0x120 [ 988.299440][T17974] ? p9_tag_alloc+0x9c/0x860 [ 988.299475][T17974] p9_tag_alloc+0x9c/0x860 [ 988.299506][T17974] ? __pfx_p9_tag_alloc+0x10/0x10 [ 988.299534][T17974] ? __lock_acquire+0x5c0/0x1f40 [ 988.299562][T17974] ? path_mount+0x7d0/0x24c0 [ 988.299584][T17974] ? do_syscall_64+0x123/0x790 [ 988.299700][T17974] p9_client_prepare_req+0x19b/0x4d0 [ 988.299735][T17974] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 988.299774][T17974] ? lock_acquire+0x1d1/0x380 [ 988.299806][T17974] p9_client_rpc+0x1c4/0xd60 [ 988.299841][T17974] ? __pfx_p9_client_rpc+0x10/0x10 [ 988.299870][T17974] ? _raw_spin_unlock+0x28/0x50 [ 988.299906][T17974] ? unix_dgram_poll+0x3ff/0x780 [ 988.299939][T17974] ? __pfx_unix_dgram_poll+0x10/0x10 [ 988.299969][T17974] ? sock_poll+0x16b/0x510 [ 988.300000][T17974] ? p9_fd_poll+0x1db/0x2c0 [ 988.300035][T17974] ? p9_conn_create+0x42f/0x550 [ 988.300074][T17974] p9_client_create+0x7a6/0xd40 [ 988.300106][T17974] ? __pfx_p9_client_create+0x10/0x10 [ 988.300144][T17974] ? lockdep_init_map_type+0x5c/0x250 [ 988.300182][T17974] ? __raw_spin_lock_init+0x3a/0x110 [ 988.300220][T17974] v9fs_session_init+0x3c/0xdd0 [ 988.300258][T17974] ? v9fs_get_tree+0x9c/0xb50 [ 988.300289][T17974] v9fs_get_tree+0xb8/0xb50 [ 988.300313][T17974] ? rcu_is_watching+0x13/0xc0 [ 988.300346][T17974] ? __pfx_v9fs_get_tree+0x10/0x10 [ 988.300375][T17974] ? bpf_lsm_capable+0x9/0x10 [ 988.300397][T17974] ? security_capable+0x80/0x260 [ 988.300425][T17974] vfs_get_tree+0x92/0x320 [ 988.300450][T17974] path_mount+0x7d0/0x24c0 [ 988.300479][T17974] ? __pfx_path_mount+0x10/0x10 [ 988.300501][T17974] ? lockdep_hardirqs_on+0x7d/0x110 [ 988.300530][T17974] ? putname+0xb1/0x110 [ 988.300562][T17974] ? kmem_cache_free+0x127/0x6c0 [ 988.300598][T17974] ? __x64_sys_mount+0x293/0x310 [ 988.300620][T17974] __x64_sys_mount+0x293/0x310 [ 988.300645][T17974] ? __pfx___x64_sys_mount+0x10/0x10 [ 988.300674][T17974] do_syscall_64+0x123/0x790 [ 988.300704][T17974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.300728][T17974] RIP: 0033:0x7f0bb099e159 [ 988.300749][T17974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.300772][T17974] RSP: 002b:00007f0bb17a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 988.300795][T17974] RAX: ffffffffffffffda RBX: 00007f0bb0c25fa0 RCX: 00007f0bb099e159 [ 988.300811][T17974] RDX: 00002000000000c0 RSI: 0000200000000200 RDI: 0000000000000000 [ 988.300827][T17974] RBP: 00007f0bb0a3506b R08: 00002000000002c0 R09: 0000000000000000 [ 988.300843][T17974] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 988.300858][T17974] R13: 00007f0bb0c26038 R14: 00007f0bb0c25fa0 R15: 00007fff1625ebe8 [ 988.300893][T17974] [ 988.794541][ T25] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 988.797813][ T30] audit: type=1800 audit(1791178243.191:772): pid=17989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4043" name="file0" dev="overlay" ino=740 res=0 errno=0 [ 988.805309][T17991] FAULT_INJECTION: forcing a failure. [ 988.805309][T17991] name failslab, interval 1, probability 0, space 0, times 0 [ 988.805342][T17991] CPU: 0 UID: 0 PID: 17991 Comm: syz.6.4045 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.805376][T17991] Tainted: [L]=SOFTLOCKUP [ 988.805385][T17991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 988.805401][T17991] Call Trace: [ 988.805409][T17991] [ 988.805417][T17991] dump_stack_lvl+0x100/0x190 [ 988.805456][T17991] should_fail_ex.cold+0x5/0xa [ 988.805490][T17991] should_failslab+0xc2/0x120 [ 988.805522][T17991] __kmalloc_noprof+0xfc/0x840 [ 988.805549][T17991] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 988.805573][T17991] ? mpi_alloc_limb_space+0x31/0x60 [ 988.805607][T17991] mpi_alloc_limb_space+0x31/0x60 [ 988.805636][T17991] mpi_alloc+0x199/0x230 [ 988.805662][T17991] ? mpi_free+0xe6/0x150 [ 988.805688][T17991] mpi_read_raw_data+0xf5/0x430 [ 988.805720][T17991] rsa_set_pub_key+0x14f/0x270 [ 988.805750][T17991] ? __pfx_rsa_set_pub_key+0x10/0x10 [ 988.805793][T17991] ? __asan_memcpy+0x3c/0x60 [ 988.805823][T17991] rsassa_pkcs1_set_pub_key+0xce/0x1f0 [ 988.805862][T17991] public_key_verify_signature+0x4e5/0x910 [ 988.805893][T17991] ? __pfx_public_key_verify_signature+0x10/0x10 [ 988.805937][T17991] ? asymmetric_key_generate_id+0x7e/0x180 [ 988.805981][T17991] x509_check_for_self_signed+0x325/0x510 [ 988.806013][T17991] x509_cert_parse+0x60c/0x910 [ 988.806043][T17991] x509_key_preparse+0x65/0x9c0 [ 988.806076][T17991] asymmetric_key_preparse+0xce/0x1d0 [ 988.806097][T17991] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 988.806128][T17991] __key_create_or_update+0x463/0xe30 [ 988.806167][T17991] ? __pfx___key_create_or_update+0x10/0x10 [ 988.806203][T17991] ? lookup_user_key+0x3f3/0x1300 [ 988.806247][T17991] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 988.806277][T17991] ? __pfx_keyring_search_iterator+0x10/0x10 [ 988.806317][T17991] key_create_or_update+0x42/0x60 [ 988.806353][T17991] __do_sys_add_key+0x2e8/0x460 [ 988.806378][T17991] ? __pfx___do_sys_add_key+0x10/0x10 [ 988.806414][T17991] do_syscall_64+0x123/0x790 [ 988.806443][T17991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.806466][T17991] RIP: 0033:0x7f61acd9e159 [ 988.806484][T17991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.806506][T17991] RSP: 002b:00007f61aaff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 988.806528][T17991] RAX: ffffffffffffffda RBX: 00007f61ad025fa0 RCX: 00007f61acd9e159 [ 988.806544][T17991] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 988.806559][T17991] RBP: 00007f61ace3506b R08: 0000000004a0e55d R09: 0000000000000000 [ 988.806573][T17991] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 988.806587][T17991] R13: 00007f61ad026038 R14: 00007f61ad025fa0 R15: 00007ffe609c43a8 [ 988.806619][T17991] [ 988.976676][ T25] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 988.983386][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.005929][ T25] usb 5-1: config 0 descriptor?? [ 989.226795][ T25] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 989.299739][T17995] kvm: pic: level sensitive irq not supported [ 989.299919][T17995] kvm: pic: level sensitive irq not supported [ 989.299930][T17995] kvm: pic: level sensitive irq not supported [ 989.300098][T17995] kvm: pic: single mode not supported [ 989.300755][T17995] kvm: pic: level sensitive irq not supported [ 989.300805][T17995] kvm: pic: level sensitive irq not supported [ 989.300815][T17995] kvm: pic: single mode not supported [ 989.310994][T17995] kvm: pic: single mode not supported [ 989.311025][T17995] kvm: pic: level sensitive irq not supported [ 989.311073][T17995] kvm: pic: single mode not supported [ 989.311560][T17995] kvm: pic: level sensitive irq not supported [ 989.336015][T17995] kvm: pic: level sensitive irq not supported [ 989.336036][T17995] kvm: pic: level sensitive irq not supported [ 989.336098][T17995] kvm: pic: single mode not supported [ 989.337158][T17995] kvm: pic: single mode not supported [ 989.337169][T17995] kvm: pic: level sensitive irq not supported [ 989.337244][T17995] kvm: pic: single mode not supported [ 989.338199][T17995] kvm: pic: single mode not supported [ 989.339014][T17995] kvm: pic: single mode not supported [ 989.339597][T17995] kvm: pic: single mode not supported [ 989.441825][ C1] sd 0:0:1:0: [sda] tag#6551 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 989.441930][ C1] sd 0:0:1:0: [sda] tag#6551 CDB: Read(6) 08 00 00 00 09 00 00 00 72 00 00 00 [ 989.449612][ T25] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 989.449637][ T25] [drm] Initialized udl on minor 1 [ 989.542267][ T5717] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 989.635636][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 989.636014][ T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 989.692862][ T5717] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 989.694223][ T5717] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 989.694254][ T5717] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 989.694283][ T5717] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 989.694308][ T5717] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 989.694347][ T5717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.699523][ T5717] usb 8-1: config 0 descriptor?? [ 989.731338][ T44] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 989.735119][ T25] usb 5-1: USB disconnect, device number 46 [ 989.757569][ T44] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 989.757748][ T44] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 989.978163][T18014] FAULT_INJECTION: forcing a failure. [ 989.978163][T18014] name failslab, interval 1, probability 0, space 0, times 0 [ 989.978201][T18014] CPU: 1 UID: 0 PID: 18014 Comm: syz.6.4054 Tainted: G L syzkaller #0 PREEMPT(full) [ 989.978237][T18014] Tainted: [L]=SOFTLOCKUP [ 989.978246][T18014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 989.978262][T18014] Call Trace: [ 989.978271][T18014] [ 989.978280][T18014] dump_stack_lvl+0x100/0x190 [ 989.978320][T18014] should_fail_ex.cold+0x5/0xa [ 989.978355][T18014] should_failslab+0xc2/0x120 [ 989.978388][T18014] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 989.978420][T18014] ? __alloc_skb+0x140/0x710 [ 989.978524][T18014] __alloc_skb+0x140/0x710 [ 989.978559][T18014] ? lock_acquire+0x1d1/0x380 [ 989.978591][T18014] ? __pfx___alloc_skb+0x10/0x10 [ 989.978634][T18014] tcp_stream_alloc_skb+0x34/0x660 [ 989.978666][T18014] tcp_connect+0xfd8/0x5600 [ 989.978701][T18014] ? get_random_u16+0xe6/0x7d0 [ 989.978743][T18014] ? __pfx_tcp_connect+0x10/0x10 [ 989.978774][T18014] ? get_random_u16+0x583/0x7d0 [ 989.978800][T18014] ? tcp_fastopen_cookie_check+0x3ca/0x450 [ 989.978854][T18014] tcp_v4_connect+0x1607/0x1b40 [ 989.978893][T18014] ? __pfx_tcp_v4_connect+0x10/0x10 [ 989.978920][T18014] ? __lock_acquire+0x5c0/0x1f40 [ 989.978969][T18014] __inet_stream_connect+0x208/0xf90 [ 989.979001][T18014] ? lock_acquire+0x1d1/0x380 [ 989.979030][T18014] ? __pfx___inet_stream_connect+0x10/0x10 [ 989.979057][T18014] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 989.979097][T18014] ? __local_bh_enable_ip+0xa5/0x120 [ 989.979136][T18014] inet_stream_connect+0x57/0xa0 [ 989.979165][T18014] __sys_connect_file+0x146/0x1a0 [ 989.979201][T18014] __sys_connect+0x141/0x170 [ 989.979231][T18014] ? __pfx___sys_connect+0x10/0x10 [ 989.979283][T18014] __x64_sys_connect+0x72/0xb0 [ 989.979311][T18014] ? lockdep_hardirqs_on+0x7d/0x110 [ 989.979338][T18014] do_syscall_64+0x123/0x790 [ 989.979368][T18014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.979393][T18014] RIP: 0033:0x7f61acd9e159 [ 989.979413][T18014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.979437][T18014] RSP: 002b:00007f61aaff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 989.979458][T18014] RAX: ffffffffffffffda RBX: 00007f61ad025fa0 RCX: 00007f61acd9e159 [ 989.979474][T18014] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 989.979490][T18014] RBP: 00007f61ace3506b R08: 0000000000000000 R09: 0000000000000000 [ 989.979505][T18014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.979519][T18014] R13: 00007f61ad026038 R14: 00007f61ad025fa0 R15: 00007ffe609c43a8 [ 989.979553][T18014] [ 990.197203][T18018] use of bytesused == 0 is deprecated and will be removed in the future, [ 990.197217][T18018] use the actual size instead. [ 990.280965][ T5717] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 990.407927][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058619c00: rx timeout, send abort [ 990.908000][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058619c00: abort rx timeout. Force session deactivation [ 990.908456][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805861ac00: rx timeout, send abort [ 991.408506][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805861ac00: abort rx timeout. Force session deactivation [ 992.213088][ T30] audit: type=1400 audit(1791178246.611:773): avc: denied { bind } for pid=18030 comm="syz.4.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 992.213360][ T30] audit: type=1400 audit(1791178246.611:774): avc: denied { listen } for pid=18030 comm="syz.4.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 992.427939][T18040] FAULT_INJECTION: forcing a failure. [ 992.427939][T18040] name failslab, interval 1, probability 0, space 0, times 0 [ 992.427980][T18040] CPU: 0 UID: 0 PID: 18040 Comm: syz.6.4062 Tainted: G L syzkaller #0 PREEMPT(full) [ 992.428013][T18040] Tainted: [L]=SOFTLOCKUP [ 992.428023][T18040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 992.428038][T18040] Call Trace: [ 992.428046][T18040] [ 992.428056][T18040] dump_stack_lvl+0x100/0x190 [ 992.428097][T18040] should_fail_ex.cold+0x5/0xa [ 992.428132][T18040] should_failslab+0xc2/0x120 [ 992.428167][T18040] kmem_cache_alloc_noprof+0x92/0x6a0 [ 992.428199][T18040] ? mempool_init_node+0x2f7/0x6f0 [ 992.428227][T18040] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 992.428254][T18040] mempool_init_node+0x2f7/0x6f0 [ 992.428286][T18040] ? __pfx_mempool_free_slab+0x10/0x10 [ 992.428311][T18040] mempool_create_node_noprof+0xe9/0x1b0 [ 992.428337][T18040] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 992.428365][T18040] ceph_osdc_init+0x48b/0xa00 [ 992.428405][T18040] ceph_create_client+0x281/0x370 [ 992.428448][T18040] ceph_get_tree+0x1a4/0x1fd0 [ 992.428471][T18040] ? bpf_lsm_capable+0x9/0x10 [ 992.428493][T18040] ? security_capable+0x80/0x260 [ 992.428520][T18040] vfs_get_tree+0x92/0x320 [ 992.428541][T18040] vfs_cmd_create+0xd7/0x2a0 [ 992.428570][T18040] __do_sys_fsconfig+0x55a/0xcb0 [ 992.428599][T18040] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 992.428641][T18040] do_syscall_64+0x123/0x790 [ 992.428669][T18040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.428692][T18040] RIP: 0033:0x7f61acd9e159 [ 992.428713][T18040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.428737][T18040] RSP: 002b:00007f61aaff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 992.428761][T18040] RAX: ffffffffffffffda RBX: 00007f61ad025fa0 RCX: 00007f61acd9e159 [ 992.428778][T18040] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 992.428794][T18040] RBP: 00007f61ace3506b R08: 0000000000000000 R09: 0000000000000000 [ 992.428807][T18040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.428819][T18040] R13: 00007f61ad026038 R14: 00007f61ad025fa0 R15: 00007ffe609c43a8 [ 992.428849][T18040] [ 992.673713][T18045] FAULT_INJECTION: forcing a failure. [ 992.673713][T18045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 992.673749][T18045] CPU: 0 UID: 0 PID: 18045 Comm: syz.4.4064 Tainted: G L syzkaller #0 PREEMPT(full) [ 992.673782][T18045] Tainted: [L]=SOFTLOCKUP [ 992.673791][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 992.673805][T18045] Call Trace: [ 992.673813][T18045] [ 992.673823][T18045] dump_stack_lvl+0x100/0x190 [ 992.673871][T18045] should_fail_ex.cold+0x5/0xa [ 992.673898][T18045] ? prepare_alloc_pages+0x16d/0x5b0 [ 992.673934][T18045] should_fail_alloc_page+0xeb/0x140 [ 992.673975][T18045] prepare_alloc_pages+0x1f0/0x5b0 [ 992.674012][T18045] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 992.674047][T18045] ? stack_trace_save+0x8e/0xc0 [ 992.674072][T18045] ? __pfx_stack_trace_save+0x10/0x10 [ 992.674097][T18045] ? stack_depot_save_flags+0x27/0x9f0 [ 992.674132][T18045] ? look_up_lock_class+0x64/0x120 [ 992.674159][T18045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 992.674188][T18045] ? kasan_save_stack+0x30/0x50 [ 992.674219][T18045] ? __kasan_kmalloc+0xaa/0xb0 [ 992.674247][T18045] ? __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 992.674277][T18045] ? kmemdup_noprof+0x29/0x60 [ 992.674300][T18045] ? uhid_dev_create2+0xf2/0x8d0 [ 992.674334][T18045] ? uhid_char_write+0x954/0x10e0 [ 992.674366][T18045] ? vfs_write+0x2aa/0x1050 [ 992.674390][T18045] ? ksys_write+0x1f8/0x250 [ 992.674415][T18045] ? do_syscall_64+0x123/0x790 [ 992.674442][T18045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.674490][T18045] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 992.674524][T18045] ? policy_nodemask+0xed/0x4f0 [ 992.674565][T18045] alloc_pages_mpol+0x201/0x550 [ 992.674600][T18045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 992.674632][T18045] ? rcu_is_watching+0x13/0xc0 [ 992.674673][T18045] ? trace_kmalloc+0xeb/0x110 [ 992.674705][T18045] ? __kasan_kmalloc+0xaa/0xb0 [ 992.674740][T18045] ___kmalloc_large_node+0xe8/0x130 [ 992.674776][T18045] __kmalloc_large_noprof+0x1c/0x70 [ 992.674812][T18045] hid_allocate_device+0x1a/0x4b0 [ 992.674835][T18045] uhid_dev_create2+0x160/0x8d0 [ 992.674872][T18045] uhid_char_write+0x954/0x10e0 [ 992.674912][T18045] vfs_write+0x2aa/0x1050 [ 992.674939][T18045] ? __pfx_uhid_char_write+0x10/0x10 [ 992.674974][T18045] ? lock_acquire+0x1d1/0x380 [ 992.674996][T18045] ? __fget_files+0x34/0x3d0 [ 992.675026][T18045] ? __pfx_vfs_write+0x10/0x10 [ 992.675048][T18045] ? find_held_lock+0x2b/0x80 [ 992.675081][T18045] ? __fget_files+0x215/0x3d0 [ 992.675110][T18045] ? __fget_files+0x215/0x3d0 [ 992.675147][T18045] ? __fget_files+0x21f/0x3d0 [ 992.675187][T18045] ksys_write+0x1f8/0x250 [ 992.675214][T18045] ? __pfx_ksys_write+0x10/0x10 [ 992.675250][T18045] do_syscall_64+0x123/0x790 [ 992.675279][T18045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.675304][T18045] RIP: 0033:0x7f3929d9e159 [ 992.675325][T18045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.675347][T18045] RSP: 002b:00007f392ac10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 992.675371][T18045] RAX: ffffffffffffffda RBX: 00007f392a025fa0 RCX: 00007f3929d9e159 [ 992.675388][T18045] RDX: 0000000000000119 RSI: 00002000000007c0 RDI: 0000000000000003 [ 992.675404][T18045] RBP: 00007f3929e3506b R08: 0000000000000000 R09: 0000000000000000 [ 992.675419][T18045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.675433][T18045] R13: 00007f392a026038 R14: 00007f392a025fa0 R15: 00007fff92c68918 [ 992.675467][T18045] [ 992.896807][ T5588] usb 8-1: reset high-speed USB device number 13 using dummy_hcd [ 992.951120][ T30] audit: type=1400 audit(1791178247.341:775): avc: denied { write } for pid=18035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.187272][ T30] audit: type=1400 audit(1791178247.581:776): avc: denied { write } for pid=18057 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.453338][T18067] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 993.512834][ T30] audit: type=1800 audit(1791178247.911:777): pid=18072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4068" name=08 dev="sda1" ino=2059 res=0 errno=0 [ 993.576827][T18075] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 993.713016][ T30] audit: type=1400 audit(1791178248.111:778): avc: denied { write } for pid=18063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.789017][T18083] uprobe: syz.7.4070:18083 failed to unregister, leaking uprobe [ 993.942446][ T30] audit: type=1400 audit(1791178248.341:779): avc: denied { write } for pid=18088 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.954503][ T44] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 994.043722][T18095] syz_tun: entered allmulticast mode [ 994.114157][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 994.114929][ T44] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 994.115948][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 994.115982][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 994.124750][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.124788][ T44] usb 5-1: Product: syz [ 994.124805][ T44] usb 5-1: Manufacturer: syz [ 994.124823][ T44] usb 5-1: SerialNumber: syz [ 994.145101][ T44] usb 5-1: config 0 descriptor?? [ 994.183286][ T5717] usb 8-1: USB disconnect, device number 13 [ 994.190867][ T30] audit: type=1326 audit(1791178248.581:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18097 comm="syz.8.4076" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3db259e159 code=0x0 [ 994.269679][ T30] audit: type=1400 audit(1791178248.661:781): avc: denied { create } for pid=18097 comm="syz.8.4076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 994.443972][ T44] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input56 [ 994.494518][ T30] audit: type=1400 audit(1791178248.891:782): avc: denied { write } for pid=18096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.608123][ T30] audit: type=1400 audit(1791178249.001:783): avc: denied { write } for pid=18115 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 994.708951][T18119] ip_tables: iptables: counters copy to user failed while replacing table [ 994.715018][ T30] audit: type=1400 audit(1791178249.111:784): avc: denied { lock } for pid=18118 comm="syz.6.4077" path="socket:[58174]" dev="sockfs" ino=58174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 994.772911][ T44] rc_core: IR keymap rc-imon-pad not found [ 994.772940][ T44] Registered IR keymap rc-empty [ 994.773032][ T44] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 994.773050][ T44] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 994.836382][ T44] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 994.849096][ T44] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input57 [ 994.859644][ T44] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:47> initialized [ 995.122948][ T30] audit: type=1400 audit(1791178249.511:785): avc: denied { set_context_mgr } for pid=18132 comm="syz.7.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 995.125925][ T30] audit: type=1400 audit(1791178249.521:786): avc: denied { map } for pid=18132 comm="syz.7.4081" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 995.128436][ T30] audit: type=1400 audit(1791178249.521:787): avc: denied { call } for pid=18132 comm="syz.7.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 995.182582][ T44] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 995.259300][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 995.268425][ T25] usb 5-1: USB disconnect, device number 47 [ 995.327325][ T44] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 995.330099][ T44] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 995.330128][ T44] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 995.330164][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.367537][ T44] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 995.396708][ T44] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 995.396700][T18139] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 995.398993][ T30] audit: type=1400 audit(1791178249.791:788): avc: denied { create } for pid=18138 comm="syz.7.4082" name="dev" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 995.712608][T18124] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 995.713359][T18124] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 995.713626][T18124] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 995.942528][T18124] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 995.944110][T12727] usb 7-1: USB disconnect, device number 29 [ 995.960953][T12727] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 995.961523][T12727] spcp8x5 7-1:1.0: device disconnected [ 996.026754][T18156] netlink: 'syz.4.4087': attribute type 1 has an invalid length. [ 996.026767][T18156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4087'. [ 996.364602][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 996.532193][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 996.534369][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 996.539036][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 996.582100][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.582138][ T10] usb 9-1: Product: syz [ 996.582155][ T10] usb 9-1: Manufacturer: syz [ 996.582247][ T10] usb 9-1: SerialNumber: syz [ 996.755894][ T10] usb 9-1: config 0 descriptor?? [ 996.903327][ T10] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 996.904831][ T10] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 997.107137][T18171] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 997.217757][T18170] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 997.441062][ T10] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 997.552143][ T5588] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 997.702619][ T5588] usb 8-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 997.703523][ T5588] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.703541][ T5588] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 997.704828][ T5588] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 997.704842][ T5588] usb 8-1: Product: syz [ 997.704851][ T5588] usb 8-1: Manufacturer: syz [ 997.709372][ T5588] mos7840 8-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 998.052970][ T10] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 998.053025][ T10] em28xx 9-1:0.0: board has no eeprom [ 998.112337][ T10] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 998.112370][ T10] em28xx 9-1:0.0: dvb set to bulk mode. [ 998.113473][ T5717] em28xx 9-1:0.0: Binding DVB extension [ 998.133065][ T10] usb 9-1: USB disconnect, device number 13 [ 998.142852][ T10] em28xx 9-1:0.0: Disconnecting em28xx [ 998.285783][ T5717] em28xx 9-1:0.0: Registering input extension [ 998.289170][ T10] em28xx 9-1:0.0: Closing input extension [ 998.321971][ T10] em28xx: Freeing device [ 999.820330][ T5588] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 999.831390][ T5588] usb 8-1: USB disconnect, device number 14 [ 999.837202][ T5588] mos7840 8-1:1.0: device disconnected [ 999.863466][T11199] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 999.867623][T11199] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 999.868545][T11199] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 999.873783][T11199] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 999.874295][T11199] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1000.137888][T15082] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1001.094977][T15082] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1001.097113][T15082] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1001.098758][T15082] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1001.099261][T15082] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1001.258352][T18222] input: syz0 as /devices/virtual/input/input59 [ 1002.916900][T18249] sctp: sctp_close: sk:ffff88804bf5e040, timeout:0 [ 1002.916930][T18249] sctp: sctp_destroy_sock: sk:ffff88804bf5e040 [ 1002.923383][ T31] INFO: task syz-executor:5605 blocked for more than 144 seconds. [ 1002.923404][ T31] Tainted: G L syzkaller #0 [ 1002.923418][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1002.923427][ T31] task:syz-executor state:D stack:22432 pid:5605 tgid:5605 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1002.923493][ T31] Call Trace: [ 1002.923501][ T31] [ 1002.923513][ T31] __schedule+0x1259/0x6920 [ 1002.923537][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 1002.923578][ T31] ? __pfx___schedule+0x10/0x10 [ 1002.923597][ T31] ? find_held_lock+0x2b/0x80 [ 1002.923629][ T31] ? schedule+0x225/0x2c0 [ 1002.923655][ T31] schedule+0xdd/0x2c0 [ 1002.923675][ T31] schedule_preempt_disabled+0x13/0x30 [ 1002.923699][ T31] __mutex_lock+0xccb/0x1bd0 [ 1002.923726][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1002.923772][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1002.923804][ T31] ? net_generic+0x25/0x2a0 [ 1002.923833][ T31] ? net_generic+0xea/0x2a0 [ 1002.923859][ T31] ? net_generic+0xea/0x2a0 [ 1002.923894][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1002.923922][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1002.923962][ T31] nfsd_umount+0x3b/0x60 [ 1002.923993][ T31] deactivate_locked_super+0xbd/0x130 [ 1002.924022][ T31] deactivate_super+0xea/0x110 [ 1002.924050][ T31] cleanup_mnt+0x21f/0x450 [ 1002.924084][ T31] task_work_run+0x150/0x240 [ 1002.924121][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1002.924165][ T31] exit_to_user_mode_loop+0x1d8/0x700 [ 1002.924195][ T31] ? rcu_is_watching+0x13/0xc0 [ 1002.924231][ T31] do_syscall_64+0x661/0x790 [ 1002.924259][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.924283][ T31] RIP: 0033:0x7f7a20f9f397 [ 1002.924302][ T31] RSP: 002b:00007ffc1f41f4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1002.924325][ T31] RAX: 0000000000000000 RBX: 00007f7a210344bb RCX: 00007f7a20f9f397 [ 1002.924341][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1f41f560 [ 1002.924356][ T31] RBP: 00007ffc1f41f560 R08: 00007ffc1f420560 R09: 00000000ffffffff [ 1002.924372][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1f4205f0 [ 1002.924387][ T31] R13: 00007f7a210344bb R14: 00000000000ce1c8 R15: 00007ffc1f420630 [ 1002.924421][ T31] [ 1002.924491][ T31] [ 1002.924491][ T31] Showing all locks held in the system: [ 1002.924505][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1002.924522][ T31] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1002.924611][ T31] locks held by syz-executor/5604: 2, on CPU#1: [ 1002.924628][ T31] #0: ffff88804c1120e8 (&type->s_umount_key#87){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1002.924689][ T31] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1002.924785][ T31] locks held by syz-executor/5605: 2, on CPU#1: [ 1002.924802][ T31] #0: ffff8880359aa0e8 (&type->s_umount_key#87){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1002.924862][ T31] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1002.924924][ T31] locks held by kworker/u8:10/5816: 2, on CPU#1: [ 1002.924941][ T31] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1002.925006][ T31] #1: ffffc9000496fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1002.925074][ T31] locks held by syz.0.2565/13411: 3, on CPU#0: [ 1002.925090][ T31] #0: ffff888079c72d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1002.925152][ T31] #1: ffff88807f988460 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1002.925212][ T31] #2: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1002.925272][ T31] locks held by getty/14385: 2, on CPU#1: [ 1002.925288][ T31] #0: ffff888037b740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1002.925344][ T31] #1: ffffc90002eac2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1002.925393][ T31] locks held by syz.5.3472/16168: 1, on CPU#1: [ 1002.925408][ T31] #0: ffff8880359aa0e8 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x326/0x3f0 [ 1002.925461][ T31] locks held by syz.8.4114/18246: 1, on CPU#0: [ 1002.925476][ T31] #0: ffffffff8edf8378 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1002.925527][ T31] locks held by syz.4.4115/18251: 2, last CPU#1: [ 1002.925543][ T31] #0: ffff888034151bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1002.925602][ T31] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1002.925655][ T31] locks held by modprobe/18255: 2, last CPU#1: [ 1002.925671][ T31] #0: ffff88801c084080 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1002.925729][ T31] #1: ffff88807139e490 (&anon_vma->rwsem){++++}-{4:4}, at: validate_mm+0x1f1/0x4e0 [ 1002.925787][ T31] locks held by syz.7.4117/18256: 2, last CPU#1: [ 1002.925804][ T31] #0: ffff888039330088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 1002.925865][ T31] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1002.925925][ T31] [ 1002.925931][ T31] ============================================= [ 1002.925931][ T31] [ 1002.925949][ T31] NMI backtrace for cpu 0 [ 1002.925965][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.925995][ T31] Tainted: [L]=SOFTLOCKUP [ 1002.926003][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1002.926016][ T31] Call Trace: [ 1002.926023][ T31] [ 1002.926032][ T31] dump_stack_lvl+0x100/0x190 [ 1002.926067][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1002.926103][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1002.926131][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1002.926169][ T31] sys_info+0x141/0x190 [ 1002.926198][ T31] watchdog+0xcb1/0x1030 [ 1002.926230][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1002.926252][ T31] ? __pfx_watchdog+0x10/0x10 [ 1002.926281][ T31] ? __kthread_parkme+0x18f/0x230 [ 1002.926311][ T31] ? kthread+0x13a/0x450 [ 1002.926338][ T31] ? __pfx_watchdog+0x10/0x10 [ 1002.926363][ T31] kthread+0x373/0x450 [ 1002.926392][ T31] ? __pfx_kthread+0x10/0x10 [ 1002.926425][ T31] ret_from_fork+0x730/0xd60 [ 1002.926450][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1002.926478][ T31] ? __switch_to+0x800/0x10f0 [ 1002.926509][ T31] ? __pfx_kthread+0x10/0x10 [ 1002.926541][ T31] ret_from_fork_asm+0x1a/0x30 [ 1002.926580][ T31] [ 1002.926589][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1002.926618][ C1] NMI backtrace for cpu 1 [ 1002.926633][ C1] CPU: 1 UID: 0 PID: 18255 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.926661][ C1] Tainted: [L]=SOFTLOCKUP [ 1002.926669][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1002.926681][ C1] RIP: 0010:write_comp_data+0x8/0xa0 [ 1002.926704][ C1] Code: 24 08 e8 6b 85 73 00 e9 6d fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 90 df 80 12 <49> 89 f8 49 89 d2 49 89 f1 65 48 8b 3d 6f df 80 12 48 63 d0 a9 00 [ 1002.926723][ C1] RSP: 0018:ffffc9000378f360 EFLAGS: 00000206 [ 1002.926740][ C1] RAX: 8000000000000000 RBX: 0000000000000005 RCX: ffffffff8bcb38f2 [ 1002.926753][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000005 [ 1002.926766][ C1] RBP: ffffffff8d72a6e0 R08: 0000000000000005 R09: 0000000000000003 [ 1002.926779][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1002.926790][ C1] R13: 0000000000000005 R14: 0000000000000005 R15: 0000000000000001 [ 1002.926802][ C1] FS: 0000000000000000(0000) GS:ffff888123c4e000(0000) knlGS:0000000000000000 [ 1002.926821][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1002.926835][ C1] CR2: 00007f8e86f95a10 CR3: 000000007e4b8000 CR4: 00000000003526f0 [ 1002.926848][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1002.926861][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1002.926874][ C1] Call Trace: [ 1002.926880][ C1] [ 1002.926887][ C1] __sanitizer_cov_trace_switch+0x54/0x90 [ 1002.926913][ C1] mas_next_slot+0x392/0x13a0 [ 1002.926943][ C1] mas_next_range+0xed/0x100 [ 1002.926966][ C1] ? __pfx_mas_next_range+0x10/0x10 [ 1002.926992][ C1] ? mas_find+0x2cb/0x790 [ 1002.927015][ C1] __mmap_region+0xd7c/0x32e0 [ 1002.927038][ C1] ? __pfx___mmap_region+0x10/0x10 [ 1002.927060][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 1002.927087][ C1] ? mas_prev_slot+0x768/0x11b0 [ 1002.927125][ C1] ? unmapped_area_topdown+0x54e/0x6a0 [ 1002.927151][ C1] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 1002.927178][ C1] ? stack_depot_save_flags+0x27/0x9f0 [ 1002.927238][ C1] mmap_region+0x3db/0x6d0 [ 1002.927264][ C1] ? __pfx_mmap_region+0x10/0x10 [ 1002.927285][ C1] ? shmem_mapping+0xd/0x50 [ 1002.927306][ C1] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 1002.927337][ C1] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1002.927364][ C1] ? security_mmap_addr+0x71/0x1e0 [ 1002.927393][ C1] ? __get_unmapped_area+0x255/0x3e0 [ 1002.927421][ C1] do_mmap+0x12c7/0x1c30 [ 1002.927449][ C1] ? lock_acquire+0x1d1/0x380 [ 1002.927471][ C1] ? __pfx_do_mmap+0x10/0x10 [ 1002.927496][ C1] ? __pfx___might_resched+0x10/0x10 [ 1002.927516][ C1] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 1002.927536][ C1] ? security_current_getlsmprop_subj+0x6e/0x130 [ 1002.927560][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 1002.927588][ C1] vm_mmap_pgoff+0x28d/0x470 [ 1002.927615][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1002.927638][ C1] ? __fget_files+0x215/0x3d0 [ 1002.927666][ C1] ? __fget_files+0x21f/0x3d0 [ 1002.927695][ C1] ksys_mmap_pgoff+0x3cb/0x610 [ 1002.927722][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1002.927748][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1002.927772][ C1] __x64_sys_mmap+0x125/0x190 [ 1002.927797][ C1] do_syscall_64+0x123/0x790 [ 1002.927819][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.927839][ C1] RIP: 0033:0x7f8e872c2242 [ 1002.927854][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 1002.927873][ C1] RSP: 002b:00007ffc2d3135e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1002.927891][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e872c2242 [ 1002.927905][ C1] RDX: 0000000000000001 RSI: 0000000000061018 RDI: 0000000000000000 [ 1002.927917][ C1] RBP: 0000000000000802 R08: 0000000000000000 R09: 0000000000000000 [ 1002.927930][ C1] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000 [ 1002.927942][ C1] R13: 00007f8e86f996b0 R14: 00007ffc2d313a20 R15: 00000fff85a626c0 [ 1002.927964][ C1] [ 1003.172980][T15082] Bluetooth: hci8: command tx timeout [ 1003.236479][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1004.010025][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.020687][ T31] Tainted: [L]=SOFTLOCKUP [ 1004.024989][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1004.035022][ T31] Call Trace: [ 1004.038286][ T31] [ 1004.041198][ T31] dump_stack_lvl+0x100/0x190 [ 1004.045873][ T31] vpanic+0x553/0x970 [ 1004.049841][ T31] ? __pfx_vpanic+0x10/0x10 [ 1004.054328][ T31] ? irqentry_exit+0x24d/0xa10 [ 1004.059076][ T31] ? lockdep_hardirqs_on+0x7d/0x110 [ 1004.064262][ T31] panic+0xd1/0xe0 [ 1004.067968][ T31] ? __pfx_panic+0x10/0x10 [ 1004.072374][ T31] ? watchdog.cold+0x1ec/0x234 [ 1004.077126][ T31] watchdog.cold+0x1fd/0x234 [ 1004.081713][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1004.087504][ T31] ? __pfx_watchdog+0x10/0x10 [ 1004.092261][ T31] ? __kthread_parkme+0x18f/0x230 [ 1004.097278][ T31] ? kthread+0x13a/0x450 [ 1004.101510][ T31] ? __pfx_watchdog+0x10/0x10 [ 1004.106171][ T31] kthread+0x373/0x450 [ 1004.110235][ T31] ? __pfx_kthread+0x10/0x10 [ 1004.114821][ T31] ret_from_fork+0x730/0xd60 [ 1004.119401][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1004.124502][ T31] ? __switch_to+0x800/0x10f0 [ 1004.129167][ T31] ? __pfx_kthread+0x10/0x10 [ 1004.133747][ T31] ret_from_fork_asm+0x1a/0x30 [ 1004.138508][ T31] [ 1004.141718][ T31] Kernel Offset: disabled [ 1004.146020][ T31] Rebooting in 86400 seconds..