last executing test programs: 9.870304087s ago: executing program 3 (id=255): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000140)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b7000000010000009500"], &(0x7f0000000400)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1c, 0x0, &(0x7f0000000500)="000000000000000002000000110000007f0000010000000000000000", 0x0}, 0x50) 9.829135455s ago: executing program 0 (id=256): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4603100702810000000000000003003e00f9ffffff580200000000000040000000000000008b00000000000000330d000005003800020078000700090051e57464"], 0xb0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22e2}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40, 0x16f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) lsetxattr$security_capability(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) sendto$unix(r0, &(0x7f0000000380)="040f82af683621e5356485c9bcd120425870a55ff1328273e1d1c94c4b1aeb3200eecaa6dfc515a2a5b7cb64cc08c281afd51d4c79c90361f308f61b61af245f9ab6992e45a778c852084a1aa4c0faeb4ceeae56b5ec4bbd2d615b5201b7d752a1f033514f727501a115fcfd18f4d44171000b4017bc", 0x76, 0x1, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) close(r0) 9.654928195s ago: executing program 0 (id=259): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200003, 0x0, 0x0, 0x4}) r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618c, &(0x7f0000000200)) 9.647391173s ago: executing program 2 (id=260): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200003, 0x0, 0x0, 0x4}) r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618c, &(0x7f0000000200)) (fail_nth: 1) 8.842985157s ago: executing program 3 (id=261): setregid(0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000001680)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x4c}}, 0x20040000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2004e739, &(0x7f0000000500)={0x2, 0x4e23, @empty}, 0x10) write(r3, &(0x7f0000000540)="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", 0x205) sendto$inet(r3, &(0x7f0000000780)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x17, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000004000008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000fc0)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="654f8ff28b8a93e67914919e944a43febf9a1419c1e76b1d3f32c885f7b6e7ab0a5295f6f98f888630c59b8007e3bc4df995bb9a90ad109033dd5e602c8f636ae8cbcc4efa94e4b601f196c7f6dbdf2edc208c81c709bc9c037574d872c5c9b33a43fcf42aff7c2d1e069031e62df89ed3bc88b12ee25492ff562ec35b6ae12c4a0ace8eefb1f034a23c3819e0d271a30a19d6554448c00fade84d16955c1642d7df2aeed1cff6bf7ab22cfc57afad7e4d7a48c67ab30b275186fa3e838dd6ba5f809aa79f4ece984014a0e2bfb549e7a4d87c2e16bf7870380c25353f04c63216ac39082eff1f32a4d56694d86fcaf59f936716af1541e7", 0xf8}, {&(0x7f0000000ac0)="6dd646a91563f57869a9b005787ae8b89db045cf07ccc237ef36ee92cd17047480658f23d347d969967bdbdab165cf766ee716ee3dededf595a6987cec58f693bb8d38dfee39014730406399734cc3f140158b4e685ad27ec93a310cf04cb10c342bbaf44900603196079a8eafb0d44a9bec67ebbe23dc17c795c395932ab3ba9e1ba6b8c34b024f28b5bf87d1d1a6bf576bac9cca15497afa82d5ec49a9cf2af3fdbb5550648303dc48aa8c19fb01f369bec4250a0d250dcdbe137eff9ed1da3e950b3d118df50b19a476fdc80bc65214e7aee4", 0xd4}, {&(0x7f0000000bc0)="e5828219323cfd55bf8e4625b5ebb97ebba59f7e9fdf120c20ad160d6bc56ce20176cb09bf4e9f9343600183c3bd286bf9c1b7e5c725e982af2886f44bbee205f5b5", 0x42}, {&(0x7f0000000c40)="ae2d2f70b0bc78df0c2da77507caa564b1308013a0ed2acd3301e68e84c698f5de2e5cf0d0394a11", 0x28}, {&(0x7f0000000c80)="68ad2c6c8aad1c58c178aec2bf1975e4cb64e372a4c8a78b149a93d90925718ccb762f8ac0fe7bd645f2ad3f4b92dd4aa43055a1afa871974067da1e2f70b6dac3c3d1e8598c8cba3b41cee04138cb2fbe9d224b7b2261ac51508b480afcf7a4ace5e24da13b433eb3e0f4ee511d473f6332b869360de105be906c3338fe7dd3eec008010f721e9e4e085d9b9b6ef8baeda9ec61ffaff6ee1be4143ddda822e42311cd8ce8c12cae45f431825ecfcb8bef5fafb855f4245bcd305afe5a815ac9f8444dab33ae206e8903dbb3b0bf14d719770e322e8da09c8dd77a0cef89416fdcaf", 0xe2}, {&(0x7f0000000d80)="d04e7cfd09f1d118c2cce2f15caba32192c7eff884d8fa4f037206acc09b73d1fe0c2d7c23740f", 0x27}], 0x6, &(0x7f0000000f80)=[@cred={{0x1c}}], 0x20, 0x8001}}], 0x1, 0x4c000) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000e40)=@nfc, 0x80, &(0x7f0000003b00)=[{&(0x7f0000000340)=""/36, 0x16}, {&(0x7f0000000f00)=""/113, 0x71}, {&(0x7f0000001080)=""/163, 0xa3}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/166, 0xb6}, {&(0x7f0000001140)=""/152, 0x98}, {&(0x7f0000002840)=""/243, 0xf3}, {&(0x7f0000002940)=""/222, 0xde}, {&(0x7f0000002a40)=""/4080, 0x1051}, {&(0x7f0000003a40)=""/144, 0x90}], 0xa, &(0x7f0000003bc0)=""/4080, 0x1000}, 0x6efc6ec2}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 7.423226678s ago: executing program 4 (id=263): bpf$MAP_CREATE(0x0, &(0x7f0000002300)=@base={0xf, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0xd, 0x0, 0x0, &(0x7f0000002540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) 6.987456403s ago: executing program 2 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0) listen(0xffffffffffffffff, 0xfffffffe) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 6.702940013s ago: executing program 3 (id=266): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a40)={r0}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000a80)=0x3) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000ac0)={r1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r2 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000000480)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) recvfrom$l2tp6(r1, &(0x7f0000000bc0)=""/232, 0xe8, 0x2041, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @private0}, 0x20) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x4212, 0x0}, 0xfffffffffffffd3b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180007000200000000000000800000001811005db6e200b06c10b676e3a78d3c960facb31e01d682daf8dc67b23f3a6290bf37d388df7247c2265e1f19b2c22f06ebc6de3f07d6d91578cb8ae4c74f34eda158653f2774893783aa7cc7726b28680e7e7498447e0bfa39270cb259b9444aa5732527eef3e9e242b132741ef2e6c67b9554e375ab6633c581af678bd2c75b1c8f9caf270ff313a4eb6825ceb4bc0903000000a424793f3fa46917b492b35ca64c2d9f625ac7535f35f733be0d4b64e92871f1808bb5cd4a0027f6ad296d0c7e94b4365b156363782f7f53b6b83311b57386aad1f8a0f06c8a1baf8f8c91986ae4028901", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000085100000feffffff18330000040000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x2, 0x2e, &(0x7f00000006c0)=""/46, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x4, 0x4, 0x75a1}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[r5, r4, r4, r4], &(0x7f0000000780)=[{0x5, 0x3, 0x0, 0x4}, {0x1, 0x1, 0x4}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xf, &(0x7f0000000f40)=ANY=[@ANYBLOB="794e3bed1a781578372943c1ea04c12768eb062d2ac735362fa5e1816508025d9d57ab464aa86417fc19b418cb484da51fa55aad4d37ee5429cd19c00598984753dd5693c79f2e7446ca835f46c3dd694782b5ed2d11d2acf516a958e69a525ea49d16d6cddcdc01bbe9fe54f78751d7e2c0370f14e6fd6e6ce85eb4f5b3c74077f3a29bd7cb2f1911f127acb1a17b4e5393ea763b7a010d704505eca19820cdb2bcec5dc369cff43dcf04b2b557f885be55ca10cc08db33a3dc92ed1ce52008bdce100aed000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x1, 0x9, 0x7, 0x9}, 0x10, r6, r3, 0x2, 0x0, &(0x7f0000000a00)=[{0x1, 0x5, 0x6, 0x6}, {0x0, 0x4, 0x8, 0x3}], 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xef84f000) syz_ublk_setup_io_uring(0x4afc, 0x0, 0x0, 0x0, 0x0) shmdt(0x0) write(0xffffffffffffffff, &(0x7f0000000040)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./nfsd_dir/threads\x00', 0x2, 0x0) read$FUSE(r8, 0x0, 0x3c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000d80)={0xffffffffffffffff, r8, 0x11, 0x0, @void}, 0x10) 5.620781429s ago: executing program 2 (id=268): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) read(r0, &(0x7f0000000200)=""/93, 0x5d) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r3, {0xb}, {0xffff}, {0xfff2, 0xffe1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000400)={@local}, 0x0) 5.198429095s ago: executing program 2 (id=271): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x8800) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x1, 0x1}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f000000cb40)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="6f642b21f119e18375fdcc39cf2d652366dd5a1a17e287619b9d4fe8cb99b8853b54985f415ccf5896a09927343dbce8bd13fb412ea7", 0x36}, {&(0x7f0000001940)="9a37e20568fb55e4429cbb0674394d9de827cd80bcdf92b274010e8c8763f8b5dde516d4ec2169a58ebb6e3e5703ea486221aaea0f5aaa933bf3d90197fb74800de9b9482647539dd4bc1b4098dfe08d6af39ccbd568fe1cb0e7fe3a4ece0ac6e1365457a7f0c5eac9cf53877267d814602b14dd0012c408158ad68553efbd4193e59e31c314bec044abdb4a251edb74b4d88eb0778398ac6aea1497a44c1e2e74894acbb935532b533ed5d78ef3adbdcd6776cadeca095e033cab3b02a45ed98d53defe3b5aaa77ed1e460b21db49e9df7651e661effc17992e6fba00190181ecd301a5e735021dd63d", 0xea}, {&(0x7f0000001a40)="a13c208de53afa70ff0f5df00b5ea3f576c99b0a8fa5ca4661823b343eacfb456287cb187787cb0a5edae226a3f8d7d2dbcc4c78c766da857984a719a5e8fd6f64ea6f2ccf1f74286a913f9227814236b2c2510d1263df6d5493ac452d5c53abd154299bdb783dfd0a6af4f199202932b40c82aafcc781e33909a5eaa48f3a6695cf5e2a07061afad8b666291083aa79c68f19252f2760b7b31ee6d6c228b2a234d73fc0366d15129f13fcff7740315f8b097f97edcaaf46f0b7a86294b4d4fe4e2d5c2ed073e7337000af4c4eff2252", 0xd0}, {&(0x7f0000001b40)="65f3f98802f5676fefe3166485aa1813bea870ac70d15e96", 0x18}, {&(0x7f0000001b80)="6c22d9785a05266385149f87dae607bf421178126540f6e9cc6d586a9017da6b17", 0x21}], 0x6, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x10}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001d80)="85d1ff87be159bb82cada6e5d8f169dd118e4863eb3447a19c5612a7a7865b04d4aebbef617de1e03952eead90ad9f94638051f4aa787d836076eb7ea7f930179e5f4bad4441dcf23c637e4422984fdaae630ff13bd01937bb624659dab0c3bfad17b4e4297a7e935c653ce7b91ab7d9103f18747234b8a018450d689061cf03a208140e9383271bd8f85bca7fa0d671892a0c214379d0f99bc7fe7dfac568695343ecabf95cda33c02f91a24221de478bfe4d2d3294d7db09ad4cf1c4fa9f648e2fa687ee8ac2a202c0", 0xca}, {&(0x7f0000001e80)="edb2f90b256a811badd820b007a0234b2260928ba8ad9e23a00e6aac465de536506eedccb13a89f657a0853b6b57686c7d01952cbad73e9d1a577ec942c7b6a0ac068e6cc1f18d6df90f0cb83b0b96f136945f54db2a52f290ff8d021e9246e55482a1665c7ad467e949eb3e133514508984727030cccabc105203fde41d04238ff7a07b88cf787d64b5045dcea3106ca3db858d71b51c049eb0868b4f0f8c8736046f9101414fc0a1b87c9ec75a2e80d944e98d1dc2c3713ab59bd921ebf80c1f9c359972673f16999d21f48e5e85", 0xcf}, {&(0x7f0000001f80)="5038194432506ada88adbaaed44022770b9d2b82ade26672ecd3d42c911983523ed3947de51afc431eccc156af8678ce9eb2bc8cd5576271f5130270d10cce1004f1cc3dcf741436da16", 0x4a}, {&(0x7f0000002000)="076287e53da3bb6c47934c7f3c0bdda27a58bd91c6440b3fb059ddb525c3453d702cbf130d3e20173587e6c5d633d2df910bc37e3a2074289ab0df0d4ed84b82bb811edd3365abec6222e29b72fa369ca9b145eaf210dc818d8a35b82b0d52435be59c3dc7c2fae47b53a492acdd462037e15a7c717b108d8d181de1b203b47b02d680ec14d5d4a0514b404cdd9ef6", 0x8f}], 0x4, &(0x7f0000006400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r2]}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r4, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa0, 0x1}}, {{0x0, 0x0, &(0x7f00000065c0)=[{&(0x7f00000064c0)="c69363484e9609a8c377c26e871cdbd6c840bd37dc87483733dd6919a381720c26c867cba282ef7341034582619374125fdf6d023feea4b608f6355b2e47e43515c71a8884be57d7a6a2d0ba4b1e", 0x4e}, {&(0x7f0000006540)="947e5e4ab7e72c5fd699c4bede8741be7450a4208949d944e16e", 0x1a}, {&(0x7f0000006580)="d8dae4757ef6e356cd4ede1e89c142de405bcddac3e6e59f56be0c89", 0x1c}], 0x3, &(0x7f000000cac0)=[@rights={{0x38, 0x1, 0x1, [r4, r2, r4, r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78, 0x90}}], 0x3, 0x20800) recvmmsg(r4, &(0x7f0000000380), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='./file0\x00', &(0x7f0000000280)='./dev\x00', &(0x7f0000000540)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x2710}, 0x0, 0x2002}], 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x59fc02, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000600)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r0, &(0x7f0000000800)="f81314f8219dbc5b176cb372c0a111e3b1f6aa7c240a49bf412565507b46475e83573673183a8c65604943feb9b1be964d47cb3f647cf1e24eca2fc1b552456cb619d89bb8d94ecb47beca46fa133439a38bd80696ab4eb7021ec3b80ee20af1e2ce413a90cfb38367b0f97368e42e9f7e0fd7c1b2e8742e88b8b8a241838ba5b7282ff9fefd1f8000a720d5161f984e7d057b6a64818b294747d711662d409d8e23cbb0a6c35e977113fe97c03b56e152f8da26a5d6c2080000002ac386eb04e835f8cd96e9d845499166eab35fe38f70b9416e12fae7a5683a58e5f2db2584e61752352d6d0626a9a00000", 0xfffffffffffffef0) add_key(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f00000006c0)=0x40, 0x4) 5.056665922s ago: executing program 0 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0) listen(0xffffffffffffffff, 0xfffffffe) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 4.905625145s ago: executing program 3 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x800, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='-', 0x1) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r4) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}}, 0x10) 4.370333019s ago: executing program 1 (id=274): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r1], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) write(r0, &(0x7f0000000540)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38) write(r3, &(0x7f0000000340)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400190008000200010101010500040040000000", 0x60) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="e00000000206010800000000000000000000000014fb0e8d3fd971b651000000050015000c000000050005000a000000050001000700000005000400000000000900020083a870ac0000000012000300686173683a6e65746c706f7274000000"], 0x60}}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f00000004c0)={0x8f, 0x0, 0x2}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r9, &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x1}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) symlink(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./file0\x00') r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_NMI(r10, 0xae9a) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x6) syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r13, 0x4068aea3, &(0x7f0000000700)={0xbe, 0x0, 0x1}) 3.480130565s ago: executing program 0 (id=275): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.478985396s ago: executing program 3 (id=276): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.428206452s ago: executing program 4 (id=277): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000016ec0)=@base={0x12, 0x8a, 0x8, 0x2, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000016f40)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x20000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000016f80)={r0, &(0x7f00000000c0), &(0x7f0000017000)=@udp6, 0x1}, 0x20) 3.366435633s ago: executing program 4 (id=278): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00222200000096231309007c070c0000007e24591de11d47eadb272a76009b01f6216683"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000004c0)=""/241) 3.169318351s ago: executing program 2 (id=279): setregid(0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000001680)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x4c}}, 0x20040000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2004e739, &(0x7f0000000500)={0x2, 0x4e23, @empty}, 0x10) write(r3, &(0x7f0000000540)="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", 0x205) sendto$inet(r3, &(0x7f0000000780)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x17, &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000004000008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000fc0)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="654f8ff28b8a93e67914919e944a43febf9a1419c1e76b1d3f32c885f7b6e7ab0a5295f6f98f888630c59b8007e3bc4df995bb9a90ad109033dd5e602c8f636ae8cbcc4efa94e4b601f196c7f6dbdf2edc208c81c709bc9c037574d872c5c9b33a43fcf42aff7c2d1e069031e62df89ed3bc88b12ee25492ff562ec35b6ae12c4a0ace8eefb1f034a23c3819e0d271a30a19d6554448c00fade84d16955c1642d7df2aeed1cff6bf7ab22cfc57afad7e4d7a48c67ab30b275186fa3e838dd6ba5f809aa79f4ece984014a0e2bfb549e7a4d87c2e16bf7870380c25353f04c63216ac39082eff1f32a4d56694d86fcaf59f936716af1541e7", 0xf8}, {&(0x7f0000000ac0)="6dd646a91563f57869a9b005787ae8b89db045cf07ccc237ef36ee92cd17047480658f23d347d969967bdbdab165cf766ee716ee3dededf595a6987cec58f693bb8d38dfee39014730406399734cc3f140158b4e685ad27ec93a310cf04cb10c342bbaf44900603196079a8eafb0d44a9bec67ebbe23dc17c795c395932ab3ba9e1ba6b8c34b024f28b5bf87d1d1a6bf576bac9cca15497afa82d5ec49a9cf2af3fdbb5550648303dc48aa8c19fb01f369bec4250a0d250dcdbe137eff9ed1da3e950b3d118df50b19a476fdc80bc65214e7aee4", 0xd4}, {&(0x7f0000000bc0)="e5828219323cfd55bf8e4625b5ebb97ebba59f7e9fdf120c20ad160d6bc56ce20176cb09bf4e9f9343600183c3bd286bf9c1b7e5c725e982af2886f44bbee205f5b5", 0x42}, {&(0x7f0000000c40)="ae2d2f70b0bc78df0c2da77507caa564b1308013a0ed2acd3301e68e84c698f5de2e5cf0d0394a11", 0x28}, {&(0x7f0000000c80)="68ad2c6c8aad1c58c178aec2bf1975e4cb64e372a4c8a78b149a93d90925718ccb762f8ac0fe7bd645f2ad3f4b92dd4aa43055a1afa871974067da1e2f70b6dac3c3d1e8598c8cba3b41cee04138cb2fbe9d224b7b2261ac51508b480afcf7a4ace5e24da13b433eb3e0f4ee511d473f6332b869360de105be906c3338fe7dd3eec008010f721e9e4e085d9b9b6ef8baeda9ec61ffaff6ee1be4143ddda822e42311cd8ce8c12cae45f431825ecfcb8bef5fafb855f4245bcd305afe5a815ac9f8444dab33ae206e8903dbb3b0bf14d719770e322e8da09c8dd77a0cef89416fdcaf", 0xe2}, {&(0x7f0000000d80)="d04e7cfd09f1d118c2cce2f15caba32192c7eff884d8fa4f037206acc09b73d1fe0c2d7c23740f", 0x27}], 0x6, &(0x7f0000000f80)=[@cred={{0x1c}}], 0x20, 0x8001}}], 0x1, 0x4c000) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000000e40)=@nfc, 0x80, &(0x7f0000003b00)=[{&(0x7f0000000340)=""/36, 0x16}, {&(0x7f0000000f00)=""/113, 0x71}, {&(0x7f0000001080)=""/163, 0xa3}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/166, 0xb6}, {&(0x7f0000001140)=""/152, 0x98}, {&(0x7f0000002840)=""/243, 0xf3}, {&(0x7f0000002940)=""/222, 0xde}, {&(0x7f0000002a40)=""/4080, 0x1051}, {&(0x7f0000003a40)=""/144, 0x90}], 0xa, &(0x7f0000003bc0)=""/4080, 0x1000}, 0x6efc6ec2}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) 2.761649726s ago: executing program 1 (id=280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00222200000096231309007c070c0000007e24591de11d47eadb272a76009b01f6216683"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000480), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000004c0)=""/241) (fail_nth: 1) 2.195919511s ago: executing program 2 (id=281): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r6, &(0x7f00000005c0)=""/102392, 0x18ff8) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000195c0), 0x802, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000019600)={0x3f}) timer_getoverrun(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) write$uinput_user_dev(r7, &(0x7f0000019640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000019ac0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r8, &(0x7f0000019b00)='-1\x00', 0x2) ioctl$UI_DEV_CREATE(r7, 0x5501) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000019b40)={0x0, 0x0, &(0x7f0000019b80)={&(0x7f0000019bc0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x44800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00222200000096231309007c070c0000007e24591de11d47eadb272a76009b01f6216683"], 0x0}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x35dfdbff, {0xa, 0x80, 0x10, 0x0, 0xb5, 0x0, 0x0, 0x5, 0x17}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 2.062854329s ago: executing program 3 (id=282): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000006a40)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000006a80), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000006ac0)={0x3, 0x200, 0x9, 0x9, 0x2, 0x1}) 1.584663881s ago: executing program 4 (id=283): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a40)={r0}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000a80)=0x3) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000ac0)={r1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r2 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000000480)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) recvfrom$l2tp6(r1, &(0x7f0000000bc0)=""/232, 0xe8, 0x2041, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @private0}, 0x20) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x4212, 0x0}, 0xfffffffffffffd3b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180007000200000000000000800000001811005db6e200b06c10b676e3a78d3c960facb31e01d682daf8dc67b23f3a6290bf37d388df7247c2265e1f19b2c22f06ebc6de3f07d6d91578cb8ae4c74f34eda158653f2774893783aa7cc7726b28680e7e7498447e0bfa39270cb259b9444aa5732527eef3e9e242b132741ef2e6c67b9554e375ab6633c581af678bd2c75b1c8f9caf270ff313a4eb6825ceb4bc0903000000a424793f3fa46917b492b35ca64c2d9f625ac7535f35f733be0d4b64e92871f1808bb5cd4a0027f6ad296d0c7e94b4365b156363782f7f53b6b83311b57386aad1f8a0f06c8a1baf8f8c91986ae4028901", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000085100000feffffff18330000040000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x2, 0x2e, &(0x7f00000006c0)=""/46, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x4, 0x4, 0x75a1}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[r5, r4, r4, r4], &(0x7f0000000780)=[{0x5, 0x3, 0x0, 0x4}, {0x1, 0x1, 0x4}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0xf, &(0x7f0000000f40)=ANY=[@ANYBLOB="794e3bed1a781578372943c1ea04c12768eb062d2ac735362fa5e1816508025d9d57ab464aa86417fc19b418cb484da51fa55aad4d37ee5429cd19c00598984753dd5693c79f2e7446ca835f46c3dd694782b5ed2d11d2acf516a958e69a525ea49d16d6cddcdc01bbe9fe54f78751d7e2c0370f14e6fd6e6ce85eb4f5b3c74077f3a29bd7cb2f1911f127acb1a17b4e5393ea763b7a010d704505eca19820cdb2bcec5dc369cff43dcf04b2b557f885be55ca10cc08db33a3dc92ed1ce52008bdce100aed000000000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x1, 0x9, 0x7, 0x9}, 0x10, r6, r3, 0x2, 0x0, &(0x7f0000000a00)=[{0x1, 0x5, 0x6, 0x6}, {0x0, 0x4, 0x8, 0x3}], 0x10, 0x7}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xef84f000) syz_ublk_setup_io_uring(0x4afc, 0x0, 0x0, 0x0, 0x0) shmdt(0x0) write(0xffffffffffffffff, &(0x7f0000000040)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./nfsd_dir/threads\x00', 0x2, 0x0) read$FUSE(r8, 0x0, 0x3c) 1.048353149s ago: executing program 1 (id=284): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r1], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) write(r0, &(0x7f0000000540)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38) write(r3, &(0x7f0000000340)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400190008000200010101010500040040000000", 0x60) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="e00000000206010800000000000000000000000014fb0e8d3fd971b651000000050015000c000000050005000a000000050001000700000005000400000000000900020083a870ac0000000012000300686173683a6e65746c706f7274000000"], 0x60}}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f00000004c0)={0x8f, 0x0, 0x2}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r9, &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x1}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) symlink(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./file0\x00') r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_NMI(r10, 0xae9a) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x6) syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@textreal={0x8, &(0x7f0000000280)="66b9800000c00f326635000800000f30ec66b9800000c00f326635001000000f300f01c2dad8de611f66b9800000c00f326635002000000f300400660f38815341ba2000ecd3ec", 0x47}], 0x1, 0x11, 0x0, 0x0) 976.504307ms ago: executing program 4 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4806}, 0x0) listen(0xffffffffffffffff, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 305.128189ms ago: executing program 1 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x4000001) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, &(0x7f0000000640)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') r2 = accept(r1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[], 0x70}}, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 245.333419ms ago: executing program 0 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000280)=""/221, 0xdd}], 0x3, 0x0, 0x0, 0x8dff}, 0x10001) 210.820569ms ago: executing program 0 (id=288): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb31cc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1c1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000000)=0xb, 0x4) bind$llc(r3, &(0x7f0000000240)={0x1a, 0x0, 0x6, 0x54, 0xc6, 0x0, @link_local}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000006840)='./file0\x00', 0x0, 0x3a84821, 0x0) getdents(r5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x9, 0x8}, {0x5, 0x9, [0x100, 0x8000]}}}}, 0x15) 152.25231ms ago: executing program 1 (id=289): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002680)='memory.stat\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioperm(0x4, 0x8, 0x5) unshare(0x22020600) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) fdatasync(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000002740)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000026c0)={'netdevsim0\x00', &(0x7f0000002700)=@ethtool_pauseparam={0x27, 0xffffffff, 0xff}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0xcac) 17.572067ms ago: executing program 4 (id=290): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaabb08004500001c0000000004019078fffffffeac141439e000907800660000"], 0x0) r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6acd, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022180000000501150021ff66010729d009009595b3"], 0x0}, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x88ac0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1b4, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xbab, @private0, 0xf}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @local, 0x7}}}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x755}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x102, 0x3, "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"}]}, @TIPC_NLA_MON={0x4}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20048810}, 0x880) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0x22, 0xa6, {0xa6, 0x8, "bb3b4840e9d8ea12256401f35856438b809488eb18ac900a8f21362d543efa029f95156fc9c5bc1346cc9677a60ecaaf3910a2fc1a223ba5acb2218d656c7cae2318d5fb71a343981c68f6a9672fea0c732eef73331f8de2305b335a935576a0addd6adb07fc347904dad18825168f37e53add7caddcb3ebca19f14016f5071191f480f355781aa04943917d2bff3c530a6129777e9c5cc2137aeac3538f9da2f8fccd27"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c45}}}, &(0x7f0000000840)={0x34, &(0x7f0000000640)={0x20, 0x12, 0x89, "050750b717e93829f153497e1b13ca878d1a2a8cd634b068981cadda8eb3bcd769e8bd75ba0cbb6d3497cf4ed2d600703d08be5e7225f369cf90eefa147a829810d92e2e80eabf9ff3811ffaa9c7428af3479f07f53e3d1e17a863276ab795e65c9d7f7e423f78c32636567ed4e3ecbb967a1ba43676c290c65cceb257ed88baf81c0dc59f01cfe441"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0xa}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "16ad3f7c104ee9962e1ae967807ac65ad76f4de1fc5149b0eaec660ff417c1470a7ca244ada9b35ea1a9dac009a91b"}}) syz_usb_disconnect(r2) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r5, 0x0, 0x0) 0s ago: executing program 1 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x4000007, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) socket(0xa, 0x1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000600)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x10}, 0x4811) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='usbip-vudc.0', 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a3000000000091717e732bc22b3aa265b5d7b7526ed7e00010073797a3000000000140003800800014000000000080002400000000014000000"], 0x68}}, 0x0) kernel console output (not intermixed with test programs): 52004][ T31] audit: type=1400 audit(1792006185.488:160): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.954855][ T31] audit: type=1400 audit(1792006185.488:161): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="gadgetfs" ino=8231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.960239][ T31] audit: type=1400 audit(1792006185.498:162): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.034444][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.064897][ T5608] Bluetooth: hci2: command tx timeout [ 76.064929][ T5608] Bluetooth: hci3: command tx timeout [ 76.100823][ T5598] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.123362][ T5597] veth0_macvtap: entered promiscuous mode [ 76.130948][ T52] Bluetooth: hci1: command tx timeout [ 76.138732][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.165461][ T5597] veth1_macvtap: entered promiscuous mode [ 76.181785][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.181804][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.206527][ T52] Bluetooth: hci4: command tx timeout [ 76.257555][ T5789] FAULT_INJECTION: forcing a failure. [ 76.257555][ T5789] name failslab, interval 1, probability 0, space 0, times 1 [ 76.257604][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 76.257626][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 76.257643][ T5789] Call Trace: [ 76.257650][ T5789] [ 76.257658][ T5789] dump_stack_lvl+0x100/0x190 [ 76.257693][ T5789] should_fail_ex.cold+0x5/0xa [ 76.257718][ T5789] should_failslab+0xc2/0x120 [ 76.257747][ T5789] __kmalloc_cache_noprof+0x91/0x6d0 [ 76.257770][ T5789] ? configfs_write_iter+0x388/0x4e0 [ 76.257798][ T5789] configfs_write_iter+0x388/0x4e0 [ 76.257824][ T5789] vfs_write+0x6af/0x1050 [ 76.257849][ T5789] ? __pfx_configfs_write_iter+0x10/0x10 [ 76.257872][ T5789] ? __pfx_vfs_write+0x10/0x10 [ 76.257891][ T5789] ? find_held_lock+0x2b/0x80 [ 76.257935][ T5789] ksys_write+0x12a/0x250 [ 76.257956][ T5789] ? __pfx_ksys_write+0x10/0x10 [ 76.257986][ T5789] do_syscall_64+0x123/0x790 [ 76.258015][ T5789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.258034][ T5789] RIP: 0033:0x7f717c59e2d9 [ 76.258051][ T5789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.258072][ T5789] RSP: 002b:00007f717d4fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.258093][ T5789] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59e2d9 [ 76.258105][ T5789] RDX: 0000000000000018 RSI: 0000200000000440 RDI: 0000000000000004 [ 76.258116][ T5789] RBP: 00007f717d4fe090 R08: 0000000000000000 R09: 0000000000000000 [ 76.258127][ T5789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.258138][ T5789] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffffa5d1b28 [ 76.258166][ T5789] [ 76.288405][ T52] Bluetooth: hci0: command tx timeout [ 76.313189][ T1499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.326672][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.326692][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.342014][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.345035][ T1499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.390477][ T5704] nintendo 0005:057E:2017.0001: unbalanced collection at end of report description [ 76.397000][ T5704] nintendo 0005:057E:2017.0001: HID parse failed [ 76.400621][ T5704] nintendo 0005:057E:2017.0001: probe - fail = -22 [ 76.400690][ T5704] nintendo 0005:057E:2017.0001: probe with driver nintendo failed with error -22 [ 76.418830][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.426001][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.426043][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.599059][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.599079][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.604235][ T5596] veth0_vlan: entered promiscuous mode [ 76.651563][ T5596] veth1_vlan: entered promiscuous mode [ 76.722422][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.722441][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.745357][ T999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.745509][ T999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.745788][ T999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.747474][ T999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.783113][ T5796] FAULT_INJECTION: forcing a failure. [ 76.783113][ T5796] name failslab, interval 1, probability 0, space 0, times 0 [ 76.783140][ T5796] CPU: 0 UID: 0 PID: 5796 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 76.783159][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 76.783170][ T5796] Call Trace: [ 76.783176][ T5796] [ 76.783183][ T5796] dump_stack_lvl+0x100/0x190 [ 76.783213][ T5796] should_fail_ex.cold+0x5/0xa [ 76.783239][ T5796] should_failslab+0xc2/0x120 [ 76.783261][ T5796] __kmalloc_noprof+0xfc/0x840 [ 76.783282][ T5796] ? rcu_is_watching+0x13/0xc0 [ 76.783307][ T5796] ? tomoyo_realpath_from_path+0xb6/0x690 [ 76.783340][ T5796] tomoyo_realpath_from_path+0xb6/0x690 [ 76.783372][ T5796] tomoyo_path_number_perm+0x23c/0x580 [ 76.783394][ T5796] ? tomoyo_path_number_perm+0x22e/0x580 [ 76.783417][ T5796] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 76.783446][ T5796] ? __lock_acquire+0x5c0/0x1f40 [ 76.783479][ T5796] ? __fget_files+0x34/0x3d0 [ 76.783504][ T5796] ? find_held_lock+0x2b/0x80 [ 76.783527][ T5796] ? hook_file_ioctl_common+0x140/0x440 [ 76.783552][ T5796] ? __fget_files+0x21f/0x3d0 [ 76.783581][ T5796] security_file_ioctl+0xd3/0x230 [ 76.783606][ T5796] __x64_sys_ioctl+0xb7/0x210 [ 76.783632][ T5796] do_syscall_64+0x123/0x790 [ 76.783661][ T5796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.783682][ T5796] RIP: 0033:0x7f717c59e2d9 [ 76.783697][ T5796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.783714][ T5796] RSP: 002b:00007f717d4fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.783732][ T5796] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59e2d9 [ 76.783744][ T5796] RDX: 0000000000000000 RSI: 000000000000af02 RDI: 0000000000000003 [ 76.783756][ T5796] RBP: 00007f717d4fe090 R08: 0000000000000000 R09: 0000000000000000 [ 76.783769][ T5796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.783780][ T5796] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffffa5d1b28 [ 76.783807][ T5796] [ 76.783840][ T5796] ERROR: Out of memory at tomoyo_realpath_from_path. [ 76.858307][ T5802] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 76.864947][ T5596] veth0_macvtap: entered promiscuous mode [ 77.216901][ T5596] veth1_macvtap: entered promiscuous mode [ 77.267675][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.267698][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.381549][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.455573][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.478021][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.478039][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.517486][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.613819][ T5811] tipc: Started in network mode [ 77.613842][ T5811] tipc: Node identity 7f000001, cluster identity 4711 [ 77.630552][ T5811] tipc: New replicast peer: 127.0.0.2 [ 77.638576][ T5811] tipc: Enabled bearer , priority 10 [ 77.765566][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.765587][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.880225][ T5819] random: crng reseeded on system resumption [ 78.135962][ T52] Bluetooth: hci3: command tx timeout [ 78.135993][ T52] Bluetooth: hci2: command tx timeout [ 78.216302][ T5608] Bluetooth: hci1: command tx timeout [ 78.216345][ T148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.216379][ T148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.216410][ T148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.296049][ T52] Bluetooth: hci4: command tx timeout [ 78.366437][ T52] Bluetooth: hci0: command tx timeout [ 78.435124][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.435139][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.618068][ T5832] loop6: detected capacity change from 0 to 2640 [ 78.619322][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619361][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619386][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619411][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619434][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619474][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619524][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619548][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619560][ T5832] ldm_validate_partition_table(): Disk read failed. [ 78.619581][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619604][ T5832] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.619641][ T5832] Dev loop6: unable to read RDB block 0 [ 78.619810][ T5832] loop6: unable to read partition table [ 78.619989][ T5832] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 78.662334][ T5711] tipc: Node number set to 2130706433 [ 79.031582][ T4969] ldm_validate_partition_table(): Disk read failed. [ 79.031642][ T4969] Dev loop6: unable to read RDB block 0 [ 79.031994][ T4969] loop6: unable to read partition table [ 79.161513][ T5843] netlink: 131 bytes leftover after parsing attributes in process `syz.2.14'. [ 79.993564][ T59] IPVS: starting estimator thread 0... [ 80.153994][ T5853] IPVS: using max 32 ests per chain, 76800 per kthread [ 81.134527][ T31] kauditd_printk_skb: 93 callbacks suppressed [ 81.134567][ T31] audit: type=1400 audit(1792006190.228:256): avc: denied { write } for pid=5849 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.227612][ T31] audit: type=1400 audit(1792006190.768:257): avc: denied { allowed } for pid=5856 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.233442][ T31] audit: type=1400 audit(1792006190.768:258): avc: denied { create } for pid=5856 comm="syz.2.18" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.322450][ T5870] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18'. [ 81.688964][ T1149] IPVS: starting estimator thread 0... [ 81.730811][ T31] audit: type=1400 audit(1792006191.268:259): avc: denied { mount } for pid=5856 comm="syz.2.18" name="/" dev="overlay" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.731279][ T30] cfg80211: failed to load regulatory.db [ 81.863935][ T5871] IPVS: using max 45 ests per chain, 108000 per kthread [ 81.920212][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 81.920336][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.954751][ T31] audit: type=1400 audit(1792006191.458:260): avc: denied { ioctl } for pid=5872 comm="syz.3.20" path="socket:[9252]" dev="sockfs" ino=9252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.954807][ T31] audit: type=1400 audit(1792006191.458:261): avc: denied { write } for pid=5876 comm="syz.4.21" laddr=::1 lport=255 faddr=::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.954846][ T31] audit: type=1400 audit(1792006191.458:262): avc: denied { create } for pid=5876 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.954881][ T31] audit: type=1400 audit(1792006191.468:263): avc: denied { ioctl } for pid=5876 comm="syz.4.21" path="socket:[7819]" dev="sockfs" ino=7819 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.079971][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.137608][ T31] audit: type=1400 audit(1792006191.678:264): avc: denied { write } for pid=5881 comm="syz.1.23" name="userio" dev="devtmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.034988][ T31] audit: type=1400 audit(1792006192.568:265): avc: denied { mount } for pid=5886 comm="syz.2.22" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 83.181887][ T5875] ovs-system: entered promiscuous mode [ 83.182683][ T5861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 83.182756][ T5861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 83.242511][ T5889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5889 comm=syz.1.23 [ 83.314389][ T5894] phram: not enough arguments [ 83.416867][ T5894] dummy0: entered promiscuous mode [ 83.440006][ T52] Bluetooth: Unexpected continuation frame (len 164) [ 83.605481][ T5902] No such timeout policy "syz1" [ 83.721931][ T5903] FAULT_INJECTION: forcing a failure. [ 83.721931][ T5903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.724950][ T5903] CPU: 1 UID: 0 PID: 5903 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT(full) [ 83.724979][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 83.724991][ T5903] Call Trace: [ 83.724999][ T5903] [ 83.725008][ T5903] dump_stack_lvl+0x100/0x190 [ 83.725042][ T5903] should_fail_ex.cold+0x5/0xa [ 83.725072][ T5903] _copy_to_user+0x32/0xd0 [ 83.725101][ T5903] simple_read_from_buffer+0xcb/0x170 [ 83.725132][ T5903] proc_fail_nth_read+0x1af/0x230 [ 83.725163][ T5903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.725191][ T5903] ? rw_verify_area+0xce/0x6d0 [ 83.725211][ T5903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.725239][ T5903] vfs_read+0x1e4/0xb40 [ 83.725263][ T5903] ? lock_acquire+0x1d1/0x380 [ 83.725286][ T5903] ? __fget_files+0x34/0x3d0 [ 83.725312][ T5903] ? __pfx_vfs_read+0x10/0x10 [ 83.725333][ T5903] ? find_held_lock+0x2b/0x80 [ 83.725362][ T5903] ? __fget_files+0x215/0x3d0 [ 83.725394][ T5903] ? __fget_files+0x21f/0x3d0 [ 83.725428][ T5903] ksys_read+0x12a/0x250 [ 83.725451][ T5903] ? __pfx_ksys_read+0x10/0x10 [ 83.725482][ T5903] do_syscall_64+0x123/0x790 [ 83.725518][ T5903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.725539][ T5903] RIP: 0033:0x7f717c55eb0e [ 83.725557][ T5903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.725573][ T5903] RSP: 002b:00007f717d4dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.725593][ T5903] RAX: ffffffffffffffda RBX: 00007f717d4dd6c0 RCX: 00007f717c55eb0e [ 83.725607][ T5903] RDX: 000000000000000f RSI: 00007f717d4dd0a0 RDI: 0000000000000003 [ 83.725619][ T5903] RBP: 00007f717d4dd090 R08: 0000000000000000 R09: 0000000000000000 [ 83.725630][ T5903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.725642][ T5903] R13: 00007f717c826128 R14: 00007f717c826090 R15: 00007ffffa5d1b28 [ 83.725671][ T5903] [ 84.168210][ T5793] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.346017][ T5793] usb 5-1: Using ep0 maxpacket: 32 [ 84.502247][ T5793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.502342][ T5793] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 84.527730][ T5793] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 84.527755][ T5793] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 84.527774][ T5793] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 84.527793][ T5793] usb 5-1: config 128 has no interface number 0 [ 84.527918][ T5793] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 84.527943][ T5793] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.527965][ T5793] usb 5-1: config 128 interface 127 has no altsetting 0 [ 84.976208][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.976237][ T5793] usb 5-1: Product: syz [ 84.976251][ T5793] usb 5-1: Manufacturer: syz [ 84.976265][ T5793] usb 5-1: SerialNumber: syz [ 86.322063][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 86.322081][ T31] audit: type=1400 audit(1792006195.858:285): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.581038][ T5933] FAULT_INJECTION: forcing a failure. [ 86.581038][ T5933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.581069][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(full) [ 86.581091][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 86.581102][ T5933] Call Trace: [ 86.581109][ T5933] [ 86.581117][ T5933] dump_stack_lvl+0x100/0x190 [ 86.581149][ T5933] should_fail_ex.cold+0x5/0xa [ 86.581177][ T5933] _copy_to_user+0x32/0xd0 [ 86.581206][ T5933] simple_read_from_buffer+0xcb/0x170 [ 86.581236][ T5933] proc_fail_nth_read+0x1af/0x230 [ 86.581266][ T5933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.581296][ T5933] ? rw_verify_area+0xce/0x6d0 [ 86.581316][ T5933] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.581343][ T5933] vfs_read+0x1e4/0xb40 [ 86.581366][ T5933] ? lock_acquire+0x1d1/0x380 [ 86.581388][ T5933] ? __fget_files+0x34/0x3d0 [ 86.581414][ T5933] ? __pfx_vfs_read+0x10/0x10 [ 86.581434][ T5933] ? find_held_lock+0x2b/0x80 [ 86.581461][ T5933] ? __fget_files+0x215/0x3d0 [ 86.581492][ T5933] ? __fget_files+0x21f/0x3d0 [ 86.581527][ T5933] ksys_read+0x12a/0x250 [ 86.581550][ T5933] ? __pfx_ksys_read+0x10/0x10 [ 86.581581][ T5933] do_syscall_64+0x123/0x790 [ 86.581611][ T5933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.581632][ T5933] RIP: 0033:0x7f8c4bf5eb0e [ 86.581648][ T5933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.581665][ T5933] RSP: 002b:00007f8c4ceeafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.581684][ T5933] RAX: ffffffffffffffda RBX: 00007f8c4ceeb6c0 RCX: 00007f8c4bf5eb0e [ 86.581697][ T5933] RDX: 000000000000000f RSI: 00007f8c4ceeb0a0 RDI: 0000000000000003 [ 86.581708][ T5933] RBP: 00007f8c4ceeb090 R08: 0000000000000000 R09: 0000000000000000 [ 86.581720][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.581731][ T5933] R13: 00007f8c4c226038 R14: 00007f8c4c225fa0 R15: 00007ffe36ae0328 [ 86.581760][ T5933] [ 86.705717][ T5793] usb 5-1: USB disconnect, device number 2 [ 86.790070][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.916002][ T31] audit: type=1400 audit(1792006196.448:286): avc: denied { map_create } for pid=5935 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.919826][ T31] audit: type=1400 audit(1792006196.458:287): avc: denied { map_read map_write } for pid=5935 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.922222][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.981457][ T31] audit: type=1400 audit(1792006196.518:288): avc: denied { prog_load } for pid=5935 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.029464][ T31] audit: type=1400 audit(1792006196.568:289): avc: denied { prog_run } for pid=5935 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 87.055145][ T31] audit: type=1400 audit(1792006196.588:290): avc: denied { mount } for pid=5941 comm="syz.1.38" name="/" dev="autofs" ino=9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 87.122442][ T5945] FAULT_INJECTION: forcing a failure. [ 87.122442][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 87.122473][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(full) [ 87.122492][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 87.122503][ T5945] Call Trace: [ 87.122510][ T5945] [ 87.122517][ T5945] dump_stack_lvl+0x100/0x190 [ 87.122548][ T5945] should_fail_ex.cold+0x5/0xa [ 87.122574][ T5945] should_failslab+0xc2/0x120 [ 87.122601][ T5945] kmem_cache_alloc_noprof+0x92/0x6a0 [ 87.122626][ T5945] ? do_getname+0x35/0x390 [ 87.122649][ T5945] do_getname+0x35/0x390 [ 87.122681][ T5945] user_path_at+0x26/0x60 [ 87.122706][ T5945] __x64_sys_mount+0x1fb/0x310 [ 87.122728][ T5945] ? __pfx___x64_sys_mount+0x10/0x10 [ 87.122757][ T5945] do_syscall_64+0x123/0x790 [ 87.122786][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.122806][ T5945] RIP: 0033:0x7fb77e99e2d9 [ 87.122823][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.122839][ T5945] RSP: 002b:00007fb77f948028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.122857][ T5945] RAX: ffffffffffffffda RBX: 00007fb77ec25fa0 RCX: 00007fb77e99e2d9 [ 87.122871][ T5945] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 87.122882][ T5945] RBP: 00007fb77f948090 R08: 0000000000000000 R09: 0000000000000000 [ 87.122893][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.122904][ T5945] R13: 00007fb77ec26038 R14: 00007fb77ec25fa0 R15: 00007fff19645848 [ 87.122933][ T5945] [ 87.135171][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 87.195989][ T31] audit: type=1400 audit(1792006196.708:291): avc: denied { egress } for pid=5793 comm="kworker/0:7" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 87.196040][ T31] audit: type=1400 audit(1792006196.708:292): avc: denied { sendto } for pid=5793 comm="kworker/0:7" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 87.337721][ T4931] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.487310][ T4931] usb 5-1: device descriptor read/64, error -71 [ 87.549145][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'. [ 88.078075][ T5965] No such timeout policy "syz1" [ 88.666600][ T4931] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.954906][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 90.035944][ T4931] usb 5-1: device descriptor read/64, error -71 [ 90.166811][ T4931] usb usb5-port1: attempt power cycle [ 90.556313][ T5719] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.560447][ T31] audit: type=1400 audit(1792006200.098:293): avc: denied { mounton } for pid=5987 comm="syz.0.49" path="/6/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 90.574947][ T5988] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 90.592787][ T5986] Zero length message leads to an empty skb [ 90.636814][ T5992] FAULT_INJECTION: forcing a failure. [ 90.636814][ T5992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.636843][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 90.636865][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 90.636876][ T5992] Call Trace: [ 90.636882][ T5992] [ 90.636890][ T5992] dump_stack_lvl+0x100/0x190 [ 90.636922][ T5992] should_fail_ex.cold+0x5/0xa [ 90.636949][ T5992] _copy_from_user+0x2e/0xd0 [ 90.636977][ T5992] copy_msghdr_from_user+0x9f/0x4c0 [ 90.637003][ T5992] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.637036][ T5992] ? lock_acquire+0x1d1/0x380 [ 90.637059][ T5992] ? get_pid_task+0x2a/0x250 [ 90.637088][ T5992] ___sys_sendmsg+0x106/0x1e0 [ 90.637114][ T5992] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.637139][ T5992] ? get_pid_task+0x106/0x250 [ 90.637175][ T5992] ? find_held_lock+0x2b/0x80 [ 90.637222][ T5992] __sys_sendmsg+0x160/0x210 [ 90.637242][ T5992] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.637279][ T5992] do_syscall_64+0x123/0x790 [ 90.637307][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.637326][ T5992] RIP: 0033:0x7f717c59e2d9 [ 90.637342][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.637358][ T5992] RSP: 002b:00007f717d4fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.637383][ T5992] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59e2d9 [ 90.637396][ T5992] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 90.637407][ T5992] RBP: 00007f717d4fe090 R08: 0000000000000000 R09: 0000000000000000 [ 90.637418][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.637429][ T5992] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffffa5d1b28 [ 90.637458][ T5992] [ 90.720300][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 90.734740][ T5719] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 91.337257][ T5719] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 91.337285][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.337303][ T5719] usb 3-1: config 0 has no interface number 0 [ 91.337341][ T5719] usb 3-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.425644][ T5995] comedi comedi3: board detection failed [ 91.438199][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.438225][ T5719] usb 3-1: Product: syz [ 91.438239][ T5719] usb 3-1: Manufacturer: syz [ 91.438254][ T5719] usb 3-1: SerialNumber: syz [ 91.470050][ T5719] usb 3-1: config 0 descriptor?? [ 91.518932][ T5995] bridge0: port 3(netdevsim0) entered blocking state [ 91.518984][ T5995] bridge0: port 3(netdevsim0) entered disabled state [ 91.519135][ T5995] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 91.520651][ T5719] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 91.520995][ T5719] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 91.542953][ T6003] jffs2: notice: (6003) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.557087][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 91.557104][ T31] audit: type=1400 audit(1792006201.088:295): avc: denied { write } for pid=6002 comm="syz.3.54" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.557205][ T5711] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.558668][ T31] audit: type=1400 audit(1792006201.098:296): avc: denied { add_name } for pid=6002 comm="syz.3.54" name="sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.558967][ T31] audit: type=1400 audit(1792006201.098:297): avc: denied { create } for pid=6002 comm="syz.3.54" name="sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 91.688456][ T31] audit: type=1400 audit(1792006201.178:298): avc: denied { write } for pid=6002 comm="syz.3.54" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.692420][ T31] audit: type=1400 audit(1792006201.228:299): avc: denied { create } for pid=6002 comm="syz.3.54" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.701365][ T5996] netlink: 'syz.1.53': attribute type 10 has an invalid length. [ 91.726136][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 91.726250][ T31] audit: type=1400 audit(1792006201.238:300): avc: denied { read write open } for pid=6002 comm="syz.3.54" path="/10/file0/file0" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.728116][ T5711] usb 1-1: New USB device found, idVendor=2466, idProduct=802c, bcdDevice= 0.40 [ 91.735018][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.735044][ T5711] usb 1-1: Product: syz [ 91.735057][ T5711] usb 1-1: Manufacturer: syz [ 91.735072][ T5711] usb 1-1: SerialNumber: syz [ 91.752645][ T5995] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 91.757564][ T5995] bridge0: port 3(netdevsim0) entered blocking state [ 91.758042][ T5995] bridge0: port 3(netdevsim0) entered forwarding state [ 91.792711][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 91.847134][ T5996] bridge0: port 3(netdevsim0) entered disabled state [ 91.847621][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.848195][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.931021][ T5996] bridge0: port 3(netdevsim0) entered blocking state [ 91.931140][ T5996] bridge0: port 3(netdevsim0) entered forwarding state [ 91.931722][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.931831][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.932034][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.932140][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.097765][ T5996] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.109227][ T31] audit: type=1400 audit(1792006201.648:301): avc: denied { create } for pid=5987 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 92.110827][ T31] audit: type=1400 audit(1792006201.648:302): avc: denied { create } for pid=5987 comm="syz.0.49" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.111361][ T31] audit: type=1400 audit(1792006201.648:303): avc: denied { map } for pid=5987 comm="syz.0.49" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.111635][ T31] audit: type=1400 audit(1792006201.648:304): avc: denied { read write } for pid=5987 comm="syz.0.49" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.735584][ T5711] usb 1-1: USB disconnect, device number 2 [ 92.819394][ T6019] FAULT_INJECTION: forcing a failure. [ 92.819394][ T6019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.819424][ T6019] CPU: 0 UID: 0 PID: 6019 Comm: syz.4.57 Not tainted syzkaller #0 PREEMPT(full) [ 92.819446][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 92.819456][ T6019] Call Trace: [ 92.819463][ T6019] [ 92.819471][ T6019] dump_stack_lvl+0x100/0x190 [ 92.819502][ T6019] should_fail_ex.cold+0x5/0xa [ 92.819529][ T6019] _copy_from_user+0x2e/0xd0 [ 92.819557][ T6019] copy_msghdr_from_user+0x9f/0x4c0 [ 92.819584][ T6019] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.819617][ T6019] ? lock_acquire+0x1d1/0x380 [ 92.819638][ T6019] ? get_pid_task+0x2a/0x250 [ 92.819667][ T6019] ___sys_sendmsg+0x106/0x1e0 [ 92.819693][ T6019] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.819716][ T6019] ? get_pid_task+0x106/0x250 [ 92.819749][ T6019] ? find_held_lock+0x2b/0x80 [ 92.819793][ T6019] __sys_sendmsg+0x160/0x210 [ 92.819814][ T6019] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.819849][ T6019] do_syscall_64+0x123/0x790 [ 92.819877][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.819896][ T6019] RIP: 0033:0x7ff790b9e2d9 [ 92.819911][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.819928][ T6019] RSP: 002b:00007ff791a1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.819944][ T6019] RAX: ffffffffffffffda RBX: 00007ff790e25fa0 RCX: 00007ff790b9e2d9 [ 92.819956][ T6019] RDX: 0000000000044000 RSI: 0000200000000140 RDI: 0000000000000004 [ 92.819968][ T6019] RBP: 00007ff791a1b090 R08: 0000000000000000 R09: 0000000000000000 [ 92.819982][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.819993][ T6019] R13: 00007ff790e26038 R14: 00007ff790e25fa0 R15: 00007ffec6138b98 [ 92.820020][ T6019] [ 94.626869][ T5704] usb 3-1: USB disconnect, device number 2 [ 94.844893][ T6030] FAULT_INJECTION: forcing a failure. [ 94.844893][ T6030] name failslab, interval 1, probability 0, space 0, times 0 [ 94.844925][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.0.59 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.844952][ T6030] Tainted: [L]=SOFTLOCKUP [ 94.844959][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 94.844970][ T6030] Call Trace: [ 94.844977][ T6030] [ 94.844984][ T6030] dump_stack_lvl+0x100/0x190 [ 94.845018][ T6030] should_fail_ex.cold+0x5/0xa [ 94.845047][ T6030] should_failslab+0xc2/0x120 [ 94.845075][ T6030] __kmalloc_noprof+0xfc/0x840 [ 94.845098][ T6030] ? rcu_is_watching+0x13/0xc0 [ 94.845125][ T6030] ? tomoyo_realpath_from_path+0xb6/0x690 [ 94.845161][ T6030] tomoyo_realpath_from_path+0xb6/0x690 [ 94.845194][ T6030] tomoyo_path_number_perm+0x23c/0x580 [ 94.845214][ T6030] ? tomoyo_path_number_perm+0x22e/0x580 [ 94.845236][ T6030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 94.845267][ T6030] ? __lock_acquire+0x5c0/0x1f40 [ 94.845296][ T6030] ? __fget_files+0x34/0x3d0 [ 94.845319][ T6030] ? find_held_lock+0x2b/0x80 [ 94.845342][ T6030] ? hook_file_ioctl_common+0x140/0x440 [ 94.845364][ T6030] ? __fget_files+0x21f/0x3d0 [ 94.845389][ T6030] security_file_ioctl+0xd3/0x230 [ 94.845413][ T6030] __x64_sys_ioctl+0xb7/0x210 [ 94.845434][ T6030] do_syscall_64+0x123/0x790 [ 94.845460][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.845476][ T6030] RIP: 0033:0x7f8c4bf9e2d9 [ 94.845490][ T6030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.845504][ T6030] RSP: 002b:00007f8c4ceeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.845519][ T6030] RAX: ffffffffffffffda RBX: 00007f8c4c225fa0 RCX: 00007f8c4bf9e2d9 [ 94.845530][ T6030] RDX: 9999999999999999 RSI: 0000000080047437 RDI: 0000000000000003 [ 94.845540][ T6030] RBP: 00007f8c4ceeb090 R08: 0000000000000000 R09: 0000000000000000 [ 94.845549][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.845558][ T6030] R13: 00007f8c4c226038 R14: 00007f8c4c225fa0 R15: 00007ffe36ae0328 [ 94.845586][ T6030] [ 94.845597][ T6030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 96.139482][ T5712] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 96.229301][ T6046] CIFS: Attempting to mount //127.0.0.1/share [ 96.231544][ T6046] CIFS: VFS: Error connecting to socket. Aborting operation. [ 96.231608][ T6046] CIFS: VFS: cifs_mount failed w/return code = -111 [ 96.995987][ T5712] usb 2-1: Invalid ep0 maxpacket: 32 [ 97.332933][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 97.332954][ T31] audit: type=1400 audit(1792006206.818:322): avc: denied { read append } for pid=6052 comm="syz.4.68" name="sg0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.332996][ T31] audit: type=1400 audit(1792006206.818:323): avc: denied { open } for pid=6052 comm="syz.4.68" path="/dev/sg0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.333036][ T31] audit: type=1400 audit(1792006206.818:324): avc: denied { map } for pid=6052 comm="syz.4.68" path="/dev/sg0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.333075][ T31] audit: type=1400 audit(1792006206.818:325): avc: denied { write execute } for pid=6052 comm="syz.4.68" path="/dev/sg0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.345482][ T5712] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 97.464665][ T6056] Bluetooth: MGMT ver 1.23 [ 97.485914][ T31] audit: type=1400 audit(1792006206.998:326): avc: denied { write } for pid=6055 comm="syz.2.69" path="socket:[9606]" dev="sockfs" ino=9606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.493794][ T31] audit: type=1400 audit(1792006207.028:327): avc: denied { write } for pid=6057 comm="syz.0.70" name="subsystems" dev="configfs" ino=2762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.508925][ T31] audit: type=1400 audit(1792006207.048:328): avc: denied { write } for pid=6057 comm="syz.0.70" name="namespaces" dev="configfs" ino=9610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.514293][ T31] audit: type=1400 audit(1792006207.048:329): avc: denied { write } for pid=6061 comm="syz.3.67" name="functions" dev="configfs" ino=7464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.520385][ T6058] nvmet: adding nsid 1 to subsystem testsubsys [ 97.539138][ T6062] UDC core: g1: couldn't find an available UDC or it's busy [ 97.546266][ T31] audit: type=1400 audit(1792006207.078:330): avc: denied { write } for pid=6057 comm="syz.0.70" name="ports" dev="configfs" ino=2763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.559392][ T31] audit: type=1400 audit(1792006207.098:331): avc: denied { setattr } for pid=6057 comm="syz.0.70" name="param_inline_data_size" dev="configfs" ino=9623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 97.562225][ T6062] Config c/1 of g1 needs at least one function. [ 97.562484][ T6062] udc dummy_udc.0: failed to start g1: -22 [ 97.562508][ T6062] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 97.584390][ T6062] UDC core: g1: couldn't find an available UDC or it's busy [ 97.649981][ T5712] usb 2-1: Invalid ep0 maxpacket: 32 [ 97.650209][ T5712] usb usb2-port1: attempt power cycle [ 97.702049][ T6058] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 97.735992][ T5704] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.852169][ T6054] netlink: 88 bytes leftover after parsing attributes in process `syz.4.68'. [ 97.886981][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 97.887627][ T5704] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 97.888448][ T5704] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 97.888463][ T5704] usb 3-1: config 2 has no interface number 0 [ 97.888484][ T5704] usb 3-1: config 2 interface 31 has no altsetting 0 [ 97.890191][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.890205][ T5704] usb 3-1: Product: syz [ 97.890213][ T5704] usb 3-1: Manufacturer: syz [ 97.890222][ T5704] usb 3-1: SerialNumber: syz [ 97.966287][ T6054] ======================================================= [ 97.966287][ T6054] WARNING: The mand mount option has been deprecated and [ 97.966287][ T6054] and is ignored by this kernel. Remove the mand [ 97.966287][ T6054] option from the mount to silence this warning. [ 97.966287][ T6054] ======================================================= [ 97.966574][ T6054] overlayfs: failed to resolve './file1/file0': -2 [ 98.103718][ T6068] tipc: Enabled bearer , priority 0 [ 98.110178][ T6068] syzkaller0: entered promiscuous mode [ 98.110217][ T6068] syzkaller0: entered allmulticast mode [ 98.114691][ T6069] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 98.164784][ T6069] tipc: Resetting bearer [ 98.178893][ T6067] tipc: Resetting bearer [ 98.203741][ T6067] tipc: Disabling bearer [ 98.705889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 99.582885][ T5704] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 99.621840][ T5690] usb 3-1: USB disconnect, device number 3 [ 100.706030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.888762][ T6102] netlink: 'syz.3.80': attribute type 10 has an invalid length. [ 100.889267][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.890306][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.946562][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.946671][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.946934][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.947068][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.035122][ T6102] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.711967][ T6107] No such timeout policy "syz1" [ 102.506612][ T6110] jffs2: notice: (6110) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 103.303576][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 103.303594][ T31] audit: type=1400 audit(1792006212.838:344): avc: denied { write } for pid=6108 comm="syz.3.86" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.369100][ T31] audit: type=1400 audit(1792006212.908:345): avc: denied { write } for pid=6108 comm="syz.3.86" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.464481][ T6127] No such timeout policy "syz1" [ 103.918960][ T6115] netlink: 'syz.4.85': attribute type 12 has an invalid length. [ 103.918981][ T6115] netlink: 'syz.4.85': attribute type 29 has an invalid length. [ 103.918993][ T6115] netlink: 148 bytes leftover after parsing attributes in process `syz.4.85'. [ 103.919016][ T6115] netlink: 59 bytes leftover after parsing attributes in process `syz.4.85'. [ 104.016571][ T5719] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.635931][ T5719] usb 2-1: device descriptor read/64, error -71 [ 104.977576][ T5719] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.103729][ T31] audit: type=1400 audit(1792006214.578:346): avc: denied { write } for pid=6138 comm="syz.4.90" name="core" dev="configfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.103909][ T31] audit: type=1400 audit(1792006214.588:347): avc: denied { write } for pid=6138 comm="syz.4.90" name="vlan0" dev="proc" ino=4026533842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 105.104041][ T31] audit: type=1400 audit(1792006214.598:348): avc: denied { write } for pid=6138 comm="syz.4.90" name="core" dev="configfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.104171][ T31] audit: type=1400 audit(1792006214.598:349): avc: denied { remove_name } for pid=6138 comm="syz.4.90" name="rd_mcp_0" dev="configfs" ino=9855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.104302][ T31] audit: type=1400 audit(1792006214.598:350): avc: denied { rmdir } for pid=6138 comm="syz.4.90" name="rd_mcp_0" dev="configfs" ino=9855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.219343][ T5719] usb 2-1: device descriptor read/64, error -71 [ 105.313282][ T31] audit: type=1400 audit(1792006214.848:351): avc: denied { create } for pid=6142 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.314544][ T31] audit: type=1400 audit(1792006214.848:352): avc: denied { read } for pid=6142 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.358272][ T5719] usb usb2-port1: attempt power cycle [ 105.470833][ T31] audit: type=1400 audit(1792006214.898:353): avc: denied { write } for pid=6142 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.609085][ T190] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.693789][ T6147] process 'syz.1.92' launched '/dev/fd/5' with NULL argv: empty string added [ 105.756434][ T190] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 105.757350][ T190] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.757368][ T190] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 105.760061][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.760075][ T190] usb 5-1: Product: syz [ 105.760083][ T190] usb 5-1: Manufacturer: syz [ 105.760092][ T190] usb 5-1: SerialNumber: syz [ 105.876355][ T5719] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 106.011415][ T5719] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 106.089282][ T5719] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 106.162788][ T5719] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.162884][ T5719] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.243118][ T190] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 106.279352][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.279447][ T5719] usb 2-1: Product: syz [ 106.279518][ T5719] usb 2-1: Manufacturer: syz [ 106.279555][ T5719] usb 2-1: SerialNumber: syz [ 106.961365][ T5719] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 107.067678][ T5719] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 107.067678][ T5719] Please send a copy of this message to and [ 107.937054][ T5712] usb 5-1: USB disconnect, device number 6 [ 107.974834][ T5712] usblp0: removed [ 108.146076][ T190] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 108.741297][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 108.741313][ T31] audit: type=1400 audit(1792006218.278:366): avc: denied { open } for pid=6167 comm="syz.4.95" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 108.782383][ T31] audit: type=1400 audit(1792006218.318:367): avc: denied { mounton } for pid=6167 comm="syz.4.95" path="/proc/62/task" dev="proc" ino=10527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 108.849839][ T190] usb 1-1: not running at top speed; connect to a high speed hub [ 108.849872][ T190] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 108.851864][ T190] usb 1-1: config 5 has an invalid interface number: 32 but max is 0 [ 108.851909][ T190] usb 1-1: config 5 has no interface number 0 [ 108.851936][ T190] usb 1-1: config 5 interface 32 has no altsetting 0 [ 108.855639][ T190] usb 1-1: string descriptor 0 read error: -22 [ 108.855813][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.916196][ T31] audit: type=1400 audit(1792006218.428:368): avc: denied { setopt } for pid=6173 comm="syz.2.97" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.380910][ T31] audit: type=1400 audit(1792006218.888:369): avc: denied { read } for pid=6173 comm="syz.2.97" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.382968][ T31] audit: type=1400 audit(1792006218.888:370): avc: denied { open } for pid=6173 comm="syz.2.97" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.411752][ T31] audit: type=1400 audit(1792006218.888:371): avc: denied { ioctl } for pid=6173 comm="syz.2.97" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0xf518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.710326][ T31] audit: type=1400 audit(1792006219.248:372): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.710519][ T31] audit: type=1400 audit(1792006219.248:373): avc: denied { search } for pid=5264 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.710693][ T31] audit: type=1400 audit(1792006219.248:374): avc: denied { search } for pid=5264 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.713920][ T31] audit: type=1400 audit(1792006219.248:375): avc: denied { read } for pid=5264 comm="dhcpcd" name="n30" dev="tmpfs" ino=1966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.723116][ T5719] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 109.840881][ T5719] usb 2-1: USB disconnect, device number 8 [ 110.213327][ T5690] usb 1-1: USB disconnect, device number 3 [ 110.260729][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.775624][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.812049][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.834345][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.853618][ T5712] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 110.950580][ T9] usb 4-1: config 0 descriptor?? [ 111.262741][ T5712] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 111.265442][ T5712] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 111.265474][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 111.265488][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.265502][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 111.265526][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 111.265547][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 111.265569][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 111.265590][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 111.265602][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 111.265791][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 111.265810][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 111.265895][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 111.265917][ T5712] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14385, setting to 1024 [ 111.265939][ T5712] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 111.265960][ T5712] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 111.441402][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.441427][ T5712] usb 5-1: Product: syz [ 111.441442][ T5712] usb 5-1: Manufacturer: syz [ 111.441455][ T5712] usb 5-1: SerialNumber: syz [ 111.477736][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.477862][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.478050][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.478144][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.478254][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.478409][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.478528][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.478642][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.478755][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.478847][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.478969][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.479104][ T6193] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.482274][ T5712] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 111.484000][ T5712] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 111.495660][ T5712] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 111.510320][ T5712] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 111.526956][ T5712] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 111.936957][ T5712] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.987290][ T6208] FAULT_INJECTION: forcing a failure. [ 111.987290][ T6208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.987325][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.0.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.987353][ T6208] Tainted: [L]=SOFTLOCKUP [ 111.987360][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 111.987371][ T6208] Call Trace: [ 111.987378][ T6208] [ 111.987386][ T6208] dump_stack_lvl+0x100/0x190 [ 111.987418][ T6208] should_fail_ex.cold+0x5/0xa [ 111.987447][ T6208] _copy_from_user+0x2e/0xd0 [ 111.987474][ T6208] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 111.987499][ T6208] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 111.987530][ T6208] do_sock_getsockopt+0x530/0x6e0 [ 111.987558][ T6208] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 111.987587][ T6208] ? __fget_files+0x34/0x3d0 [ 111.987614][ T6208] ? find_held_lock+0x2b/0x80 [ 111.987651][ T6208] ? __fget_files+0x21f/0x3d0 [ 111.987683][ T6208] __sys_getsockopt+0x148/0x260 [ 111.987709][ T6208] ? __x64_sys_getsockopt+0xbd/0x160 [ 111.987728][ T6208] __x64_sys_getsockopt+0xbd/0x160 [ 111.987766][ T6208] ? do_syscall_64+0xae/0x790 [ 111.987792][ T6208] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.987818][ T6208] do_syscall_64+0x123/0x790 [ 111.987847][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.987867][ T6208] RIP: 0033:0x7f8c4bf9e2d9 [ 111.987884][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.987902][ T6208] RSP: 002b:00007f8c4ceeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 111.987921][ T6208] RAX: ffffffffffffffda RBX: 00007f8c4c225fa0 RCX: 00007f8c4bf9e2d9 [ 111.987934][ T6208] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000003 [ 111.987945][ T6208] RBP: 00007f8c4ceeb090 R08: 0000200000000900 R09: 0000000000000000 [ 111.987957][ T6208] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 111.987969][ T6208] R13: 00007f8c4c226038 R14: 00007f8c4c225fa0 R15: 00007ffe36ae0328 [ 111.987996][ T6208] [ 112.210985][ T5712] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 112.212584][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.212612][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.231440][ T5712] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 112.231466][ T5712] usb 3-1: Manufacturer: syz [ 112.258601][ T5712] usb 3-1: config 0 descriptor?? [ 112.425870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 112.825902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.955871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.005865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.086175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.125868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.175862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.523193][ T1499] IPVS: starting estimator thread 0... [ 113.620753][ T6213] IPVS: using max 40 ests per chain, 96000 per kthread [ 113.653106][ T4931] usb 5-1: USB disconnect, device number 7 [ 113.713495][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 113.713587][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 113.734100][ T9] usb 4-1: USB disconnect, device number 2 [ 113.801345][ T4931] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 113.836743][ T4931] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 113.879893][ T4931] keyspan 5-1:1.0: device disconnected [ 114.016336][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 114.016353][ T31] audit: type=1400 audit(1792006223.558:385): avc: denied { write } for pid=6216 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.592985][ T5712] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 114.593043][ T5712] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 114.593064][ T5712] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 114.593110][ T5712] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 114.593201][ T5712] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 114.601240][ T5712] usb 3-1: USB disconnect, device number 4 [ 114.646490][ T52] Bluetooth: hci4: unexpected event 0x08 length: 7 > 4 [ 114.784478][ T6220] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 116.481173][ T31] audit: type=1400 audit(1792006225.978:386): avc: denied { setopt } for pid=6227 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.617570][ T31] audit: type=1400 audit(1792006226.148:387): avc: denied { remount } for pid=6227 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 116.703060][ T31] audit: type=1400 audit(1792006226.238:388): avc: denied { create } for pid=6243 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.743346][ T31] audit: type=1400 audit(1792006226.278:389): avc: denied { bind } for pid=6243 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.789261][ T31] audit: type=1400 audit(1792006226.328:390): avc: denied { setopt } for pid=6243 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 116.826478][ T31] audit: type=1400 audit(1792006226.358:391): avc: denied { accept } for pid=6243 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.357312][ T31] audit: type=1400 audit(1792006226.898:392): avc: denied { ioctl } for pid=6254 comm="syz.2.116" path="socket:[10663]" dev="sockfs" ino=10663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.359696][ T6256] FAULT_INJECTION: forcing a failure. [ 117.359696][ T6256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.359727][ T6256] CPU: 1 UID: 0 PID: 6256 Comm: syz.2.116 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.359754][ T6256] Tainted: [L]=SOFTLOCKUP [ 117.359761][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 117.359771][ T6256] Call Trace: [ 117.359778][ T6256] [ 117.359785][ T6256] dump_stack_lvl+0x100/0x190 [ 117.359817][ T6256] should_fail_ex.cold+0x5/0xa [ 117.359844][ T6256] _copy_from_user+0x2e/0xd0 [ 117.359871][ T6256] copy_msghdr_from_user+0x9f/0x4c0 [ 117.359897][ T6256] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 117.359929][ T6256] ? lock_acquire+0x1d1/0x380 [ 117.359950][ T6256] ? get_pid_task+0x2a/0x250 [ 117.359978][ T6256] ___sys_sendmsg+0x106/0x1e0 [ 117.360004][ T6256] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.360027][ T6256] ? get_pid_task+0x106/0x250 [ 117.360063][ T6256] ? find_held_lock+0x2b/0x80 [ 117.360108][ T6256] __sys_sendmsg+0x160/0x210 [ 117.360127][ T6256] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.360162][ T6256] do_syscall_64+0x123/0x790 [ 117.360191][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.360210][ T6256] RIP: 0033:0x7f830fd9e2d9 [ 117.360243][ T6256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.360260][ T6256] RSP: 002b:00007f8310bf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.360278][ T6256] RAX: ffffffffffffffda RBX: 00007f8310025fa0 RCX: 00007f830fd9e2d9 [ 117.360291][ T6256] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 117.360302][ T6256] RBP: 00007f8310bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 117.360313][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.360324][ T6256] R13: 00007f8310026038 R14: 00007f8310025fa0 R15: 00007fffd52ba9d8 [ 117.360352][ T6256] [ 117.451188][ T31] audit: type=1400 audit(1792006226.988:393): avc: denied { watch } for pid=6255 comm="syz.3.117" path="/26" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.570866][ T6265] netlink: 76 bytes leftover after parsing attributes in process `syz.3.117'. [ 120.175340][ T31] audit: type=1400 audit(1792006229.708:394): avc: denied { write } for pid=6274 comm="syz.0.121" name="sda" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.210963][ T31] audit: type=1400 audit(1792006229.748:395): avc: denied { map } for pid=6274 comm="syz.0.121" path="/22/dev/sda" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.588199][ T31] audit: type=1400 audit(1792006230.038:396): avc: denied { read } for pid=6276 comm="syz.3.122" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 120.588250][ T31] audit: type=1400 audit(1792006230.048:397): avc: denied { open } for pid=6276 comm="syz.3.122" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 120.588289][ T31] audit: type=1400 audit(1792006230.088:398): avc: denied { ioctl } for pid=6276 comm="syz.3.122" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 121.994068][ T4931] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.170983][ T4931] usb 1-1: New USB device found, idVendor=0a12, idProduct=0002, bcdDevice=10.00 [ 122.174787][ T4931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.175018][ T4931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.596515][ T31] audit: type=1400 audit(1792006232.128:399): avc: denied { unlink } for pid=6302 comm="syz.2.127" name="#3" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.654348][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 122.654369][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 122.739434][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.739823][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.739897][ T31] audit: type=1400 audit(1792006232.248:400): avc: denied { create } for pid=6302 comm="syz.2.127" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.739937][ T31] audit: type=1400 audit(1792006232.258:401): avc: denied { link } for pid=6302 comm="syz.2.127" name="#5" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.739982][ T31] audit: type=1400 audit(1792006232.258:402): avc: denied { rename } for pid=6302 comm="syz.2.127" name="#6" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 122.832639][ T52] Bluetooth: hci4: SCO packet for unknown connection handle 100 [ 122.843901][ T31] audit: type=1400 audit(1792006232.378:403): avc: denied { create } for pid=6309 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.938921][ T5719] usb 1-1: USB disconnect, device number 4 [ 123.069763][ T6325] FAULT_INJECTION: forcing a failure. [ 123.069763][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.069795][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.0.133 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.069825][ T6325] Tainted: [L]=SOFTLOCKUP [ 123.069832][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 123.069842][ T6325] Call Trace: [ 123.069849][ T6325] [ 123.069857][ T6325] dump_stack_lvl+0x100/0x190 [ 123.069889][ T6325] should_fail_ex.cold+0x5/0xa [ 123.069915][ T6325] _copy_from_user+0x2e/0xd0 [ 123.069943][ T6325] copy_msghdr_from_user+0x9f/0x4c0 [ 123.069970][ T6325] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 123.070002][ T6325] ? lock_acquire+0x1d1/0x380 [ 123.070024][ T6325] ? get_pid_task+0x2a/0x250 [ 123.070052][ T6325] ___sys_sendmsg+0x106/0x1e0 [ 123.070078][ T6325] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.070102][ T6325] ? get_pid_task+0x106/0x250 [ 123.070136][ T6325] ? find_held_lock+0x2b/0x80 [ 123.070178][ T6325] __sys_sendmsg+0x160/0x210 [ 123.070197][ T6325] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.070231][ T6325] do_syscall_64+0x123/0x790 [ 123.070257][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.070276][ T6325] RIP: 0033:0x7f8c4bf9e2d9 [ 123.070291][ T6325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.070307][ T6325] RSP: 002b:00007f8c4ceeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.070326][ T6325] RAX: ffffffffffffffda RBX: 00007f8c4c225fa0 RCX: 00007f8c4bf9e2d9 [ 123.070338][ T6325] RDX: 0000000000040008 RSI: 0000200000000400 RDI: 0000000000000003 [ 123.070348][ T6325] RBP: 00007f8c4ceeb090 R08: 0000000000000000 R09: 0000000000000000 [ 123.070359][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.070370][ T6325] R13: 00007f8c4c226038 R14: 00007f8c4c225fa0 R15: 00007ffe36ae0328 [ 123.070395][ T6325] [ 123.984747][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 124.114406][ T6341] UDC core: g1: couldn't find an available UDC or it's busy [ 124.123101][ T6341] udc dummy_udc.0: failed to start g1: -19 [ 124.123911][ T6341] UDC core: g1: couldn't find an available UDC or it's busy [ 124.245220][ T6346] udc dummy_udc.0: failed to start g1: -19 [ 124.245629][ T6346] UDC core: g1: couldn't find an available UDC or it's busy [ 124.307385][ T190] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.327086][ T5719] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.335746][ T6350] FAULT_INJECTION: forcing a failure. [ 124.335746][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.335778][ T6350] CPU: 1 UID: 0 PID: 6350 Comm: syz.1.142 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.335804][ T6350] Tainted: [L]=SOFTLOCKUP [ 124.335811][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 124.335822][ T6350] Call Trace: [ 124.335830][ T6350] [ 124.335837][ T6350] dump_stack_lvl+0x100/0x190 [ 124.335867][ T6350] should_fail_ex.cold+0x5/0xa [ 124.335892][ T6350] _copy_from_user+0x2e/0xd0 [ 124.335920][ T6350] copy_msghdr_from_user+0x9f/0x4c0 [ 124.335947][ T6350] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 124.335979][ T6350] ? lock_acquire+0x1d1/0x380 [ 124.336001][ T6350] ? get_pid_task+0x2a/0x250 [ 124.336029][ T6350] ___sys_sendmsg+0x106/0x1e0 [ 124.336056][ T6350] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.336081][ T6350] ? get_pid_task+0x106/0x250 [ 124.336117][ T6350] ? find_held_lock+0x2b/0x80 [ 124.336163][ T6350] __sys_sendmsg+0x160/0x210 [ 124.336184][ T6350] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.336220][ T6350] do_syscall_64+0x123/0x790 [ 124.336249][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.336269][ T6350] RIP: 0033:0x7f717c59e2d9 [ 124.336286][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.336303][ T6350] RSP: 002b:00007f717d4fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.336322][ T6350] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59e2d9 [ 124.336335][ T6350] RDX: 0000000020040054 RSI: 00002000000006c0 RDI: 0000000000000004 [ 124.336347][ T6350] RBP: 00007f717d4fe090 R08: 0000000000000000 R09: 0000000000000000 [ 124.336359][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.336370][ T6350] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffffa5d1b28 [ 124.336404][ T6350] [ 124.466374][ T190] usb 3-1: Using ep0 maxpacket: 32 [ 124.467159][ T190] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 124.470123][ T190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.470153][ T190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.470174][ T190] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.470210][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.477259][ T190] usb 3-1: config 0 descriptor?? [ 124.497105][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 124.499028][ T5719] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 124.503775][ T5719] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.503809][ T5719] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.509156][ T5719] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 124.509201][ T5719] usb 4-1: Product: syz [ 124.509216][ T5719] usb 4-1: Manufacturer: syz [ 124.574221][ T5719] hub 4-1:4.0: USB hub found [ 124.785653][ T5719] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 124.812453][ T190] usbhid 3-1:0.0: can't add hid device: -71 [ 124.812544][ T190] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 124.824024][ T190] usb 3-1: USB disconnect, device number 5 [ 124.829971][ T5719] usb 4-1: USB disconnect, device number 3 [ 125.346472][ T5719] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 125.462107][ T6368] IPVS: lc: FWM 3 0x00000003 - no destination available [ 125.499548][ T5719] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.501766][ T5719] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.501801][ T5719] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.503146][ T5719] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 125.503170][ T5719] usb 4-1: Product: syz [ 125.503187][ T5719] usb 4-1: Manufacturer: syz [ 125.564147][ T5719] hub 4-1:4.0: USB hub found [ 125.661813][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.148'. [ 125.849164][ T5719] hub 4-1:4.0: 1 port detected [ 126.335008][ T5719] hub 4-1:4.0: set hub depth failed [ 126.358249][ T5719] usb 4-1: USB disconnect, device number 4 [ 126.657558][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 126.657575][ T31] audit: type=1400 audit(1792006236.198:413): avc: denied { create } for pid=6385 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.706677][ T31] audit: type=1400 audit(1792006237.238:414): avc: denied { setopt } for pid=6399 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.769718][ T5712] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.186078][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 129.188451][ T5712] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 129.192384][ T5712] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.192510][ T5712] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.336083][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.336109][ T5712] usb 4-1: Product: syz [ 129.336124][ T5712] usb 4-1: Manufacturer: syz [ 129.336140][ T5712] usb 4-1: SerialNumber: syz [ 129.343080][ T190] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.386203][ T5712] usb 4-1: config 0 descriptor?? [ 129.495953][ T190] usb 1-1: Using ep0 maxpacket: 16 [ 129.496626][ T190] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.499287][ T190] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 129.499316][ T190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.503455][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.503485][ T190] usb 1-1: Product: syz [ 129.503500][ T190] usb 1-1: Manufacturer: syz [ 129.503515][ T190] usb 1-1: SerialNumber: syz [ 129.509334][ T190] usb 1-1: config 0 descriptor?? [ 129.519959][ T190] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 129.519990][ T190] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 130.294138][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 130.485374][ T5712] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 130.553292][ T5712] imon:send_packet: packet tx failed (-71) [ 130.565982][ T5712] imon 4-1:0.0: panel buttons/knobs setup failed [ 130.617726][ T5712] rc_core: IR keymap rc-imon-pad not found [ 130.617749][ T5712] Registered IR keymap rc-empty [ 130.617812][ T5712] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 130.617830][ T5712] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 130.619150][ T5712] imon:send_packet: packet tx failed (-71) [ 130.646914][ T5712] imon 4-1:0.0: remote input dev register failed [ 130.647036][ T5712] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 130.676584][ T190] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 130.677446][ T190] em28xx 1-1:0.0: Config register raw data: 0x41 [ 130.710532][ T6096] IPVS: starting estimator thread 0... [ 130.748078][ T5712] imon 4-1:0.0: unable to initialize intf0, err 0 [ 130.748099][ T5712] imon:imon_probe: failed to initialize context! [ 130.748111][ T5712] imon 4-1:0.0: unable to register, err -19 [ 130.753134][ T5712] usb 4-1: USB disconnect, device number 5 [ 130.806556][ T6432] IPVS: using max 38 ests per chain, 91200 per kthread [ 130.835963][ T4931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.888062][ T5711] usb 1-1: USB disconnect, device number 5 [ 130.888890][ T5711] em28xx 1-1:0.0: Disconnecting em28xx [ 130.911115][ T5711] em28xx: Freeing device [ 130.985911][ T4931] usb 3-1: Using ep0 maxpacket: 32 [ 130.987257][ T4931] usb 3-1: New USB device found, idVendor=07b8, idProduct=4007, bcdDevice=5a.6e [ 130.988126][ T4931] usb 3-1: config 5 has an invalid interface number: 47 but max is 0 [ 130.988148][ T4931] usb 3-1: config 5 has no interface number 0 [ 130.988183][ T4931] usb 3-1: config 5 interface 47 altsetting 2 endpoint 0x9 has invalid maxpacket 1536, setting to 64 [ 130.988210][ T4931] usb 3-1: config 5 interface 47 has no altsetting 0 [ 130.989900][ T4931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.989923][ T4931] usb 3-1: Product: syz [ 130.989937][ T4931] usb 3-1: Manufacturer: syz [ 130.989950][ T4931] usb 3-1: SerialNumber: syz [ 131.219954][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.224060][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.271443][ T6428] evm: overlay not supported [ 131.808012][ T4931] pegasus 3-1:5.47: Missing or invalid endpoints [ 131.826075][ T4931] usb 3-1: USB disconnect, device number 6 [ 131.955706][ T6447] batman_adv: batadv0: Adding interface: syz_tun [ 131.955718][ T6447] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.955734][ T6447] batman_adv: batadv0: Interface activated: syz_tun [ 132.082160][ T31] audit: type=1400 audit(1792006241.618:415): avc: denied { write } for pid=6448 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 132.082586][ T31] audit: type=1400 audit(1792006241.618:416): avc: denied { read } for pid=6448 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 132.671441][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.671512][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.810149][ T31] audit: type=1400 audit(1792006242.348:417): avc: denied { create } for pid=6454 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.813023][ T31] audit: type=1400 audit(1792006242.348:418): avc: denied { ioctl } for pid=6454 comm="syz.3.169" path="socket:[11731]" dev="sockfs" ino=11731 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.813069][ T31] audit: type=1400 audit(1792006242.348:419): avc: denied { bind } for pid=6454 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.824953][ T6457] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 132.824971][ T6457] netlink: 220 bytes leftover after parsing attributes in process `syz.3.169'. [ 132.836005][ T31] audit: type=1400 audit(1792006242.358:420): avc: denied { write } for pid=6454 comm="syz.3.169" path="socket:[11731]" dev="sockfs" ino=11731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.877283][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 132.877317][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 133.268237][ T6471] FAULT_INJECTION: forcing a failure. [ 133.268237][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 133.268273][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.3.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.268303][ T6471] Tainted: [L]=SOFTLOCKUP [ 133.268310][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 133.268322][ T6471] Call Trace: [ 133.268329][ T6471] [ 133.268338][ T6471] dump_stack_lvl+0x100/0x190 [ 133.268377][ T6471] should_fail_ex.cold+0x5/0xa [ 133.268408][ T6471] should_failslab+0xc2/0x120 [ 133.268440][ T6471] __kmalloc_cache_noprof+0x91/0x6d0 [ 133.268468][ T6471] ? befs_init_fs_context+0x43/0x140 [ 133.268504][ T6471] befs_init_fs_context+0x43/0x140 [ 133.268534][ T6471] alloc_fs_context+0x60c/0xf40 [ 133.268565][ T6471] __x64_sys_fsopen+0xed/0x220 [ 133.268594][ T6471] do_syscall_64+0x123/0x790 [ 133.268628][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.268651][ T6471] RIP: 0033:0x7fb77e99e2d9 [ 133.268669][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.268688][ T6471] RSP: 002b:00007fb77f948028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 133.268710][ T6471] RAX: ffffffffffffffda RBX: 00007fb77ec25fa0 RCX: 00007fb77e99e2d9 [ 133.268725][ T6471] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 133.268739][ T6471] RBP: 00007fb77ea35888 R08: 0000000000000000 R09: 0000000000000000 [ 133.268753][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.268766][ T6471] R13: 00007fb77ec26038 R14: 00007fb77ec25fa0 R15: 00007fff19645848 [ 133.268806][ T6471] [ 133.337994][ T31] audit: type=1400 audit(1792006242.878:421): avc: denied { write } for pid=6472 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.396233][ T31] audit: type=1400 audit(1792006242.928:422): avc: denied { setattr } for pid=6472 comm="syz.1.175" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 133.714349][ T31] audit: type=1400 audit(1792006243.248:423): avc: denied { write } for pid=6479 comm="syz.3.177" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.739474][ T31] audit: type=1400 audit(1792006243.278:424): avc: denied { map } for pid=6479 comm="syz.3.177" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.740183][ T6483] FAULT_INJECTION: forcing a failure. [ 133.740183][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 133.740213][ T6483] CPU: 0 UID: 0 PID: 6483 Comm: syz.2.178 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.740231][ T6483] Tainted: [L]=SOFTLOCKUP [ 133.740236][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 133.740243][ T6483] Call Trace: [ 133.740247][ T6483] [ 133.740252][ T6483] dump_stack_lvl+0x100/0x190 [ 133.740274][ T6483] should_fail_ex.cold+0x5/0xa [ 133.740291][ T6483] should_failslab+0xc2/0x120 [ 133.740309][ T6483] kmem_cache_alloc_noprof+0x92/0x6a0 [ 133.740325][ T6483] ? security_file_alloc+0x34/0x2c0 [ 133.740346][ T6483] security_file_alloc+0x34/0x2c0 [ 133.740363][ T6483] init_file+0x95/0x480 [ 133.740385][ T6483] alloc_empty_file+0x79/0x1c0 [ 133.740399][ T6483] path_openat+0xdb/0x2440 [ 133.740418][ T6483] ? __pfx_path_openat+0x10/0x10 [ 133.740439][ T6483] do_file_open+0x20e/0x430 [ 133.740457][ T6483] ? __pfx_do_file_open+0x10/0x10 [ 133.740484][ T6483] ? _raw_spin_unlock+0x28/0x50 [ 133.740498][ T6483] ? alloc_fd+0x471/0x7a0 [ 133.740519][ T6483] do_sys_openat2+0x10f/0x1e0 [ 133.740530][ T6483] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.740542][ T6483] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.740563][ T6483] __x64_sys_openat+0x12d/0x210 [ 133.740574][ T6483] ? __pfx___x64_sys_openat+0x10/0x10 [ 133.740585][ T6483] ? ksys_write+0x1ac/0x250 [ 133.740603][ T6483] do_syscall_64+0x123/0x790 [ 133.740621][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.740633][ T6483] RIP: 0033:0x7f830fd5eb0e [ 133.740643][ T6483] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 133.740654][ T6483] RSP: 002b:00007f8310bf3f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.740665][ T6483] RAX: ffffffffffffffda RBX: 00007f8310bf46c0 RCX: 00007f830fd5eb0e [ 133.740672][ T6483] RDX: 0000000000000002 RSI: 00007f830fe35182 RDI: ffffffffffffff9c [ 133.740679][ T6483] RBP: 00007f830fe35888 R08: 0000000000000000 R09: 0000000000000000 [ 133.740686][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.740693][ T6483] R13: 00007f8310026038 R14: 00007f8310025fa0 R15: 00007fffd52ba9d8 [ 133.740714][ T6483] [ 135.499035][ T6507] No such timeout policy "syz1" [ 135.924566][ T6511] FAULT_INJECTION: forcing a failure. [ 135.924566][ T6511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.924600][ T6511] CPU: 1 UID: 0 PID: 6511 Comm: syz.4.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.924627][ T6511] Tainted: [L]=SOFTLOCKUP [ 135.924634][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 135.924645][ T6511] Call Trace: [ 135.924652][ T6511] [ 135.924660][ T6511] dump_stack_lvl+0x100/0x190 [ 135.924693][ T6511] should_fail_ex.cold+0x5/0xa [ 135.924721][ T6511] _copy_from_user+0x2e/0xd0 [ 135.924749][ T6511] move_addr_to_kernel+0x65/0x170 [ 135.924776][ T6511] __sys_sendto+0x1b8/0x4e0 [ 135.924805][ T6511] ? __pfx___sys_sendto+0x10/0x10 [ 135.924841][ T6511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.924880][ T6511] ? ksys_write+0x1ac/0x250 [ 135.924906][ T6511] ? __pfx_ksys_write+0x10/0x10 [ 135.924934][ T6511] __x64_sys_sendto+0xe0/0x1c0 [ 135.924961][ T6511] ? do_syscall_64+0xae/0x790 [ 135.924986][ T6511] ? lockdep_hardirqs_on+0x7d/0x110 [ 135.925011][ T6511] do_syscall_64+0x123/0x790 [ 135.925040][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.925060][ T6511] RIP: 0033:0x7ff790b9e2d9 [ 135.925077][ T6511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.925094][ T6511] RSP: 002b:00007ff791a1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 135.925113][ T6511] RAX: ffffffffffffffda RBX: 00007ff790e25fa0 RCX: 00007ff790b9e2d9 [ 135.925127][ T6511] RDX: 0000000000034000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 135.925139][ T6511] RBP: 00007ff791a1b090 R08: 0000200000000b00 R09: 0000000000000010 [ 135.925152][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.925163][ T6511] R13: 00007ff790e26038 R14: 00007ff790e25fa0 R15: 00007ffec6138b98 [ 135.925192][ T6511] [ 136.238819][ T6524] nvme_fabrics: found same hostid fab8e603-7fc2-4bde-a04a-e30f2dad2d5a but different hostnqn nqÐpÉ [ 137.294930][ T6545] netlink: 76 bytes leftover after parsing attributes in process `syz.1.198'. [ 138.740641][ T6551] ipt_REJECT: TCP_RESET invalid for non-tcp [ 138.829844][ T6555] FAULT_INJECTION: forcing a failure. [ 138.829844][ T6555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.829868][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.2.200 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.829884][ T6555] Tainted: [L]=SOFTLOCKUP [ 138.829889][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 138.829898][ T6555] Call Trace: [ 138.829903][ T6555] [ 138.829907][ T6555] dump_stack_lvl+0x100/0x190 [ 138.829929][ T6555] should_fail_ex.cold+0x5/0xa [ 138.829947][ T6555] _copy_from_user+0x2e/0xd0 [ 138.829964][ T6555] copy_msghdr_from_user+0x9f/0x4c0 [ 138.829982][ T6555] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 138.830001][ T6555] ? lock_acquire+0x1d1/0x380 [ 138.830014][ T6555] ? get_pid_task+0x2a/0x250 [ 138.830032][ T6555] ___sys_sendmsg+0x106/0x1e0 [ 138.830048][ T6555] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.830063][ T6555] ? get_pid_task+0x106/0x250 [ 138.830084][ T6555] ? find_held_lock+0x2b/0x80 [ 138.830111][ T6555] __sys_sendmsg+0x160/0x210 [ 138.830124][ T6555] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.830143][ T6555] do_syscall_64+0x123/0x790 [ 138.830162][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.830175][ T6555] RIP: 0033:0x7f830fd9e2d9 [ 138.830185][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.830196][ T6555] RSP: 002b:00007f8310bf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.830207][ T6555] RAX: ffffffffffffffda RBX: 00007f8310025fa0 RCX: 00007f830fd9e2d9 [ 138.830214][ T6555] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 138.830221][ T6555] RBP: 00007f8310bf4090 R08: 0000000000000000 R09: 0000000000000000 [ 138.830228][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.830237][ T6555] R13: 00007f8310026038 R14: 00007f8310025fa0 R15: 00007fffd52ba9d8 [ 138.830253][ T6555] [ 139.170233][ T6566] No such timeout policy "syz1" [ 139.614908][ T6571] No such timeout policy "syz1" [ 140.212990][ T6576] FAULT_INJECTION: forcing a failure. [ 140.212990][ T6576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.213024][ T6576] CPU: 0 UID: 0 PID: 6576 Comm: syz.1.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.213052][ T6576] Tainted: [L]=SOFTLOCKUP [ 140.213059][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 140.213071][ T6576] Call Trace: [ 140.213077][ T6576] [ 140.213085][ T6576] dump_stack_lvl+0x100/0x190 [ 140.213119][ T6576] should_fail_ex.cold+0x5/0xa [ 140.213149][ T6576] _copy_from_user+0x2e/0xd0 [ 140.213178][ T6576] move_addr_to_kernel+0x65/0x170 [ 140.213208][ T6576] __sys_sendto+0x1b8/0x4e0 [ 140.213239][ T6576] ? __pfx___sys_sendto+0x10/0x10 [ 140.213277][ T6576] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.213322][ T6576] ? ksys_write+0x1ac/0x250 [ 140.213346][ T6576] ? __pfx_ksys_write+0x10/0x10 [ 140.213375][ T6576] __x64_sys_sendto+0xe0/0x1c0 [ 140.213403][ T6576] ? do_syscall_64+0xae/0x790 [ 140.213429][ T6576] ? lockdep_hardirqs_on+0x7d/0x110 [ 140.213455][ T6576] do_syscall_64+0x123/0x790 [ 140.213485][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.213506][ T6576] RIP: 0033:0x7f717c59e2d9 [ 140.213523][ T6576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.213540][ T6576] RSP: 002b:00007f717d4fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 140.213559][ T6576] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59e2d9 [ 140.213571][ T6576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 140.213583][ T6576] RBP: 00007f717d4fe090 R08: 0000200000000200 R09: 0000000000000014 [ 140.213595][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.213607][ T6576] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffffa5d1b28 [ 140.213643][ T6576] [ 140.488905][ T6582] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 140.669752][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 140.669770][ T31] audit: type=1400 audit(1792006250.208:428): avc: denied { read write } for pid=6592 comm="syz.0.213" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 140.669955][ T31] audit: type=1400 audit(1792006250.208:429): avc: denied { open } for pid=6592 comm="syz.0.213" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 140.736241][ T6595] FAULT_INJECTION: forcing a failure. [ 140.736241][ T6595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.736273][ T6595] CPU: 0 UID: 0 PID: 6595 Comm: syz.0.213 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.736301][ T6595] Tainted: [L]=SOFTLOCKUP [ 140.736307][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 140.736319][ T6595] Call Trace: [ 140.736325][ T6595] [ 140.736332][ T6595] dump_stack_lvl+0x100/0x190 [ 140.736364][ T6595] should_fail_ex.cold+0x5/0xa [ 140.736392][ T6595] _copy_from_user+0x2e/0xd0 [ 140.736418][ T6595] uhid_char_write+0x18d/0x10e0 [ 140.736444][ T6595] vfs_write+0x2aa/0x1050 [ 140.736467][ T6595] ? __pfx_uhid_char_write+0x10/0x10 [ 140.736487][ T6595] ? lock_acquire+0x1d1/0x380 [ 140.736508][ T6595] ? __fget_files+0x34/0x3d0 [ 140.736534][ T6595] ? __pfx_vfs_write+0x10/0x10 [ 140.736554][ T6595] ? find_held_lock+0x2b/0x80 [ 140.736581][ T6595] ? __fget_files+0x215/0x3d0 [ 140.736606][ T6595] ? __fget_files+0x215/0x3d0 [ 140.736637][ T6595] ? __fget_files+0x21f/0x3d0 [ 140.736673][ T6595] ksys_write+0x1f8/0x250 [ 140.736694][ T6595] ? __pfx_ksys_write+0x10/0x10 [ 140.736727][ T6595] do_syscall_64+0x123/0x790 [ 140.736756][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.736777][ T6595] RIP: 0033:0x7f8c4bf9e2d9 [ 140.736793][ T6595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.736811][ T6595] RSP: 002b:00007f8c4ceca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.736831][ T6595] RAX: ffffffffffffffda RBX: 00007f8c4c226090 RCX: 00007f8c4bf9e2d9 [ 140.736844][ T6595] RDX: 0000000000000037 RSI: 0000200000000380 RDI: 0000000000000003 [ 140.736856][ T6595] RBP: 00007f8c4ceca090 R08: 0000000000000000 R09: 0000000000000000 [ 140.736868][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.736879][ T6595] R13: 00007f8c4c226128 R14: 00007f8c4c226090 R15: 00007ffe36ae0328 [ 140.736908][ T6595] [ 140.760876][ T31] audit: type=1400 audit(1792006250.298:430): avc: denied { read write } for pid=6588 comm="syz.4.212" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 140.760923][ T31] audit: type=1400 audit(1792006250.298:431): avc: denied { open } for pid=6588 comm="syz.4.212" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 141.013886][ T5711] nintendo 0005:057E:2017.0003: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 141.107721][ T31] audit: type=1400 audit(1792006250.648:432): avc: denied { create } for pid=6604 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.116618][ T31] audit: type=1400 audit(1792006250.648:433): avc: denied { bind } for pid=6604 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.116665][ T31] audit: type=1400 audit(1792006250.658:434): avc: denied { name_bind } for pid=6604 comm="syz.4.214" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 141.116701][ T31] audit: type=1400 audit(1792006250.658:435): avc: denied { node_bind } for pid=6604 comm="syz.4.214" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 141.366760][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 141.517016][ T9] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 141.519869][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 141.519900][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 141.522151][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.522175][ T9] usb 5-1: Product: syz [ 141.522191][ T9] usb 5-1: Manufacturer: syz [ 141.522206][ T9] usb 5-1: SerialNumber: syz [ 141.531904][ T6605] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.532017][ T6605] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.537660][ T9] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 141.537680][ T9] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 141.537721][ T9] usbserial_generic 5-1:1.0: generic converter detected [ 141.554326][ T9] usb 5-1: generic converter now attached to ttyUSB0 [ 141.742763][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.742832][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.742921][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.742951][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.743201][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.743246][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.743357][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.743698][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.743750][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.743855][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.743904][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.744046][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.744102][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.744211][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.744245][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.744372][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.744414][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.744579][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.744633][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.744706][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 141.960335][ T9] usb 5-1: USB disconnect, device number 8 [ 141.988049][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 141.988650][ T9] usbserial_generic 5-1:1.0: device disconnected [ 142.311444][ T6613] netlink: 76 bytes leftover after parsing attributes in process `syz.1.216'. [ 143.865984][ T6627] netlink: 76 bytes leftover after parsing attributes in process `syz.1.218'. [ 145.362905][ T5711] nintendo 0005:057E:2017.0003: Failed to get joycon info; ret=-110 [ 145.362929][ T5711] nintendo 0005:057E:2017.0003: Failed to retrieve controller info; ret=-110 [ 145.362946][ T5711] nintendo 0005:057E:2017.0003: Failed to initialize controller; ret=-110 [ 145.609694][ T5711] nintendo 0005:057E:2017.0003: probe - fail = -110 [ 145.609816][ T5711] nintendo 0005:057E:2017.0003: probe with driver nintendo failed with error -110 [ 145.738405][ T6646] ipt_REJECT: TCP_RESET invalid for non-tcp [ 145.810607][ T6647] device-mapper: ioctl: Empty message received. [ 146.294085][ T6653] netlink: 104 bytes leftover after parsing attributes in process `syz.1.224'. [ 146.776210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 146.847932][ T31] audit: type=1400 audit(1792006255.828:436): avc: denied { nlmsg_read } for pid=6650 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.324975][ T6664] netlink: 168 bytes leftover after parsing attributes in process `syz.2.228'. [ 148.325001][ T6664] netlink: 168 bytes leftover after parsing attributes in process `syz.2.228'. [ 148.344506][ T31] audit: type=1326 audit(1792006257.878:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830fd9e2d9 code=0x7ffc0000 [ 148.344719][ T31] audit: type=1326 audit(1792006257.878:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830fd9e2d9 code=0x7ffc0000 [ 148.401060][ T31] audit: type=1326 audit(1792006257.878:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830fd9e2d9 code=0x7ffc0000 [ 148.401118][ T31] audit: type=1326 audit(1792006257.878:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830fd9e2d9 code=0x7ffc0000 [ 148.401161][ T31] audit: type=1326 audit(1792006257.878:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f830fd9e2d9 code=0x7ffc0000 [ 148.401203][ T31] audit: type=1326 audit(1792006257.888:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830fd9e2d9 code=0x7ffc0000 [ 148.460087][ T31] audit: type=1326 audit(1792006257.968:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830fd9e2d9 code=0x7ffc0000 [ 148.461601][ T31] audit: type=1326 audit(1792006257.968:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830fd9e2d9 code=0x7ffc0000 [ 148.514931][ T31] audit: type=1326 audit(1792006258.028:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.2.228" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830fd9e2d9 code=0x7ffc0000 [ 150.006960][ T5719] nintendo 0005:057E:2017.0004: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 150.925999][ T190] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.096682][ T190] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 151.097733][ T190] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.097780][ T190] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 151.097805][ T190] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.099578][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 151.099602][ T190] usb 1-1: Product: syz [ 151.099617][ T190] usb 1-1: Manufacturer: syz [ 151.101712][ T6709] ipt_REJECT: TCP_RESET invalid for non-tcp [ 151.116968][ T6697] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.156939][ T5711] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.192486][ T190] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 151.206932][ T190] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 151.305987][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 151.306751][ T5711] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 151.307847][ T5711] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 151.307878][ T5711] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.307908][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.310386][ T5711] usb 3-1: config 0 descriptor?? [ 151.345039][ T4931] usb 1-1: USB disconnect, device number 6 [ 151.389566][ T4931] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 151.394201][ T4931] garmin_gps 1-1:1.0: device disconnected [ 152.729324][ T5711] usbhid 3-1:0.0: can't add hid device: -71 [ 152.729416][ T5711] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 152.733171][ T5711] usb 3-1: USB disconnect, device number 7 [ 152.929032][ T31] kauditd_printk_skb: 98 callbacks suppressed [ 152.929050][ T31] audit: type=1400 audit(1792006262.468:544): avc: denied { call } for pid=6721 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 154.471431][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 154.791937][ T5719] nintendo 0005:057E:2017.0004: Failed to get joycon info; ret=-110 [ 154.791964][ T5719] nintendo 0005:057E:2017.0004: Failed to retrieve controller info; ret=-110 [ 154.791980][ T5719] nintendo 0005:057E:2017.0004: Failed to initialize controller; ret=-110 [ 154.818857][ T5719] nintendo 0005:057E:2017.0004: probe - fail = -110 [ 154.818947][ T5719] nintendo 0005:057E:2017.0004: probe with driver nintendo failed with error -110 [ 154.879612][ T31] audit: type=1400 audit(1792006264.418:545): avc: denied { create } for pid=6742 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.905108][ T6743] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input8 [ 154.916452][ T31] audit: type=1400 audit(1792006264.448:546): avc: denied { ioctl } for pid=6742 comm="syz.3.251" path="socket:[14385]" dev="sockfs" ino=14385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.207714][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 155.207826][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.249684][ T6758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.831894][ T6763] ovs-system: entered promiscuous mode [ 156.203296][ T6778] capability: warning: `syz.2.260' uses deprecated v2 capabilities in a way that may be insecure [ 156.929147][ T190] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.076423][ T190] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 157.078284][ T190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.078329][ T190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 157.078356][ T190] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 157.078393][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.274290][ T5712] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.972544][ T6796] FAULT_INJECTION: forcing a failure. [ 157.972544][ T6796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.972577][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: syz.2.260 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.972604][ T6796] Tainted: [L]=SOFTLOCKUP [ 157.972611][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 157.972622][ T6796] Call Trace: [ 157.972629][ T6796] [ 157.972637][ T6796] dump_stack_lvl+0x100/0x190 [ 157.972670][ T6796] should_fail_ex.cold+0x5/0xa [ 157.972698][ T6796] _copy_to_user+0x32/0xd0 [ 157.972728][ T6796] simple_read_from_buffer+0xcb/0x170 [ 157.972760][ T6796] proc_fail_nth_read+0x1af/0x230 [ 157.972790][ T6796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.972820][ T6796] ? rw_verify_area+0xce/0x6d0 [ 157.972839][ T6796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.972867][ T6796] vfs_read+0x1e4/0xb40 [ 157.972890][ T6796] ? lock_acquire+0x1d1/0x380 [ 157.972912][ T6796] ? __fget_files+0x34/0x3d0 [ 157.972937][ T6796] ? __pfx_vfs_read+0x10/0x10 [ 157.972957][ T6796] ? find_held_lock+0x2b/0x80 [ 157.972985][ T6796] ? __fget_files+0x215/0x3d0 [ 157.973016][ T6796] ? __fget_files+0x21f/0x3d0 [ 157.973051][ T6796] ksys_read+0x12a/0x250 [ 157.973074][ T6796] ? __pfx_ksys_read+0x10/0x10 [ 157.973105][ T6796] do_syscall_64+0x123/0x790 [ 157.973135][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.973155][ T6796] RIP: 0033:0x7f830fd5eb0e [ 157.973171][ T6796] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.973189][ T6796] RSP: 002b:00007f8310bb1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.973207][ T6796] RAX: ffffffffffffffda RBX: 00007f8310bb26c0 RCX: 00007f830fd5eb0e [ 157.973220][ T6796] RDX: 000000000000000f RSI: 00007f8310bb20a0 RDI: 0000000000000004 [ 157.973231][ T6796] RBP: 00007f8310bb2090 R08: 0000000000000000 R09: 0000000000000000 [ 157.973243][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.973254][ T6796] R13: 00007f8310026218 R14: 00007f8310026180 R15: 00007fffd52ba9d8 [ 157.973283][ T6796] [ 158.673375][ T5712] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 158.674278][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.674323][ T5712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 158.674349][ T5712] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 158.674386][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.882390][ T190] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 158.882440][ T190] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 158.882457][ T190] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 158.906896][ T190] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 158.911822][ T190] usb 3-1: USB disconnect, device number 8 [ 160.060943][ T31] audit: type=1400 audit(1792006269.598:547): avc: denied { ioctl } for pid=6782 comm="syz.0.259" path="socket:[14514]" dev="sockfs" ino=14514 ioctlcmd=0x618c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 160.064708][ T5712] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 160.064740][ T5712] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 160.064752][ T5712] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 160.099399][ T5712] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 160.110822][ T5712] usb 1-1: USB disconnect, device number 7 [ 160.387531][ T6818] FAULT_INJECTION: forcing a failure. [ 160.387531][ T6818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.387566][ T6818] CPU: 0 UID: 0 PID: 6818 Comm: syz.1.269 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.387593][ T6818] Tainted: [L]=SOFTLOCKUP [ 160.387601][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 160.387613][ T6818] Call Trace: [ 160.387619][ T6818] [ 160.387627][ T6818] dump_stack_lvl+0x100/0x190 [ 160.387661][ T6818] should_fail_ex.cold+0x5/0xa [ 160.387689][ T6818] strncpy_from_user+0x3b/0x2d0 [ 160.387720][ T6818] path_removexattrat+0xc8/0x5f0 [ 160.387751][ T6818] ? __pfx_path_removexattrat+0x10/0x10 [ 160.387779][ T6818] ? lock_acquire+0x1d1/0x380 [ 160.387825][ T6818] ? ksys_write+0x1ac/0x250 [ 160.387848][ T6818] ? __pfx_ksys_write+0x10/0x10 [ 160.387878][ T6818] __x64_sys_removexattr+0x5b/0x80 [ 160.387900][ T6818] do_syscall_64+0x123/0x790 [ 160.387930][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.387950][ T6818] RIP: 0033:0x7f717c59e2d9 [ 160.387967][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.387984][ T6818] RSP: 002b:00007f717d4fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 160.388003][ T6818] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59e2d9 [ 160.388017][ T6818] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000200000000640 [ 160.388029][ T6818] RBP: 00007f717d4fe090 R08: 0000000000000000 R09: 0000000000000000 [ 160.388041][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.388053][ T6818] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffffa5d1b28 [ 160.388082][ T6818] [ 160.621888][ T31] audit: type=1400 audit(1792006270.158:548): avc: denied { ioctl } for pid=6819 comm="syz.2.271" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 162.343341][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 162.343449][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.383075][ T6835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.450639][ T999] Bluetooth: hci5: Frame reassembly failed (-84) [ 162.466257][ T31] audit: type=1400 audit(1792006271.998:549): avc: denied { setopt } for pid=6819 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.499024][ T6840] ovs-system: entered promiscuous mode [ 162.765913][ T190] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.915925][ T190] usb 5-1: Using ep0 maxpacket: 16 [ 162.917562][ T190] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.918728][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.918761][ T190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.918783][ T190] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.918814][ T190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.921472][ T190] usb 5-1: config 0 descriptor?? [ 163.316015][ T5711] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.350070][ T190] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input10 [ 163.438377][ T190] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 163.476449][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 163.482213][ T5711] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.483116][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.483147][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.483170][ T5711] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.483201][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.532352][ T31] audit: type=1400 audit(1792006273.068:550): avc: denied { read } for pid=6843 comm="syz.4.278" name="event4" dev="devtmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.532778][ T31] audit: type=1400 audit(1792006273.068:551): avc: denied { open } for pid=6843 comm="syz.4.278" path="/dev/input/event4" dev="devtmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.533896][ T31] audit: type=1400 audit(1792006273.068:552): avc: denied { ioctl } for pid=6843 comm="syz.4.278" path="/dev/input/event4" dev="devtmpfs" ino=2869 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 163.598199][ T5711] usb 2-1: config 0 descriptor?? [ 163.676839][ T25] usb 5-1: USB disconnect, device number 9 [ 163.895982][ T190] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 163.955991][ T5719] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.020890][ T5711] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input11 [ 164.037501][ T190] usb 3-1: device descriptor read/64, error -71 [ 164.089621][ T5711] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 164.126572][ T5719] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.130868][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.130901][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.130923][ T5719] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.130962][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.133745][ T5719] usb 4-1: config 0 descriptor?? [ 164.209419][ T6851] FAULT_INJECTION: forcing a failure. [ 164.209419][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 164.209452][ T6851] CPU: 1 UID: 0 PID: 6851 Comm: syz.1.280 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.209480][ T6851] Tainted: [L]=SOFTLOCKUP [ 164.209487][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 164.209499][ T6851] Call Trace: [ 164.209506][ T6851] [ 164.209520][ T6851] dump_stack_lvl+0x100/0x190 [ 164.209553][ T6851] should_fail_ex.cold+0x5/0xa [ 164.209581][ T6851] should_failslab+0xc2/0x120 [ 164.209609][ T6851] __kmalloc_noprof+0xfc/0x840 [ 164.209632][ T6851] ? rcu_is_watching+0x13/0xc0 [ 164.209659][ T6851] ? tomoyo_realpath_from_path+0xb6/0x690 [ 164.209695][ T6851] tomoyo_realpath_from_path+0xb6/0x690 [ 164.209731][ T6851] tomoyo_path_number_perm+0x23c/0x580 [ 164.209755][ T6851] ? tomoyo_path_number_perm+0x22e/0x580 [ 164.209782][ T6851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.209820][ T6851] ? __lock_acquire+0x5c0/0x1f40 [ 164.209857][ T6851] ? __fget_files+0x34/0x3d0 [ 164.209885][ T6851] ? find_held_lock+0x2b/0x80 [ 164.209912][ T6851] ? hook_file_ioctl_common+0x140/0x440 [ 164.209940][ T6851] ? __fget_files+0x21f/0x3d0 [ 164.209972][ T6851] security_file_ioctl+0xd3/0x230 [ 164.210001][ T6851] __x64_sys_ioctl+0xb7/0x210 [ 164.210029][ T6851] do_syscall_64+0x123/0x790 [ 164.210059][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.210080][ T6851] RIP: 0033:0x7f717c59e2d9 [ 164.210096][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.210115][ T6851] RSP: 002b:00007f717d4fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.210135][ T6851] RAX: ffffffffffffffda RBX: 00007f717c825fa0 RCX: 00007f717c59e2d9 [ 164.210148][ T6851] RDX: 00002000000004c0 RSI: 0000000080084504 RDI: 0000000000000004 [ 164.210161][ T6851] RBP: 00007f717d4fe090 R08: 0000000000000000 R09: 0000000000000000 [ 164.210173][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.210184][ T6851] R13: 00007f717c826038 R14: 00007f717c825fa0 R15: 00007ffffa5d1b28 [ 164.210213][ T6851] [ 164.210242][ T6851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.211265][ T5711] usb 2-1: USB disconnect, device number 9 [ 164.345524][ T190] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.527766][ T190] usb 3-1: device descriptor read/64, error -71 [ 164.528186][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 164.599977][ T5719] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 164.637227][ T190] usb usb3-port1: attempt power cycle [ 164.842513][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 164.977490][ T190] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 165.468472][ T190] usb 3-1: device descriptor read/8, error -71 [ 165.515659][ T6876] CIFS: Attempting to mount //127.0.0.1/share [ 165.592366][ T6877] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 165.604153][ T6876] CIFS: VFS: cifs_mount failed w/return code = -112 [ 165.705970][ T190] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 165.726592][ T190] usb 3-1: device descriptor read/8, error -71 [ 165.837046][ T190] usb usb3-port1: unable to enumerate USB device [ 165.861401][ C1] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 166.045937][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.097651][ T31] audit: type=1400 audit(1792006275.638:553): avc: denied { name_connect } for pid=6887 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 166.100112][ T31] audit: type=1400 audit(1792006275.638:554): avc: denied { listen } for pid=6887 comm="syz.1.291" lport=51299 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.100996][ T31] audit: type=1400 audit(1792006275.638:555): avc: denied { write } for pid=6887 comm="syz.1.291" lport=51299 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 166.101395][ T31] audit: type=1400 audit(1792006275.638:556): avc: denied { setopt } for pid=6887 comm="syz.1.291" lport=51299 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 166.197431][ T31] audit: type=1400 audit(1792006275.728:557): avc: denied { bind } for pid=6887 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.198869][ T6894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.291'. [ 166.227536][ T6893] ================================================================== [ 166.227554][ T6893] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 166.227587][ T6893] Read of size 64 at addr ffffffff9ccca6e0 by task syz.1.291/6893 [ 166.227604][ T6893] [ 166.227617][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz.1.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.227647][ T6893] Tainted: [L]=SOFTLOCKUP [ 166.227655][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 166.227669][ T6893] Call Trace: [ 166.227676][ T6893] [ 166.227683][ T6893] dump_stack_lvl+0x100/0x190 [ 166.227714][ T6893] print_report+0x13d/0x4b0 [ 166.227745][ T6893] ? __virt_addr_valid+0x239/0x430 [ 166.227768][ T6893] ? usb_copy_descriptors+0x18d/0x320 [ 166.227790][ T6893] kasan_report+0xdf/0x1c0 [ 166.227823][ T6893] ? usb_copy_descriptors+0x18d/0x320 [ 166.227849][ T6893] kasan_check_range+0x10f/0x1e0 [ 166.227870][ T6893] __asan_memcpy+0x23/0x60 [ 166.227893][ T6893] usb_copy_descriptors+0x18d/0x320 [ 166.227918][ T6893] usb_assign_descriptors+0xd2/0x470 [ 166.227943][ T6893] f_audio_bind+0x243a/0x3950 [ 166.227975][ T6893] ? __pfx_f_audio_bind+0x10/0x10 [ 166.228000][ T6893] usb_add_function+0x219/0x890 [ 166.228024][ T6893] ? check_remote_wakeup_config+0x165/0x230 [ 166.228052][ T6893] configfs_composite_bind+0xd83/0x1960 [ 166.228079][ T6893] ? kernfs_create_link+0x1bd/0x240 [ 166.228109][ T6893] gadget_bind_driver+0x28c/0xbf0 [ 166.228139][ T6893] ? __pfx_gadget_bind_driver+0x10/0x10 [ 166.228177][ T6893] really_probe+0x241/0xa60 [ 166.228211][ T6893] __driver_probe_device+0x210/0x460 [ 166.228242][ T6893] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 166.228272][ T6893] driver_probe_device+0x4a/0x140 [ 166.228300][ T6893] __driver_attach+0x21f/0x5b0 [ 166.228329][ T6893] ? __pfx___driver_attach+0x10/0x10 [ 166.228358][ T6893] bus_for_each_dev+0x13e/0x1d0 [ 166.228387][ T6893] ? __pfx_bus_for_each_dev+0x10/0x10 [ 166.228410][ T6893] ? bus_add_driver+0x2b5/0x5b0 [ 166.228441][ T6893] bus_add_driver+0x305/0x5b0 [ 166.228471][ T6893] driver_register+0x1e2/0x360 [ 166.228494][ T6893] usb_gadget_register_driver_owner+0x132/0x210 [ 166.228525][ T6893] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 166.228550][ T6893] configfs_write_iter+0x302/0x4e0 [ 166.228575][ T6893] vfs_write+0x6af/0x1050 [ 166.228598][ T6893] ? __pfx_configfs_write_iter+0x10/0x10 [ 166.228621][ T6893] ? __pfx_vfs_write+0x10/0x10 [ 166.228644][ T6893] ? find_held_lock+0x2b/0x80 [ 166.228682][ T6893] ksys_write+0x12a/0x250 [ 166.228705][ T6893] ? __pfx_ksys_write+0x10/0x10 [ 166.228734][ T6893] do_syscall_64+0x123/0x790 [ 166.228762][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.228784][ T6893] RIP: 0033:0x7f717c59e2d9 [ 166.228801][ T6893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.228822][ T6893] RSP: 002b:00007f717d4bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.228844][ T6893] RAX: ffffffffffffffda RBX: 00007f717c826180 RCX: 00007f717c59e2d9 [ 166.228859][ T6893] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000008 [ 166.228872][ T6893] RBP: 00007f717c635888 R08: 0000000000000000 R09: 0000000000000000 [ 166.228886][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.228900][ T6893] R13: 00007f717c826218 R14: 00007f717c826180 R15: 00007ffffa5d1b28 [ 166.228922][ T6893] [ 166.228929][ T6893] [ 166.228934][ T6893] The buggy address belongs to the variable: [ 166.228948][ T6893] ac_header_desc+0x0/0x40 [ 166.228976][ T6893] [ 166.228981][ T6893] The buggy address belongs to the physical page: [ 166.228993][ T6893] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ccca [ 166.229015][ T6893] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 166.229045][ T6893] raw: 00fff00000002000 ffffea0000733288 ffffea0000733288 0000000000000000 [ 166.229068][ T6893] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 166.229079][ T6893] page dumped because: kasan: bad access detected [ 166.229088][ T6893] page_owner info is not present (never set?) [ 166.229095][ T6893] [ 166.229099][ T6893] Memory state around the buggy address: [ 166.229108][ T6893] ffffffff9ccca580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 166.229122][ T6893] ffffffff9ccca600: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 166.229136][ T6893] >ffffffff9ccca680: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 166.229146][ T6893] ^ [ 166.229157][ T6893] ffffffff9ccca700: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 166.229180][ T6893] ffffffff9ccca780: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 166.229191][ T6893] ================================================================== [ 166.229224][ T6893] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.700955][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz.1.291 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.711709][ T6893] Tainted: [L]=SOFTLOCKUP [ 166.716036][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 166.726074][ T6893] Call Trace: [ 166.729336][ T6893] [ 166.732250][ T6893] dump_stack_lvl+0x100/0x190 [ 166.736920][ T6893] vpanic+0x553/0x970 [ 166.740885][ T6893] ? __pfx_vpanic+0x10/0x10 [ 166.745370][ T6893] ? mark_held_locks+0x40/0x70 [ 166.750121][ T6893] ? irqentry_exit+0x24d/0xa10 [ 166.754886][ T6893] ? usb_copy_descriptors+0x18d/0x320 [ 166.760241][ T6893] panic+0xd1/0xe0 [ 166.763944][ T6893] ? __pfx_panic+0x10/0x10 [ 166.768340][ T6893] ? usb_copy_descriptors+0x18d/0x320 [ 166.773694][ T6893] ? preempt_schedule_common+0x3c/0xb0 [ 166.779177][ T6893] check_panic_on_warn.cold+0x19/0x34 [ 166.784532][ T6893] end_report.part.0+0x3a/0x90 [ 166.789281][ T6893] kasan_report.cold+0xe/0x18 [ 166.793944][ T6893] ? usb_copy_descriptors+0x18d/0x320 [ 166.799299][ T6893] kasan_check_range+0x10f/0x1e0 [ 166.804218][ T6893] __asan_memcpy+0x23/0x60 [ 166.808617][ T6893] usb_copy_descriptors+0x18d/0x320 [ 166.813817][ T6893] usb_assign_descriptors+0xd2/0x470 [ 166.819085][ T6893] f_audio_bind+0x243a/0x3950 [ 166.823755][ T6893] ? __pfx_f_audio_bind+0x10/0x10 [ 166.828764][ T6893] usb_add_function+0x219/0x890 [ 166.833598][ T6893] ? check_remote_wakeup_config+0x165/0x230 [ 166.839494][ T6893] configfs_composite_bind+0xd83/0x1960 [ 166.845026][ T6893] ? kernfs_create_link+0x1bd/0x240 [ 166.850232][ T6893] gadget_bind_driver+0x28c/0xbf0 [ 166.855246][ T6893] ? __pfx_gadget_bind_driver+0x10/0x10 [ 166.860778][ T6893] really_probe+0x241/0xa60 [ 166.865271][ T6893] __driver_probe_device+0x210/0x460 [ 166.870545][ T6893] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 166.876337][ T6893] driver_probe_device+0x4a/0x140 [ 166.881367][ T6893] __driver_attach+0x21f/0x5b0 [ 166.886120][ T6893] ? __pfx___driver_attach+0x10/0x10 [ 166.891396][ T6893] bus_for_each_dev+0x13e/0x1d0 [ 166.896228][ T6893] ? __pfx_bus_for_each_dev+0x10/0x10 [ 166.901582][ T6893] ? bus_add_driver+0x2b5/0x5b0 [ 166.906418][ T6893] bus_add_driver+0x305/0x5b0 [ 166.911083][ T6893] driver_register+0x1e2/0x360 [ 166.915826][ T6893] usb_gadget_register_driver_owner+0x132/0x210 [ 166.922063][ T6893] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 166.927680][ T6893] configfs_write_iter+0x302/0x4e0 [ 166.932804][ T6893] vfs_write+0x6af/0x1050 [ 166.937121][ T6893] ? __pfx_configfs_write_iter+0x10/0x10 [ 166.942742][ T6893] ? __pfx_vfs_write+0x10/0x10 [ 166.947489][ T6893] ? find_held_lock+0x2b/0x80 [ 166.952168][ T6893] ksys_write+0x12a/0x250 [ 166.956501][ T6893] ? __pfx_ksys_write+0x10/0x10 [ 166.961338][ T6893] do_syscall_64+0x123/0x790 [ 166.965916][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.971790][ T6893] RIP: 0033:0x7f717c59e2d9 [ 166.976204][ T6893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.995803][ T6893] RSP: 002b:00007f717d4bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.004201][ T6893] RAX: ffffffffffffffda RBX: 00007f717c826180 RCX: 00007f717c59e2d9 [ 167.012153][ T6893] RDX: 000000000000000c RSI: 0000200000000700 RDI: 0000000000000008 [ 167.020122][ T6893] RBP: 00007f717c635888 R08: 0000000000000000 R09: 0000000000000000 [ 167.028090][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.036041][ T6893] R13: 00007f717c826218 R14: 00007f717c826180 R15: 00007ffffa5d1b28 [ 167.044000][ T6893] [ 167.047211][ T6893] Kernel Offset: disabled [ 167.051519][ T6893] Rebooting in 86400 seconds..