last executing test programs: 2m41.073214188s ago: executing program 1 (id=97): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=ANY=[@ANYBLOB="00010000036d0b"], 0x100}, 0xf00, 0x0, 0x0, 0x4040024}, 0x0) 2m40.924388402s ago: executing program 1 (id=98): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000340)={0x40002009}) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) (async) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c03209040000010202000005240010010424"], 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x4, 0x1, 0x7fffffff, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9ea, 0x3, 0xb, 0x9, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x77fd]}) 2m37.19335385s ago: executing program 1 (id=106): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2000000, 0x0, 0x0) 2m37.02191678s ago: executing program 1 (id=110): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01020301090224000100001000090400"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r3, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r1}, 0x14) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002240)={0xa8, 0xfffffff5, 0x3, [{{0x1, 0x1, 0xfffffffffffffff7, 0x6, 0x0, 0x6, {0x5, 0x2, 0x80000000, 0xd, 0x9, 0x100, 0x1, 0xffffff01, 0x200, 0x4000, 0x3, r5, r6, 0x4, 0x10000}}, {0x2, 0x40}}]}, 0xa8) mount$cgroup2(0x0, &(0x7f00000000c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000140), 0x114804, &(0x7f0000000340)=ANY=[@ANYBLOB='memory_localevents,memory_hugetlb_accounting,seclabel,smackfsroot=\\,euid=', @ANYRESDEC=r5, @ANYBLOB="2c73c8c378a6340a844c6d653d6e6c3830323131002c736d61634be6acbe62e53392c35c"]) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r9 = shmat(r8, &(0x7f0000f62000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(r8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(r8, 0xb) shmdt(r9) ioprio_set$pid(0x3, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r10, 0x401, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) 2m34.074040608s ago: executing program 1 (id=123): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="a5", 0x1) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0xcea5, 0x6) (fail_nth: 1) 2m33.847773331s ago: executing program 1 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000200)="9b8140d8857e0f9e1d369dd6f542", 0xe}, {&(0x7f0000000240)="11ef2e880a4b70", 0x7}], 0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r6, 0x0, 0x40) r7 = fanotify_init(0x8, 0x1) fanotify_mark(r7, 0x541, 0x4000000b, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e1d, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb, 0xfffffffffffffffb}, {0x6, 0xffffffffe, 0x4053e5, 0x20}, 0x7, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0x2, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0x8}}, 0xe8) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r9 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000580)={&(0x7f0000000240)=[{0x63, 0x10, 0x0, 0x0}, {0x2, 0x9200, 0x0, 0x0}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x4, 0x41000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x9, 0x200000, 0x4, r1, 0x8}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r11, 0x4}, {r11, 0x623}], 0x2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) 2m18.67766275s ago: executing program 32 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000200)="9b8140d8857e0f9e1d369dd6f542", 0xe}, {&(0x7f0000000240)="11ef2e880a4b70", 0x7}], 0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r6, 0x0, 0x40) r7 = fanotify_init(0x8, 0x1) fanotify_mark(r7, 0x541, 0x4000000b, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e1d, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb, 0xfffffffffffffffb}, {0x6, 0xffffffffe, 0x4053e5, 0x20}, 0x7, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0x2, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0x8}}, 0xe8) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r9 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000580)={&(0x7f0000000240)=[{0x63, 0x10, 0x0, 0x0}, {0x2, 0x9200, 0x0, 0x0}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x4, 0x41000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x9, 0x200000, 0x4, r1, 0x8}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r11, 0x4}, {r11, 0x623}], 0x2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) 14.949244802s ago: executing program 2 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) shutdown(r1, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 11.95808839s ago: executing program 2 (id=545): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000002980)={0x34, &(0x7f0000002780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) 10.672740162s ago: executing program 5 (id=552): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000340)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x8202, 0x0) eventfd2(0x8001, 0x80001) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0xfffffffffffffff1, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000007, 0xb06c}, 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/226, 0xe2}], 0x1, 0x10002, 0x77) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000480)={&(0x7f0000006400)={0x14, 0x0, 0x9, {0x7, 0x29, 0x1, 0x20810020, 0xdcf, 0x4004, 0x1, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002140)=0x1) 9.098269065s ago: executing program 5 (id=558): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x2a4081, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="24002d8005000400010000000800020001000000050002000b000000050001000300000008000300", @ANYRES32, @ANYBLOB="1ae2f16e894bf09687e1917fff588f8586e6128acf0d16dc"], 0x50}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, 0x0, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="d20000000504000087000000757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bf"]) 8.026217619s ago: executing program 5 (id=562): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10001}) 7.592684906s ago: executing program 5 (id=563): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0xc) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000400)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x6f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x97) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000580)=[{{&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/248, 0xf8}], 0x1, &(0x7f00000004c0)=""/155, 0x9b}}], 0x1, 0x150, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) sendmsg$unix(r6, 0x0, 0x400a004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x2005000, 0x0) socket$kcm(0x10, 0x2, 0x4) 7.51690072s ago: executing program 4 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0xffffffffffffffff) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 7.514287448s ago: executing program 0 (id=565): socket$packet(0x11, 0x2, 0x300) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x4040) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) 7.439915024s ago: executing program 0 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) file_setattr(r4, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd29, 0x25dfdbfb, {0x80, 0xa, 0x20, 0x73, 0xfd, 0x4, 0xfd, 0xd, 0x2000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5c095}, 0x0) getpeername(r0, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000180)=0x80) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getnexthop={0x20, 0x6a, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008041) 7.320526842s ago: executing program 2 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) shutdown(r1, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 6.515392146s ago: executing program 0 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl(r5, 0x4048aecb, &(0x7f0000000200)) 6.463784317s ago: executing program 4 (id=569): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f00000000c0)='bfs\x00', 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80100001800c000100636f756e7465720028000180090001006c617374000000001800028008000140000000040c0002400080"], 0xfc}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, r0) pipe2$watch_queue(&(0x7f0000000300), 0x80) 5.02711458s ago: executing program 2 (id=570): creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) creat(&(0x7f00000000c0)='./file0\x00', 0x15) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x15) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) (async) 4.905088097s ago: executing program 3 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) file_setattr(r4, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd29, 0x25dfdbfb, {0x80, 0xa, 0x20, 0x73, 0xfd, 0x4, 0xfd, 0xd, 0x2000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5c095}, 0x0) getpeername(r0, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000180)=0x80) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getnexthop={0x20, 0x6a, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008041) 4.904326232s ago: executing program 0 (id=572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r1 = syz_open_dev$vim2m(0x0, 0x1, 0x2) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x2e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 4.666288777s ago: executing program 5 (id=573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 3.912368446s ago: executing program 3 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e80), 0x0, 0x20, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x800, &(0x7f0000000280)={0x0, 0x71, 0xe0000}, 0x20) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x3b, &(0x7f0000001400)={0x1e, 0xcfd, 0x800}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_eeprom={0xb, 0x2, 0x3}}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000340)={@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, {&(0x7f0000000240)=""/148, 0x94}, &(0x7f0000000300)}, 0xa0) r5 = fsopen(&(0x7f00000000c0)='aufs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='&{{/.\\%!\x00', &(0x7f0000000440)='\x00', 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) sched_setattr(r0, &(0x7f0000000500)={0x38, 0x6, 0x70, 0x7a8, 0x2f0, 0x4770, 0x8, 0x1, 0x6, 0x6}, 0x0) write$P9_RAUTH(r6, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x40, 0x2, 0x4}}, 0x14) 3.704006283s ago: executing program 0 (id=575): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x12000, 0x7, 0x3}, 0x30, 0x0) landlock_restrict_self(r4, 0xf) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x54, 0x0, &(0x7f00000005c0)=[@request_death, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000006c0)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000027c0)={0x50, 0x2f, r7, {0x7, 0x2d, 0xfffffff8, 0x40000, 0x8, 0x9, 0x8, 0x8, 0x0, 0x0, 0x100}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="c4c1c45cdab8003000000f23d00f21f835300000060f23f80fc76b4f0fbe15140000000f20e035000004000f22e0b8010000000f01c1ea0b000000230066bad104ec0f01c9b9800000c00f3235002000000f30", 0x53}], 0x1, 0x25, 0x0, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406d0432c500000000000109022400210000f04909040008010300030009210000000122070009058103ff03000f05"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 3.324375221s ago: executing program 4 (id=576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x2e, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) creat(&(0x7f0000000200)='./bus\x00', 0x84) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 2.844955054s ago: executing program 2 (id=577): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='devices.list\x00', 0x0, 0x0) r2 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000280)={r2, 0x0, 0x2d4100, &(0x7f00000000c0)={@align=0x993, {0x0, 0x7c, 0x5, 0x4}}, 0xfffffc01, 0x0, 0x0}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/19, 0x13}, {0x0}], &(0x7f0000000200)=[0xba], 0x11a}, 0x20) syz_usb_connect(0x3, 0x68f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x35, 0x20, 0xc7, 0x40, 0x55f, 0xc420, 0xc340, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67d, 0x2, 0xfc, 0xf7, 0x0, 0x81, "", [{{0x9, 0x4, 0x3b, 0x3, 0x9, 0x10, 0x63, 0xf2, 0x6, [@hid_hid={0x9, 0x21, 0x9ec, 0x0, 0x1, {0x22, 0x27e}}, @uac_control={{0xa, 0x24, 0x1, 0x7, 0x4c}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x404, 0x2, 0xde, 0x85, 0xd, 0x1}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x3, "de97139752"}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x8, "feb91881a0"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x402, 0x6, 0x5, 0x4, 0x1, 0xa3}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x2, 0x2, [0x5, 0x0], 0x7}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x8, "e88de3ae37f0"}]}], [{{0x9, 0x5, 0x7, 0x0, 0x400, 0x81, 0xc0, 0x8}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x8, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xa6, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x7f, 0x0, 0x1, [@generic={0x1d, 0x3, "3bb2d28903168896ab03543e1d50968f5e8de50eb307288260ade1"}, @generic={0x3d, 0xe, "5653b9bdbc05a3aa7749cfabcd2344700127f21224b0a20e4100750aeee59f72dcc005088482f8dfb7647cc874caceb6c80eb877e664d9f244c639"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x55fd23d7b5f514d2, 0xa, 0xe4, 0x2, [@generic={0x76, 0x4, "36f99175849d8c695fc8811428ef9b683d0d4a18de93613d592b6a931181d12cad066b90b5edcece0c9a673b38727a77ce4341de4209c72ae2fd8920121f71f45eff046a672eb4f8dceddaf4d2c3189df7c910bb41d5a2905e117322ed8c8972a9577af284585a948f07069f14e679fc61219931"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x2, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xb, 0x5, 0x2}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0xe, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x9}, @generic={0x5c, 0x30, "5e8c6954707dea9f2465dd941689b1f97df727e728cba57d2d44b3458034de7846a681fa7b1a1369db9053310361832b55db7da1cbacec3b5527a73fea12659a78986e462f09995901efe85ca2ba489048cac03d630cad589b29"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x7f, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xe7eb}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8f, 0x7}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x2, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x400}]}}]}}, {{0x9, 0x4, 0x4, 0x7, 0xd, 0xa0, 0xa3, 0x6d, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xba1, 0x1e}, [@mixer_unit={0x7, 0x24, 0x4, 0x3, 0xeb, 'Z<'}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x4, 0x3, [0x6, 0x5, 0x2], 0x9}]}, @hid_hid={0x9, 0x21, 0x60, 0x7, 0x1, {0x22, 0xb05}}], [{{0x9, 0x5, 0x2, 0xc, 0x200, 0x7, 0xa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x7f}, @generic={0x70, 0x22, "81dff2b5338675ddcf486072a6d16e61664f2ec07558a9e59ec4157101c10278a6f960c2bbb043822b419fb87a7d7202d11efd72cd6a63d6e3cafa1fee999e65d3109191ad06b376bb27e425aee78347d6ad5fb51dcfcb4dbc94aa471d6541378469543ff4d51953b3158c895eba"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x8, 0x10, 0x2, [@generic={0xea, 0xd, "65a1a3c983be2fdde06b94127759418035c8cbc7e59efb3bc2d72172c7477d987fea4a8089b60287e256a5e829215885d00591c84ebe6f96975debac1d557299fe8f4e562bb97b3ef551fc4159724d705a39a2e4c4c20da8d4fd3f4afcc87938bc86372b6da17b29276d8c7c736d213ab739e924e05d03d7e623388517c00213d12d792cf7d74b6274dc8262c2936ab1b1eccb3327876a7102ac57e9a9b8900cc65c3348b2c85b4a38117c6d5b5e74d945031534241346d6a87789c3c9ae8fabe7aa1d9c8b186297bb039bca35e92ec4eedeed45a0c8c5585eff7d2da83709cbda17e3eed8223fe2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb6, 0x4}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xa, 0x8e, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xd7f8}, @generic={0xab, 0xe, "309b4fb3011ac577468b8457ed05d4dffcf80a7166931c7cced61eda4a63cb07d0708e4c93aca9938710f55d95d2b51445d8c6b1f34d0e2922a084b8588e4750f436f01300c00b463c7642fbccca6de6f4acaf0d38df343f4bb62dca7eb28a7a6d14c44826b0adb81844a33d8d4ee2750ea52577b1e195d973dffe2ca86094752aebbfe6666081525f0528b24fa755780b64b54671bd8c0f2f55ece2e9db0544a8a145de6e1ffa6cd4"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xc, 0x2, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0x6}, @generic={0x17, 0xf, "25ccd155bc3c42693a7d118c89007d88122721bbd0"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x9, 0x0, 0x8}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x9, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7121}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x1, 0x32, 0xd9}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x6, 0xc0}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x5, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x7}, @generic={0xa7, 0xb, "6ff2c647bb7273579b17d2b737ecb2c1ef33909b37c9dc067aaf5a4ed6e1e3b109aaaf64ae5e28bbd20d2e7565fa09daef5d301d022eaed5316ce6f781f3cd76e8957fe56723ed87d70929ef21bc8124dc5d0aea953494f8d3c4110e881eaef10bfc5665da595fae0acc6f854878cedd30034bfb708666aba16a3a8c53088ad3cb3c90d08c5a62e96a24599ce03aa1f43411870fa2692e2a7df845cf18dd0348c94e74172c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0x9, 0x5, [@uac_iso={0x7}, @generic={0x9b, 0xa, "53a5ff400f637729b4cfc7f0e3ed2d8930f3ad27bfc8f86bd40d8ab3435193de75a70629d80a981084f960abb20f70495355ce64d6e9a040d1bac2a5e95fda0b039823055330175b747a00a4644236c1ae7abd9b54233a4c038943467ed59a2494c4883c256c339d174ab130686994d249a06b61419c3be363dda97b2d3d202b46920d8243dda2c46048f2210ee322dad07b1dcbb72aef45e3"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x8, 0xe, 0x4}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0xfe, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa4, 0x30}, @generic={0x26, 0xf, "1441df784e0ba93665d7849463171f9984a68400840cc5e80b868e8fe84c27aa43032fa7"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xf7, 0xf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x8}]}}]}}]}}]}}, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') openat(r3, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000001c0)={0x40000013}) 2.844322172s ago: executing program 3 (id=578): setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00@', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x23, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x0) 2.830007241s ago: executing program 4 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) file_setattr(r4, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd29, 0x25dfdbfb, {0x80, 0xa, 0x20, 0x73, 0xfd, 0x4, 0xfd, 0xd, 0x2000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5c095}, 0x0) getpeername(r0, &(0x7f0000000000)=@tipc=@id, &(0x7f0000000180)=0x80) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv4_getnexthop={0x20, 0x6a, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008041) 1.689443991s ago: executing program 4 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) shutdown(r1, 0x1) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.664104234s ago: executing program 3 (id=581): r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32, @ANYBLOB="0c000d80080003"], 0x24}], 0x1}, 0x2404c8c0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0xffffffee, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="e4000000", @ANYRES16, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES8=r3, @ANYBLOB="0c00990001"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 1.116266345s ago: executing program 4 (id=582): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x30000009, 0xa5f, 0x8}, @private=0xa010100, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0xc3, "d876537131504563f3914d54ea089b220acc73a6b0cf80208b816f0b123870a5cb7a8faad9c2265b585a222075e54a00c4a0f7a1740a48d5844d1fbcc935d14801b3dc03cef33a4555769b3e94db32de9d650a63bbea8bf30f83ca62d04cbca1fdbba956cae515c5e7d5fedfc901c19b05331b7714e9386fccda88c14ae71e62fbffe5d635d5c50aa906165c0256d01c8a72708a2417b3ea1d21e1d03c82401964c43ddab2aa6966679b3d7819fa4247bd84cbd7d7e7b4e2f4ec699dab7ba38f958304"}, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.110238221s ago: executing program 0 (id=583): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xd, 0x0, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000300)={0x0, &(0x7f0000000380)}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$inet6(0xa, 0x3, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000240)={0x6, 0x0, 0x6}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r6, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0xfffffffffffffe08, 0x7, r8, 0x0, 0x8001, 0x0, 0x7, 0x192647, 0x6cb63, 0x1000000}) socket$inet6_sctp(0xa, 0x5, 0x84) 1.076250443s ago: executing program 2 (id=584): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f00000000c0)='bfs\x00', 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a030700000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80100001800c000100636f756e7465720028000180090001006c617374000000001800028008000140000000040c0002400080"], 0xfc}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) 944.307567ms ago: executing program 3 (id=585): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb2/power/level\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='au', 0x2) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x180000000) 19.103092ms ago: executing program 5 (id=586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x0) 0s ago: executing program 3 (id=587): mkdir(&(0x7f0000000100)='my_sys\x00', 0x77) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) syz_emit_ethernet(0x76, &(0x7f0000000880)={@link_local, @random="0000fc00", @val={@val={0x88a8, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x7, 0x4, 0x1, 0x6, 0x60, 0x64, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0xe2, 0x0, 0x1, 0x1, 0x1, 0x8}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x2, 0x3, 0x0, 0x0, 0x6}, 0x2, {0x9c, 0xbd, 0x0, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = getpgrp(0x0) statx(0xffffffffffffffff, &(0x7f0000000e40)='my_sys\x00', 0x3800, 0x100, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) sendmsg$netlink(r3, &(0x7f0000001080)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)=[{&(0x7f0000000580)={0x1c8, 0x16, 0x209, 0x70bd27, 0x25dfdbfd, "", [@generic="ccacc41836cafcfc8feefc46d3e164ccd8a9d518755bb5cdd9bc900c571b4fd7e91221733ddb0e5fe4bfcfa496130383d92849e0041df75c84d394d754f4e6e8855a7fbe03bfd675fb54d8", @typed={0xc, 0x58, 0x0, 0x0, @u64=0xf}, @generic="89301b793514f3a9e72e8e47eec37a7fb305efafe17db39e1820e0a5cfc73173c2b8e7f3df978b3a6baf92e73030fd15ee", @nested={0x12d, 0xcb, 0x0, 0x1, [@generic="3096d37c94524cdca929034ee2eddf28702f287a0bdaf2a6bb6cdd0887dfb9d499c3057777fbdbb44fc1629ecf0349e0339606065c6555744ae85b7d900c5f168db23712676e38c91d1ae79b7c63849ce9641497d43accb18e8fc7eb81a58a5c53af06a05e4d07d9fc61119d2d1a2bed9ecf1969ee6b121df59a7bb84edcae00be87c9bacf614df996db57ad06b447c3a44ee5d746305d7d74127aaab5c1828a1e7447948698aabc71add6995195c8dce8544e7ce8401c93b8b95e18a03aee01f9729777cffe2bf20058877dada7b0550ae790ca04e9456f5a459358eea81f198548a6210c42e2362912c21bfd6f68e70d3c376913", @typed={0x17, 0xca, 0x0, 0x0, @str='./binderfs/binder0\x00'}, @typed={0x8, 0x61, 0x0, 0x0, @uid}, @typed={0x13, 0x50, 0x0, 0x0, @str='/dev/sequencer\x00'}]}]}, 0x1c8}, {&(0x7f0000000900)={0x41c, 0x2d, 0x8, 0x70bd25, 0x25dfdbff, "", [@generic="2f6a0b4929c10a53d0566d17faae7ea5982448b503a8bf74cdac990438f14f3ab0c319de36c29a0d8521a5ce1fb4daa0f8650e8603fd11c313bb6dcc4d1b7abaaa0abc4e8d1724de6b86656ddfa8730644272034333992876c2da2efe3adad920e2e450254533460b6af799ac50c96386eab5c7976705473d8e3929d1155b80014923c5891105b2c60e0af5a500631ca43f6e4c62b1e38a248055521b88b0dcdebfd6df4eb14844e15b65406122be03a20b24e35e69688ab406ca06497dfe29eb001188b91910ec62cd251c1f4ff7e50a2c7e542f397", @nested={0x1c, 0xd, 0x0, 0x1, [@nested={0x4, 0x65}, @typed={0x9, 0x14c, 0x0, 0x0, @str='5\x8a-%\x00'}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @nested={0xb3, 0x51, 0x0, 0x1, [@generic="3513e618d4cef2c4c138f4d1888a39eb30f5775f009019cca1121146e3982b6080124b6d5d1def1cc14d55c2a83758e1dea1d4879262df5865095973ec73aa61e34a637c2c2ce8cdb363b6e9fcb2b80e212b58d1df4be98f01d0d8fbb2aad0daaf098faa3e7968cf3af7b2d81d9e7d7b8b6eaecfa06ff9a7f36cdc6011bcc581e9febd3da00a6f019d10f9d7e8b8dfffd916e8e4922e2b256680bab67c8acb765ab28ccdb44954d4e2ec0d", @nested={0x4, 0x7e}]}, @nested={0x13f, 0x39, 0x0, 0x1, [@nested={0x4, 0xe2}, @typed={0xc3, 0xba, 0x0, 0x0, @binary="41efe4f0542140001564c739a5ebfbb135eba76d0d13f1083a28e7ec180fd0d49d3db84b602f97fcd4c1a40b3f447d0b0be29f112402cedf7b272e3f5efd055eb7cd76167898ad862c0ea085a039e34da9afabffacf6a745438c87fa65eb0e6015788ec5f9d950532d2a86280d69b219e8ba1f44661c3bb3b6dcef01ace92551f682d35edc40df3372d7b1f71504cde9bfc5663ea6fc250a64e884251ec70ed6b78824e3e96b1621d6e4961adc26a66fe87dea6770cdac6bd0af39b404f263"}, @typed={0x8, 0x12b, 0x0, 0x0, @fd=r4}, @generic="0744cdc9db902c74fc68e8eafb654896824394bac54c5fd99ef12fc8e62d94ef1edafaca3b97bc98cf68c7c0e1366d14e82e4740e328012adf766a825b8555ec01239fc665e0c4367c0a7761bdf82e02137058dcefcd2e0ba609e89f7598bbc29917816ca2bdef0b276688"]}, @typed={0x8, 0x8, 0x0, 0x0, @pid}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="b56111d0c4f52c01714983d00451a2ed56b9665557", @nested={0xe9, 0x18, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x149, 0x0, 0x0, @fd=r0}, @typed={0x7, 0xf0, 0x0, 0x0, @str=':{\x00'}, @generic="b2d449d897b87dec18badb60e0f0ac8984f27101ca078fdb5877d8a4b9fa2f1d67a31546bd36981687df4c1906666686d4f76522b28d62b8b93c3aafaef449d02b522dbfe56accd8a8b670b821a6c0bb4c56f97a5c73654aa9bce05b0036f8b537e1b9b66cf39a48ccd1f206242e50027540cc8a3fc0759d4ce79826e9c012ac2a88ef7855ac344e78d485d2916a069b979e2412ee2c4bc4969b7ad5a9f8a0d8cd9131381ba675686a661a6143d2663a63e4d778c065c3305e269373526dac71005cf201c21654c214825dadd0"]}, @typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@broadcast}]}, 0x41c}], 0x2, &(0x7f0000001000)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x10}}], 0x50, 0x4000000}, 0x8000) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24044010) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r8, 0x0) kernel console output (not intermixed with test programs): hed by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 111.904790][ T24] usb 2-1: setting power OFF [ 111.916213][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 111.942955][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 111.980758][ T24] (NULL device *): no alternate interface [ 112.205292][ T10] stadia 0003:18D1:9400.0001: unbalanced collection at end of report description [ 112.222896][ T10] stadia 0003:18D1:9400.0001: parse failed [ 112.229402][ T10] stadia 0003:18D1:9400.0001: probe with driver stadia failed with error -22 [ 112.306972][ T10] usb 1-1: USB disconnect, device number 4 [ 112.652716][ T6317] befs: (nullb0): invalid magic header [ 112.977110][ T42] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.147294][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 113.172833][ T42] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 113.205336][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 113.219254][ T42] usb 4-1: Product: syz [ 113.235511][ T42] usb 4-1: Manufacturer: syz [ 113.245019][ T42] usb 4-1: SerialNumber: syz [ 113.260208][ T42] usb 4-1: config 0 descriptor?? [ 113.277826][ T42] gspca_main: sq905-2.14.0 probing 2770:9120 [ 113.571428][ T6315] syz.4.130 (6315): drop_caches: 2 [ 113.682510][ T42] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 113.694003][ T42] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 113.715472][ T42] usb 4-1: USB disconnect, device number 8 [ 114.279545][ T6332] syzkaller0: entered promiscuous mode [ 114.327897][ T6332] syzkaller0: entered allmulticast mode [ 115.094383][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 115.094394][ T29] audit: type=1400 audit(1786338477.877:365): avc: denied { name_connect } for pid=6331 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 115.179312][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 115.890716][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 116.099046][ T29] audit: type=1400 audit(1786338478.887:366): avc: denied { mount } for pid=6349 comm="syz.3.140" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 116.255340][ T6352] FAULT_INJECTION: forcing a failure. [ 116.255340][ T6352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.285775][ T6352] CPU: 0 UID: 0 PID: 6352 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) [ 116.285799][ T6352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.285808][ T6352] Call Trace: [ 116.285813][ T6352] [ 116.285820][ T6352] dump_stack_lvl+0x100/0x190 [ 116.285848][ T6352] should_fail_ex.cold+0x5/0xa [ 116.285871][ T6352] _copy_to_user+0x32/0xd0 [ 116.285896][ T6352] simple_read_from_buffer+0xcb/0x170 [ 116.285917][ T6352] proc_fail_nth_read+0x1af/0x230 [ 116.285944][ T6352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.285972][ T6352] ? rw_verify_area+0xce/0x6d0 [ 116.285994][ T6352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.286020][ T6352] vfs_read+0x1e4/0xb40 [ 116.286048][ T6352] ? __pfx_vfs_read+0x10/0x10 [ 116.286072][ T6352] ? __fget_files+0x215/0x3d0 [ 116.286092][ T6352] ? __fget_files+0x21f/0x3d0 [ 116.286114][ T6352] ksys_read+0x12a/0x250 [ 116.286127][ T6352] ? __pfx_ksys_read+0x10/0x10 [ 116.286147][ T6352] do_syscall_64+0x115/0x870 [ 116.286167][ T6352] ? clear_bhb_loop+0x70/0xc0 [ 116.286186][ T6352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.286201][ T6352] RIP: 0033:0x7f7c7535e90e [ 116.286214][ T6352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 116.286228][ T6352] RSP: 002b:00007f7c76248fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.286243][ T6352] RAX: ffffffffffffffda RBX: 00007f7c762496c0 RCX: 00007f7c7535e90e [ 116.286253][ T6352] RDX: 000000000000000f RSI: 00007f7c762490a0 RDI: 0000000000000004 [ 116.286261][ T6352] RBP: 00007f7c76249090 R08: 0000000000000000 R09: 0000000000000000 [ 116.286269][ T6352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.286276][ T6352] R13: 00007f7c75626038 R14: 00007f7c75625fa0 R15: 00007fffa9d66028 [ 116.286297][ T6352] [ 116.308538][ T6354] syz.4.142 (6354): drop_caches: 2 [ 116.490032][ T5863] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 116.631759][ T29] audit: type=1400 audit(1786338479.417:367): avc: denied { create } for pid=6358 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.668329][ T29] audit: type=1400 audit(1786338479.447:368): avc: denied { connect } for pid=6358 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.668542][ T5863] usb 4-1: New USB device found, idVendor=813a, idProduct=9063, bcdDevice=89.00 [ 116.699716][ T29] audit: type=1400 audit(1786338479.447:369): avc: denied { write } for pid=6358 comm="syz.0.144" path="socket:[11290]" dev="sockfs" ino=11290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.699754][ T29] audit: type=1400 audit(1786338479.487:370): avc: denied { write } for pid=6358 comm="syz.0.144" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 116.757658][ T5863] usb 4-1: config 5 has an invalid interface number: 243 but max is 0 [ 116.757681][ T5863] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 116.757692][ T5863] usb 4-1: config 5 has no interface number 0 [ 116.759355][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.759380][ T5863] usb 4-1: Product: syz [ 116.759389][ T5863] usb 4-1: Manufacturer: syz [ 116.759398][ T5863] usb 4-1: SerialNumber: syz [ 116.763888][ T5863] rndis_host 4-1:5.243: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 116.832624][ T29] audit: type=1400 audit(1786338479.617:371): avc: denied { mount } for pid=6362 comm="syz.4.145" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 116.836612][ T29] audit: type=1400 audit(1786338479.617:372): avc: denied { search } for pid=6362 comm="syz.4.145" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 116.969631][ T5863] usb 4-1: USB disconnect, device number 9 [ 116.987575][ T29] audit: type=1400 audit(1786338479.677:373): avc: denied { shutdown } for pid=6362 comm="syz.4.145" lport=56737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.008872][ T29] audit: type=1400 audit(1786338479.697:374): avc: denied { read write } for pid=6362 comm="syz.4.145" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 117.480455][ T6376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.762806][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 119.883589][ T6398] syz.4.155 (6398): drop_caches: 2 [ 119.902096][ T6397] binder: 6393:6397 ioctl 4018620d 0 returned -22 [ 119.925974][ T6397] binder: 6393:6397 unknown command 6 [ 119.956759][ T6397] binder: 6393:6397 ioctl c0306201 200000000080 returned -22 [ 119.979226][ T6400] binder: 6393:6400 ioctl 7ac 2000000006c0 returned -22 [ 120.155017][ T6406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6406 comm=syz.4.157 [ 120.202043][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 120.202054][ T29] audit: type=1400 audit(1786338482.987:378): avc: denied { read } for pid=6407 comm="syz.0.158" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 120.237606][ T29] audit: type=1400 audit(1786338482.987:379): avc: denied { open } for pid=6407 comm="syz.0.158" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 120.262391][ T5863] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 120.359860][ T29] audit: type=1400 audit(1786338483.137:380): avc: denied { rename } for pid=6403 comm="syz.4.157" name="file0" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 120.397763][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 120.407115][ T5863] usb 4-1: device descriptor read/64, error -71 [ 120.417063][ T6406] netlink: 'syz.4.157': attribute type 30 has an invalid length. [ 120.438213][ T6406] vxlan0: entered promiscuous mode [ 120.443396][ T6406] vxlan0: entered allmulticast mode [ 120.467250][ T740] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.476662][ T1031] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.490086][ T1031] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.551636][ T1031] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.618414][ T6414] fuse: Bad value for 'group_id' [ 120.627097][ T6414] fuse: Bad value for 'group_id' [ 120.657084][ T5863] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 120.807199][ T5863] usb 4-1: device descriptor read/64, error -71 [ 121.010213][ T29] audit: type=1400 audit(1786338483.797:381): avc: denied { read write } for pid=6419 comm="syz.0.162" name="video1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.070490][ T5863] usb usb4-port1: attempt power cycle [ 121.116822][ T6421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.136053][ T29] audit: type=1400 audit(1786338483.817:382): avc: denied { open } for pid=6419 comm="syz.0.162" path="/dev/video1" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.216541][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 121.264447][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 121.277656][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 121.291282][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 121.478397][ T29] audit: type=1400 audit(1786338483.837:383): avc: denied { ioctl } for pid=6419 comm="syz.0.162" path="/dev/video1" dev="devtmpfs" ino=932 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.520385][ T5863] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 121.599286][ T5863] usb 4-1: device descriptor read/8, error -71 [ 121.757113][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 123.237153][ T5863] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 123.582024][ T5863] usb 4-1: device descriptor read/8, error -71 [ 123.666209][ T6429] befs: (nullb0): invalid magic header [ 123.698141][ T5863] usb usb4-port1: unable to enumerate USB device [ 123.880355][ T6437] syzkaller1: entered promiscuous mode [ 123.885992][ T6437] syzkaller1: entered allmulticast mode [ 124.088443][ T6436] syz.3.166 (6436): drop_caches: 2 [ 124.123918][ T29] audit: type=1400 audit(1786338486.907:384): avc: denied { mount } for pid=6440 comm="syz.0.168" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 124.150566][ T29] audit: type=1400 audit(1786338486.937:385): avc: denied { read write } for pid=6440 comm="syz.0.168" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 124.176488][ T29] audit: type=1400 audit(1786338486.937:386): avc: denied { open } for pid=6440 comm="syz.0.168" path="/41/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 124.217967][ T29] audit: type=1400 audit(1786338486.997:387): avc: denied { ioctl } for pid=6440 comm="syz.0.168" path="/41/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 124.227153][ T5700] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.578021][ T5722] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.597095][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 124.750076][ T5700] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 125.513685][ T5700] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 125.547064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 125.577265][ T5700] usb 3-1: can't read configurations, error -71 [ 125.841640][ T5722] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.859273][ T5722] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=c3.40 [ 125.983962][ T5722] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 125.994329][ T5722] usb 5-1: can't read configurations, error -71 [ 126.213616][ T6468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.048006][ T6470] jffs2: notice: (6470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 127.228904][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.240284][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.257694][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.275687][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.286407][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.665724][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.674338][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.745832][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 128.817217][ T5702] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.874709][ T6493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.554638][ T5598] Bluetooth: hci5: command tx timeout [ 129.648610][ T5702] usb 3-1: Using ep0 maxpacket: 32 [ 129.697754][ T5702] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 129.740450][ T5702] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 129.906313][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 129.932974][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 130.057078][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 130.083453][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.101454][ T5702] usb 3-1: Product: syz [ 130.108790][ T5702] usb 3-1: Manufacturer: syz [ 130.114058][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 130.125408][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 130.134913][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 130.144055][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 130.159013][ T5702] usb 3-1: SerialNumber: syz [ 130.184064][ T5702] usb 3-1: config 0 descriptor?? [ 130.207180][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 130.290334][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 130.290349][ T29] audit: type=1400 audit(1786338493.077:390): avc: denied { ioctl } for pid=6508 comm="syz.4.184" path="socket:[10988]" dev="sockfs" ino=10988 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.326771][ T6509] syzkaller0: entered promiscuous mode [ 130.329280][ T29] audit: type=1400 audit(1786338493.077:391): avc: denied { getopt } for pid=6484 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.334521][ T6509] syzkaller0: entered allmulticast mode [ 130.399729][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 130.464127][ T6510] FAT-fs (nbd0): unable to read boot sector [ 130.477274][ T10] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 130.544729][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 130.641585][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.721756][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.776517][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.922037][ T6509] gadgetfs: bound to dummy_udc driver [ 130.929123][ T10] usb 4-1: config 0 descriptor?? [ 131.194421][ T6490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.205242][ T6490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.380034][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 131.391033][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 131.640284][ T5598] Bluetooth: hci5: command tx timeout [ 131.979982][ T10] usb 4-1: USB disconnect, device number 14 [ 132.692325][ T42] usb 3-1: USB disconnect, device number 9 [ 132.709218][ T6531] netlink: 'syz.4.188': attribute type 21 has an invalid length. [ 132.827265][ T29] audit: type=1400 audit(1786338495.607:392): avc: denied { remount } for pid=6530 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.869731][ T6526] syz.3.189 (6526): drop_caches: 2 [ 133.196132][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.205696][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.213007][ T6471] bridge_slave_0: entered allmulticast mode [ 133.220847][ T6471] bridge_slave_0: entered promiscuous mode [ 133.240663][ T6537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.191'. [ 133.263028][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.280906][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.312472][ T6471] bridge_slave_1: entered allmulticast mode [ 133.320009][ T5700] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.333767][ T6471] bridge_slave_1: entered promiscuous mode [ 133.449767][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 133.518370][ T5700] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 133.587339][ T5700] usb 5-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 133.649654][ T5700] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 133.792421][ T5700] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.820187][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.849213][ T5598] Bluetooth: hci5: command tx timeout [ 133.965417][ T5700] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.003335][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.061560][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.243823][ T5700] usb 5-1: config 0 descriptor?? [ 134.643293][ T6471] team0: Port device team_slave_0 added [ 134.655904][ T6471] team0: Port device team_slave_1 added [ 134.719726][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.769841][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.821435][ T6558] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 134.830322][ T6558] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 134.839160][ T6558] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 134.950465][ T6531] MTD: Couldn't look up './dev/mtdblock0': -2 [ 135.130575][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.179444][ T5700] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 135.246274][ T5700] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 135.334066][ T5700] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 135.433818][ T5700] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 135.443122][ T5723] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 135.533832][ T5700] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 135.631686][ T5700] logitech-djreceiver 0003:046D:C532.0002: unknown main item tag 0x0 [ 135.654545][ T5723] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 135.673609][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.684764][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.714711][ T5700] usb 5-1: USB disconnect, device number 10 [ 135.732464][ T5723] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 135.748335][ T5723] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 135.772248][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.783123][ T5723] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.843481][ T5723] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.879241][ T5598] Bluetooth: hci5: command tx timeout [ 135.914040][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.023675][ T5723] usb 4-1: config 0 descriptor?? [ 136.093113][ T29] audit: type=1400 audit(1786338498.877:393): avc: denied { create } for pid=6567 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.335379][ T29] audit: type=1400 audit(1786338498.967:394): avc: denied { connect } for pid=6567 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.625766][ T5723] usbhid 4-1:0.0: can't add hid device: -71 [ 136.691026][ T5723] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 136.809724][ T5723] usb 4-1: USB disconnect, device number 15 [ 136.889741][ T6471] hsr_slave_0: entered promiscuous mode [ 136.994723][ T6471] hsr_slave_1: entered promiscuous mode [ 137.381780][ T6471] debugfs: 'hsr0' already exists in 'hsr' [ 137.543656][ T6471] Cannot create hsr debugfs directory [ 137.561373][ T6576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.201'. [ 137.874688][ T29] audit: type=1400 audit(1786338500.657:395): avc: denied { read } for pid=6584 comm="syz.2.203" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.716409][ T29] audit: type=1400 audit(1786338500.657:396): avc: denied { open } for pid=6584 comm="syz.2.203" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.779556][ T29] audit: type=1400 audit(1786338500.737:397): avc: denied { ioctl } for pid=6584 comm="syz.2.203" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.047812][ T6598] jffs2: notice: (6598) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 139.172875][ T29] audit: type=1400 audit(1786338501.957:398): avc: denied { write } for pid=6597 comm="syz.2.207" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.362831][ T6603] syzkaller0: entered promiscuous mode [ 139.397920][ T6603] syzkaller0: entered allmulticast mode [ 141.878086][ T6471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.176735][ T6471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.200184][ T6471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.254131][ T6471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.304637][ T6471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.349756][ T6471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.375021][ T6471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.376667][ T6621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.214'. [ 142.411138][ T6471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.448282][ T5723] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 142.464262][ T29] audit: type=1400 audit(1786338505.247:399): avc: denied { map } for pid=6626 comm="syz.4.215" path="socket:[12695]" dev="sockfs" ino=12695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 142.607825][ T5723] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 142.633842][ T5723] usb 3-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 142.634123][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.687732][ T5723] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 142.708380][ T5723] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.720352][ T5723] usb 3-1: config 0 interface 0 has no altsetting 0 [ 142.727455][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.763137][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.788124][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.795255][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.826170][ T5723] usb 3-1: config 0 descriptor?? [ 142.833306][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.840435][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.120354][ T29] audit: type=1400 audit(1786338505.907:400): avc: denied { mount } for pid=6636 comm="syz.4.217" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 143.296099][ T5723] usbhid 3-1:0.0: can't add hid device: -71 [ 143.304470][ T5723] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 143.324351][ T5723] usb 3-1: USB disconnect, device number 10 [ 143.329760][ T29] audit: type=1400 audit(1786338506.107:401): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 144.347621][ T5722] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 144.547068][ T5722] usb 5-1: Using ep0 maxpacket: 8 [ 145.409906][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.436539][ T5722] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 145.484477][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 145.517049][ T5722] usb 5-1: Product: syz [ 145.523094][ T5722] usb 5-1: Manufacturer: syz [ 145.537470][ T5722] usb 5-1: SerialNumber: syz [ 145.564647][ T5722] usb 5-1: config 0 descriptor?? [ 145.600297][ T5722] gspca_main: sq905-2.14.0 probing 2770:9120 [ 146.008768][ T5722] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 146.037815][ T5722] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 146.089741][ T5722] usb 5-1: USB disconnect, device number 11 [ 146.093677][ T6471] veth0_vlan: entered promiscuous mode [ 146.107398][ T6471] veth1_vlan: entered promiscuous mode [ 146.160727][ T6471] veth0_macvtap: entered promiscuous mode [ 146.183977][ T6471] veth1_macvtap: entered promiscuous mode [ 146.220964][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.249298][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.357630][ T1342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.387757][ T29] audit: type=1400 audit(1786338509.167:402): avc: denied { bind } for pid=6674 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.420116][ T1342] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.458882][ T29] audit: type=1400 audit(1786338509.237:403): avc: denied { setopt } for pid=6674 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.533020][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.550157][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.608086][ T6679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.624478][ T29] audit: type=1400 audit(1786338509.407:404): avc: denied { create } for pid=6680 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.661775][ T3374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.677164][ T184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.692204][ T3374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.703070][ T184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.720925][ T29] audit: type=1400 audit(1786338509.407:405): avc: denied { setopt } for pid=6680 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.947253][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 147.035706][ T29] audit: type=1400 audit(1786338509.817:406): avc: denied { mounton } for pid=6471 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 147.265607][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 147.285544][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 147.297185][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 147.388709][ T6696] netlink: 132 bytes leftover after parsing attributes in process `syz.0.229'. [ 147.585038][ T29] audit: type=1400 audit(1786338510.367:407): avc: denied { bind } for pid=6700 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.571162][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.173'. [ 149.382325][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.173'. [ 149.393976][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.173'. [ 149.403858][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.173'. [ 149.528337][ T6706] tipc: Failed to obtain node identity [ 149.563644][ T6706] tipc: Enabling of bearer rejected, failed to enable media [ 149.790712][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 149.810602][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 149.823256][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 149.835844][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 150.066086][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 150.267505][ T5722] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 150.957060][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 151.095760][ T5722] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 151.141165][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 151.149962][ T5722] usb 4-1: Product: syz [ 151.171196][ T5722] usb 4-1: Manufacturer: syz [ 151.211257][ T5722] usb 4-1: SerialNumber: syz [ 151.238067][ T5722] usb 4-1: config 0 descriptor?? [ 151.290415][ T5722] gspca_main: sq905-2.14.0 probing 2770:9120 [ 151.294875][ T29] audit: type=1400 audit(1786338514.077:408): avc: denied { mount } for pid=6733 comm="syz.4.240" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 151.661639][ T29] audit: type=1400 audit(1786338514.447:409): avc: denied { execute } for pid=6744 comm="syz.0.234" name="cgroup" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 151.688086][ T5722] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 151.741982][ T5722] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 151.779585][ T5722] usb 4-1: USB disconnect, device number 16 [ 152.128209][ T6752] program syz.4.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.164756][ T29] audit: type=1400 audit(1786338514.897:410): avc: denied { append } for pid=6748 comm="syz.4.243" name="sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.328455][ T29] audit: type=1400 audit(1786338514.897:411): avc: denied { open } for pid=6748 comm="syz.4.243" path="/dev/sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 152.589422][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 154.395927][ T29] audit: type=1400 audit(1786338517.177:412): avc: denied { node_bind } for pid=6763 comm="syz.0.248" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 155.048521][ T29] audit: type=1400 audit(1786338517.827:413): avc: denied { read } for pid=6763 comm="syz.0.248" path="socket:[14458]" dev="sockfs" ino=14458 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 155.075578][ T6770] jffs2: notice: (6770) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 155.221916][ T6775] FAULT_INJECTION: forcing a failure. [ 155.221916][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 155.245615][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.4.251 Not tainted syzkaller #0 PREEMPT(full) [ 155.245641][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.245651][ T6775] Call Trace: [ 155.245656][ T6775] [ 155.245663][ T6775] dump_stack_lvl+0x100/0x190 [ 155.245689][ T6775] should_fail_ex.cold+0x5/0xa [ 155.245708][ T6775] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 155.245737][ T6775] should_failslab+0xc2/0x120 [ 155.245761][ T6775] kmem_cache_alloc_noprof+0x91/0x6a0 [ 155.245783][ T6775] ? skb_clone+0x190/0x400 [ 155.245809][ T6775] skb_clone+0x190/0x400 [ 155.245832][ T6775] netlink_deliver_tap+0xaed/0xcc0 [ 155.245855][ T6775] netlink_unicast+0x62b/0x850 [ 155.245879][ T6775] ? __pfx_netlink_unicast+0x10/0x10 [ 155.245904][ T6775] netlink_sendmsg+0x8b0/0xda0 [ 155.245926][ T6775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.245948][ T6775] ? selinux_socket_sendmsg+0x198/0x2f0 [ 155.245978][ T6775] ____sys_sendmsg+0xa4d/0xbe0 [ 155.246010][ T6775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.246032][ T6775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.246071][ T6775] ___sys_sendmsg+0x190/0x1e0 [ 155.246089][ T6775] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.246105][ T6775] ? __lock_acquire+0x49f/0x1a40 [ 155.246128][ T6775] ? get_pid_task+0x106/0x250 [ 155.246170][ T6775] __sys_sendmsg+0x160/0x210 [ 155.246193][ T6775] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.246228][ T6775] do_syscall_64+0x115/0x870 [ 155.246251][ T6775] ? clear_bhb_loop+0x70/0xc0 [ 155.246273][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.246291][ T6775] RIP: 0033:0x7f1f6839e0d9 [ 155.246306][ T6775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.246322][ T6775] RSP: 002b:00007f1f69304028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.246339][ T6775] RAX: ffffffffffffffda RBX: 00007f1f68625fa0 RCX: 00007f1f6839e0d9 [ 155.246350][ T6775] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 155.246360][ T6775] RBP: 00007f1f69304090 R08: 0000000000000000 R09: 0000000000000000 [ 155.246370][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.246380][ T6775] R13: 00007f1f68626038 R14: 00007f1f68625fa0 R15: 00007ffeb2011b88 [ 155.246404][ T6775] [ 155.508457][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 155.534188][ T6779] batadv0: entered promiscuous mode [ 155.551554][ T6779] macsec1: entered promiscuous mode [ 155.574102][ T6779] macsec1: entered allmulticast mode [ 155.603322][ T6779] batadv0: entered allmulticast mode [ 155.641543][ T6779] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 155.664405][ T6779] batadv0: left allmulticast mode [ 155.769130][ T6779] batadv0: left promiscuous mode [ 156.103006][ T6788] lo: entered allmulticast mode [ 156.617258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 156.811525][ T5863] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 156.852587][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 156.966633][ T6800] FAT-fs (nbd4): unable to read boot sector [ 156.978547][ T5863] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 156.992509][ T5863] usb 4-1: string descriptor 0 read error: -22 [ 157.003294][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.016481][ T5863] usb 4-1: config 0 descriptor?? [ 157.030990][ T5863] usbtest 4-1:0.0: FX2 device [ 157.044825][ T5863] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 157.393661][ T29] audit: type=1400 audit(1786338519.997:414): avc: denied { bind } for pid=6801 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.469246][ T29] audit: type=1400 audit(1786338520.007:415): avc: denied { listen } for pid=6801 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.521130][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 157.544874][ T6808] netlink: 212 bytes leftover after parsing attributes in process `syz.4.260'. [ 157.555407][ T6808] netlink: 32 bytes leftover after parsing attributes in process `syz.4.260'. [ 157.581711][ T6810] FAULT_INJECTION: forcing a failure. [ 157.581711][ T6810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.596785][ T6810] CPU: 1 UID: 0 PID: 6810 Comm: syz.0.261 Not tainted syzkaller #0 PREEMPT(full) [ 157.596808][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.596817][ T6810] Call Trace: [ 157.596822][ T6810] [ 157.596828][ T6810] dump_stack_lvl+0x100/0x190 [ 157.596854][ T6810] should_fail_ex.cold+0x5/0xa [ 157.596875][ T6810] _copy_to_user+0x32/0xd0 [ 157.596900][ T6810] bpf_test_finish.isra.0+0x4aa/0x650 [ 157.596931][ T6810] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 157.596962][ T6810] ? eth_type_trans+0x2e3/0x720 [ 157.596981][ T6810] bpf_prog_test_run_skb+0x248e/0x3540 [ 157.597009][ T6810] ? __fget_files+0x1d1/0x3d0 [ 157.597033][ T6810] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 157.597052][ T6810] ? fput+0x79/0x100 [ 157.597074][ T6810] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 157.597092][ T6810] __sys_bpf+0x2a12/0x4e80 [ 157.597117][ T6810] ? __pfx___sys_bpf+0x10/0x10 [ 157.597135][ T6810] ? find_held_lock+0x2b/0x80 [ 157.597151][ T6810] ? get_pid_task+0xfc/0x250 [ 157.597167][ T6810] ? get_pid_task+0xfc/0x250 [ 157.597191][ T6810] ? find_held_lock+0x2b/0x80 [ 157.597212][ T6810] ? rcu_read_lock_any_held+0x6a/0xa0 [ 157.597229][ T6810] ? find_held_lock+0x2b/0x80 [ 157.597244][ T6810] ? ksys_write+0x190/0x250 [ 157.597260][ T6810] ? ksys_write+0x190/0x250 [ 157.597292][ T6810] ? fput+0x79/0x100 [ 157.597316][ T6810] ? __x64_sys_bpf+0xce/0x140 [ 157.597333][ T6810] __x64_sys_bpf+0xce/0x140 [ 157.597351][ T6810] ? do_syscall_64+0x90/0x870 [ 157.597375][ T6810] do_syscall_64+0x115/0x870 [ 157.597396][ T6810] ? clear_bhb_loop+0x70/0xc0 [ 157.597417][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.597433][ T6810] RIP: 0033:0x7f7c7539e0d9 [ 157.597449][ T6810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.597465][ T6810] RSP: 002b:00007f7c76249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.597481][ T6810] RAX: ffffffffffffffda RBX: 00007f7c75625fa0 RCX: 00007f7c7539e0d9 [ 157.597498][ T6810] RDX: 0000000000000024 RSI: 0000200000000040 RDI: 000000000000000a [ 157.597508][ T6810] RBP: 00007f7c76249090 R08: 0000000000000000 R09: 0000000000000000 [ 157.597518][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.597527][ T6810] R13: 00007f7c75626038 R14: 00007f7c75625fa0 R15: 00007fffa9d66028 [ 157.597551][ T6810] [ 157.909402][ T5700] usb 4-1: USB disconnect, device number 17 [ 158.059790][ T29] audit: type=1400 audit(1786338520.847:416): avc: denied { create } for pid=6817 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.107362][ T29] audit: type=1400 audit(1786338520.877:417): avc: denied { write } for pid=6817 comm="syz.0.264" name="cluster" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.176158][ T29] audit: type=1400 audit(1786338520.877:418): avc: denied { add_name } for pid=6817 comm="syz.0.264" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.200074][ T6818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.233434][ T29] audit: type=1400 audit(1786338520.877:419): avc: denied { create } for pid=6817 comm="syz.0.264" name="mycluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 158.310769][ T29] audit: type=1400 audit(1786338520.887:420): avc: denied { write } for pid=6817 comm="syz.0.264" name="node" dev="configfs" ino=14577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.343928][ T5723] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 158.436419][ T29] audit: type=1400 audit(1786338520.887:421): avc: denied { write } for pid=6817 comm="syz.0.264" name="ipv4_address" dev="configfs" ino=14581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 159.071761][ T5723] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 159.090981][ T5723] usb 6-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 159.106151][ T5723] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 159.115633][ T5723] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.132053][ T5723] usb 6-1: config 0 interface 0 has no altsetting 0 [ 159.249552][ T5723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.461388][ T5723] usb 6-1: config 0 descriptor?? [ 159.531120][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 159.878659][ T6847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.977037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 161.073870][ T5723] usbhid 6-1:0.0: can't add hid device: -71 [ 161.109313][ T5723] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 161.151399][ T5723] usb 6-1: USB disconnect, device number 2 [ 161.196496][ T6859] FAULT_INJECTION: forcing a failure. [ 161.196496][ T6859] name failslab, interval 1, probability 0, space 0, times 0 [ 161.254587][ T6859] CPU: 1 UID: 0 PID: 6859 Comm: syz.5.275 Not tainted syzkaller #0 PREEMPT(full) [ 161.254615][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 161.254625][ T6859] Call Trace: [ 161.254632][ T6859] [ 161.254639][ T6859] dump_stack_lvl+0x100/0x190 [ 161.254668][ T6859] should_fail_ex.cold+0x5/0xa [ 161.254691][ T6859] should_failslab+0xc2/0x120 [ 161.254716][ T6859] __kvmalloc_node_noprof+0x116/0x970 [ 161.254737][ T6859] ? net_generic+0xea/0x2a0 [ 161.254756][ T6859] ? nf_tables_newset+0x2520/0x4250 [ 161.254786][ T6859] nf_tables_newset+0x2520/0x4250 [ 161.254819][ T6859] ? rcu_is_watching+0x12/0xc0 [ 161.254846][ T6859] ? __pfx_nf_tables_newset+0x10/0x10 [ 161.254873][ T6859] ? reacquire_held_locks+0xce/0x1e0 [ 161.254896][ T6859] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.254919][ T6859] ? __nla_validate_parse+0x1e7/0x28b0 [ 161.254954][ T6859] ? __nla_parse+0x40/0x60 [ 161.254975][ T6859] nfnetlink_rcv_batch+0x1410/0x2880 [ 161.255013][ T6859] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 161.255036][ T6859] ? find_held_lock+0x2b/0x80 [ 161.255068][ T6859] ? avc_has_perm_noaudit+0x145/0x3b0 [ 161.255112][ T6859] ? __nla_parse+0x40/0x60 [ 161.255132][ T6859] nfnetlink_rcv+0x3bd/0x440 [ 161.255154][ T6859] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 161.255182][ T6859] netlink_unicast+0x585/0x850 [ 161.255202][ T6859] ? __pfx_netlink_unicast+0x10/0x10 [ 161.255219][ T6859] ? __pfx_sock_has_perm+0x10/0x10 [ 161.255245][ T6859] netlink_sendmsg+0x8b0/0xda0 [ 161.255268][ T6859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.255289][ T6859] ? selinux_socket_sendmsg+0x198/0x2f0 [ 161.255316][ T6859] ____sys_sendmsg+0xa4d/0xbe0 [ 161.255342][ T6859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.255362][ T6859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.255399][ T6859] ___sys_sendmsg+0x190/0x1e0 [ 161.255417][ T6859] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.255432][ T6859] ? __lock_acquire+0x49f/0x1a40 [ 161.255450][ T6859] ? get_pid_task+0x106/0x250 [ 161.255496][ T6859] __sys_sendmsg+0x160/0x210 [ 161.255518][ T6859] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.255551][ T6859] do_syscall_64+0x115/0x870 [ 161.255572][ T6859] ? clear_bhb_loop+0x70/0xc0 [ 161.255610][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.255626][ T6859] RIP: 0033:0x7f7cad19e0d9 [ 161.255641][ T6859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.255657][ T6859] RSP: 002b:00007f7cadffc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.255673][ T6859] RAX: ffffffffffffffda RBX: 00007f7cad425fa0 RCX: 00007f7cad19e0d9 [ 161.255684][ T6859] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 161.255693][ T6859] RBP: 00007f7cadffc090 R08: 0000000000000000 R09: 0000000000000000 [ 161.255702][ T6859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.255711][ T6859] R13: 00007f7cad426038 R14: 00007f7cad425fa0 R15: 00007ffc06c89f28 [ 161.255733][ T6859] [ 161.711197][ T6865] FAT-fs (nbd4): unable to read boot sector [ 161.990770][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.401116][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 162.410666][ T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 162.590336][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 162.627066][ T10] usb 3-1: Product: syz [ 162.652671][ T10] usb 3-1: Manufacturer: syz [ 162.694918][ T10] usb 3-1: SerialNumber: syz [ 162.724115][ T10] usb 3-1: config 0 descriptor?? [ 162.759376][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 163.155670][ T10] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 163.183255][ T10] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 163.247290][ T10] usb 3-1: USB disconnect, device number 11 [ 163.318227][ T6900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.349785][ T6902] FAT-fs (nbd3): unable to read boot sector [ 164.759616][ T6911] program syz.0.288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.073456][ T6917] FAT-fs (nbd3): unable to read boot sector [ 167.117436][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.5.294'. [ 167.127468][ T6931] netlink: 212 bytes leftover after parsing attributes in process `syz.5.294'. [ 167.136438][ T6931] netlink: 32 bytes leftover after parsing attributes in process `syz.5.294'. [ 167.357350][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'. [ 167.399179][ T6933] netlink: 212 bytes leftover after parsing attributes in process `syz.0.295'. [ 167.442937][ T6933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.295'. [ 167.571944][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 167.571963][ T29] audit: type=1400 audit(1786338530.347:428): avc: denied { bind } for pid=6938 comm="syz.3.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.896851][ T6923] IPVS: You probably need to specify IP address on multicast interface. [ 168.961704][ T6923] IPVS: Error connecting to the multicast addr [ 168.998257][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.301'. [ 169.188059][ T6967] FAT-fs (nbd3): unable to read boot sector [ 169.217658][ T6966] syzkaller0: entered promiscuous mode [ 169.242252][ T6966] syzkaller0: entered allmulticast mode [ 169.263063][ T6968] tipc: Started in network mode [ 169.273209][ T6968] tipc: Node identity e22df21268be, cluster identity 4711 [ 169.295950][ T6968] tipc: Enabled bearer , priority 0 [ 169.331879][ T6971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.348425][ T29] audit: type=1400 audit(1786338532.137:429): avc: denied { getopt } for pid=6963 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.484900][ T6963] tipc: Resetting bearer [ 169.554386][ T6963] tipc: Disabling bearer [ 169.758742][ T6977] program syz.0.305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.125541][ T29] audit: type=1400 audit(1786338532.887:430): avc: denied { ioctl } for pid=6979 comm="syz.2.307" path="socket:[13963]" dev="sockfs" ino=13963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.298273][ T5863] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 170.738889][ T5863] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 170.839048][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.911193][ T5863] usb 4-1: Product: syz [ 170.962820][ T5863] usb 4-1: Manufacturer: syz [ 171.001312][ T5863] usb 4-1: SerialNumber: syz [ 171.299924][ T5863] usb 4-1: config 0 descriptor?? [ 171.329459][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a262000: rx timeout, send abort [ 171.339958][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a262000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 171.388015][ T29] audit: type=1400 audit(1786338534.147:431): avc: denied { read } for pid=4946 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 171.410192][ T29] audit: type=1400 audit(1786338534.147:432): avc: denied { search } for pid=4946 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.432032][ T29] audit: type=1400 audit(1786338534.157:433): avc: denied { write search } for pid=4946 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.454245][ T29] audit: type=1400 audit(1786338534.157:434): avc: denied { add_name } for pid=4946 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.475943][ T29] audit: type=1400 audit(1786338534.157:435): avc: denied { create } for pid=4946 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.497322][ T29] audit: type=1400 audit(1786338534.207:436): avc: denied { append open } for pid=4946 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.521553][ T29] audit: type=1400 audit(1786338534.207:437): avc: denied { getattr } for pid=4946 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.697733][ T6985] capability: warning: `syz.4.309' uses deprecated v2 capabilities in a way that may be insecure [ 171.996559][ T6992] FAT-fs (nbd5): unable to read boot sector [ 172.498148][ T6980] No such timeout policy "syz1" [ 172.509049][ T5863] usb 4-1: Firmware version (0.0) predates our first public release. [ 172.518078][ T5863] usb 4-1: Please update to version 0.2 or newer [ 172.616582][ T7006] tipc: Started in network mode [ 172.627218][ T5863] usb 4-1: USB disconnect, device number 18 [ 172.648376][ T5702] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.649336][ T7006] tipc: Node identity eaed671a5478, cluster identity 4711 [ 172.715122][ T7006] tipc: Enabled bearer , priority 0 [ 172.837328][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 172.843532][ T7009] FAT-fs (nbd0): unable to read boot sector [ 172.852584][ T5702] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 172.909948][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 172.949676][ T5702] usb 5-1: Product: syz [ 172.970126][ T5702] usb 5-1: Manufacturer: syz [ 172.994493][ T5702] usb 5-1: SerialNumber: syz [ 173.133152][ T5702] usb 5-1: config 0 descriptor?? [ 173.181994][ T5702] gspca_main: sq905-2.14.0 probing 2770:9120 [ 173.257021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 173.287028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 173.570334][ T5702] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 173.573346][ T7005] tipc: Disabling bearer [ 173.589272][ T5702] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 173.617754][ T5702] usb 5-1: USB disconnect, device number 12 [ 174.010118][ T7026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.027343][ T7028] FAT-fs (nbd3): unable to read boot sector [ 174.305473][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 174.339663][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 174.352355][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 174.362960][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 175.902247][ T7056] FAT-fs (nbd4): unable to read boot sector [ 175.925561][ T7054] FAT-fs (nbd3): unable to read boot sector [ 175.948604][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.326'. [ 176.368956][ T7061] tmpfs: Unknown parameter 'grpquota_block_hardli' [ 176.837492][ T7067] FAT-fs (nbd5): unable to read boot sector [ 177.032277][ T29] audit: type=1400 audit(1786338539.787:438): avc: denied { create } for pid=7059 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.493814][ T7080] FAULT_INJECTION: forcing a failure. [ 177.493814][ T7080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.517601][ T7080] CPU: 1 UID: 0 PID: 7080 Comm: syz.5.334 Not tainted syzkaller #0 PREEMPT(full) [ 177.517628][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 177.517638][ T7080] Call Trace: [ 177.517644][ T7080] [ 177.517651][ T7080] dump_stack_lvl+0x100/0x190 [ 177.517678][ T7080] should_fail_ex.cold+0x5/0xa [ 177.517700][ T7080] _copy_from_user+0x2e/0xd0 [ 177.517727][ T7080] copy_msghdr_from_user+0x9f/0x4c0 [ 177.517747][ T7080] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 177.517776][ T7080] ___sys_sendmsg+0x106/0x1e0 [ 177.517795][ T7080] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.517809][ T7080] ? __lock_acquire+0x49f/0x1a40 [ 177.517832][ T7080] ? get_pid_task+0x106/0x250 [ 177.517900][ T7080] __sys_sendmsg+0x160/0x210 [ 177.517924][ T7080] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.517960][ T7080] do_syscall_64+0x115/0x870 [ 177.517985][ T7080] ? clear_bhb_loop+0x70/0xc0 [ 177.518007][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.518025][ T7080] RIP: 0033:0x7f7cad19e0d9 [ 177.518040][ T7080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.518057][ T7080] RSP: 002b:00007f7cadffc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.518075][ T7080] RAX: ffffffffffffffda RBX: 00007f7cad425fa0 RCX: 00007f7cad19e0d9 [ 177.518086][ T7080] RDX: 0000000000044840 RSI: 0000200000000280 RDI: 0000000000000008 [ 177.518096][ T7080] RBP: 00007f7cadffc090 R08: 0000000000000000 R09: 0000000000000000 [ 177.518106][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.518116][ T7080] R13: 00007f7cad426038 R14: 00007f7cad425fa0 R15: 00007ffc06c89f28 [ 177.518140][ T7080] [ 178.134320][ T7082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.437881][ T29] audit: type=1400 audit(1786338541.227:439): avc: denied { read } for pid=7089 comm="syz.3.337" name="sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 178.474304][ T7090] netlink: 168 bytes leftover after parsing attributes in process `syz.3.337'. [ 178.546937][ T29] audit: type=1400 audit(1786338541.257:440): avc: denied { ioctl } for pid=7089 comm="syz.3.337" path="/dev/sg0" dev="devtmpfs" ino=788 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 179.109371][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 179.141098][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 179.154315][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 179.164831][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 179.488896][ T7114] FAT-fs (nbd5): unable to read boot sector [ 179.830961][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 179.890618][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 179.906538][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.344'. [ 180.107213][ T5770] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 180.309428][ T5770] usb 4-1: Using ep0 maxpacket: 8 [ 180.335312][ T5770] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.363009][ T5770] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.378375][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.349'. [ 180.380060][ T5770] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.400698][ T5770] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 180.414298][ T5770] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 180.429676][ T5770] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 180.469790][ T5770] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.510175][ T7137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.581766][ T7138] FAT-fs (nbd4): unable to read boot sector [ 180.588139][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.881217][ T29] audit: type=1400 audit(1786338543.617:441): avc: denied { create } for pid=7141 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 181.122677][ T5770] usb 4-1: GET_CAPABILITIES returned 0 [ 181.151050][ T5770] usbtmc 4-1:16.0: can't read capabilities [ 181.175994][ T29] audit: type=1400 audit(1786338543.697:442): avc: denied { getopt } for pid=7141 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 181.383495][ T7148] x_tables: unsorted underflow at hook 2 [ 181.808174][ T5770] usb 4-1: USB disconnect, device number 19 [ 183.236361][ T7155] kthread_run failed with err -4 [ 183.496389][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 183.547500][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 183.564535][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 183.576427][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 183.954785][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 183.994683][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 185.627435][ T7185] __nla_validate_parse: 2 callbacks suppressed [ 185.627448][ T7185] netlink: 136 bytes leftover after parsing attributes in process `syz.2.360'. [ 185.659255][ T7183] FAT-fs (nbd3): unable to read boot sector [ 186.731159][ T7191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.573279][ T7195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.364'. [ 188.356799][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 188.393305][ T7210] dummy0: entered allmulticast mode [ 188.434140][ T7209] dummy0: left allmulticast mode [ 189.240815][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.250208][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.915250][ T4915] Bluetooth: hci4: unexpected subevent 0x10 length: 30 > 2 [ 190.006776][ T7227] FAULT_INJECTION: forcing a failure. [ 190.006776][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 190.025412][ T7227] CPU: 1 UID: 0 PID: 7227 Comm: syz.5.372 Not tainted syzkaller #0 PREEMPT(full) [ 190.025437][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 190.025447][ T7227] Call Trace: [ 190.025453][ T7227] [ 190.025461][ T7227] dump_stack_lvl+0x100/0x190 [ 190.025490][ T7227] should_fail_ex.cold+0x5/0xa [ 190.025510][ T7227] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 190.025540][ T7227] should_failslab+0xc2/0x120 [ 190.025564][ T7227] kmem_cache_alloc_noprof+0x91/0x6a0 [ 190.025587][ T7227] ? skb_clone+0x190/0x400 [ 190.025615][ T7227] skb_clone+0x190/0x400 [ 190.025638][ T7227] netlink_deliver_tap+0xaed/0xcc0 [ 190.025658][ T7227] ? _raw_read_unlock_irqrestore+0x52/0x80 [ 190.025685][ T7227] netlink_broadcast_filtered+0x989/0xf20 [ 190.025715][ T7227] xfrm_send_acquire+0x8be/0xd00 [ 190.025739][ T7227] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 190.025766][ T7227] ? lockdep_init_map_type+0x5c/0x250 [ 190.025794][ T7227] km_query+0xb4/0x260 [ 190.025815][ T7227] xfrm_state_find+0x3f87/0x92e0 [ 190.025853][ T7227] ? __pfx_xfrm_state_find+0x10/0x10 [ 190.025877][ T7227] ? widen_string+0xdb/0x2f0 [ 190.025913][ T7227] xfrm_resolve_and_create_bundle+0x49e/0x3500 [ 190.025958][ T7227] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 190.025996][ T7227] ? xfrm_sk_policy_lookup+0x4ed/0x770 [ 190.026038][ T7227] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 190.026067][ T7227] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 190.026094][ T7227] ? xfrm_expand_policies.constprop.0+0x250/0x660 [ 190.026123][ T7227] xfrm_lookup_with_ifid+0x29b/0x1ce0 [ 190.026152][ T7227] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 190.026179][ T7227] ? ip_route_output_key_hash+0x14c/0x2b0 [ 190.026207][ T7227] ? ip_route_output_key_hash+0x14c/0x2b0 [ 190.026247][ T7227] xfrm_lookup_route+0x3b/0x200 [ 190.026272][ T7227] ip_route_output_flow+0x11e/0x150 [ 190.026297][ T7227] __ip4_datagram_connect+0x8bf/0x1480 [ 190.026328][ T7227] __ip6_datagram_connect+0xc70/0x1500 [ 190.026358][ T7227] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 190.026390][ T7227] ? ip6_datagram_connect_v6_only+0x73/0xa0 [ 190.026413][ T7227] ip6_datagram_connect_v6_only+0x73/0xa0 [ 190.026439][ T7227] inet_dgram_connect+0x143/0x200 [ 190.026462][ T7227] ? __pfx_inet_dgram_connect+0x10/0x10 [ 190.026482][ T7227] __sys_connect_file+0x141/0x1a0 [ 190.026506][ T7227] __sys_connect+0x141/0x170 [ 190.026525][ T7227] ? __pfx___sys_connect+0x10/0x10 [ 190.026543][ T7227] ? __fget_files+0x21f/0x3d0 [ 190.026572][ T7227] ? __pfx_ksys_write+0x10/0x10 [ 190.026599][ T7227] __x64_sys_connect+0x72/0xb0 [ 190.026617][ T7227] ? lockdep_hardirqs_on+0x78/0x100 [ 190.026641][ T7227] do_syscall_64+0x115/0x870 [ 190.026663][ T7227] ? clear_bhb_loop+0x70/0xc0 [ 190.026686][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.026704][ T7227] RIP: 0033:0x7f7cad19e0d9 [ 190.026719][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.026735][ T7227] RSP: 002b:00007f7cadffc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 190.026753][ T7227] RAX: ffffffffffffffda RBX: 00007f7cad425fa0 RCX: 00007f7cad19e0d9 [ 190.026765][ T7227] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005 [ 190.026776][ T7227] RBP: 00007f7cadffc090 R08: 0000000000000000 R09: 0000000000000000 [ 190.026786][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.026796][ T7227] R13: 00007f7cad426038 R14: 00007f7cad425fa0 R15: 00007ffc06c89f28 [ 190.026824][ T7227] [ 190.550321][ T7235] dummy0: entered allmulticast mode [ 190.557534][ T7234] dummy0: left allmulticast mode [ 190.708247][ T7237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.997099][ T4915] Bluetooth: hci2: command 0x0406 tx timeout [ 191.004557][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 191.077362][ T4915] Bluetooth: hci3: command 0x0406 tx timeout [ 191.083466][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 191.089519][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 191.580673][ T7239] jffs2: notice: (7239) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 191.734493][ T7247] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 192.842374][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 192.873338][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 192.884520][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 192.894744][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 193.140354][ T29] audit: type=1400 audit(1786338555.927:443): avc: denied { map } for pid=7264 comm="syz.5.385" path="/dev/sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.307224][ T29] audit: type=1400 audit(1786338555.957:444): avc: denied { write execute } for pid=7264 comm="syz.5.385" path="/dev/sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.873355][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.382'. [ 195.096200][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 195.569571][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.392'. [ 195.606782][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.392'. [ 195.619365][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.392'. [ 195.632767][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.392'. [ 195.769633][ T7297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.869922][ T29] audit: type=1400 audit(1786338559.647:445): avc: denied { mount } for pid=7303 comm="syz.0.394" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 196.904324][ T7304] cgroup2: Unknown parameter 'appraise' [ 197.016782][ T7311] FAULT_INJECTION: forcing a failure. [ 197.016782][ T7311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.030084][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.2.398 Not tainted syzkaller #0 PREEMPT(full) [ 197.030107][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 197.030118][ T7311] Call Trace: [ 197.030124][ T7311] [ 197.030130][ T7311] dump_stack_lvl+0x100/0x190 [ 197.030151][ T7311] should_fail_ex.cold+0x5/0xa [ 197.030166][ T7311] _copy_from_user+0x2e/0xd0 [ 197.030184][ T7311] move_addr_to_kernel+0x65/0x170 [ 197.030197][ T7311] __sys_sendto+0x1b8/0x4e0 [ 197.030211][ T7311] ? __pfx___sys_sendto+0x10/0x10 [ 197.030228][ T7311] ? irqentry_exit+0x24d/0xa00 [ 197.030254][ T7311] __x64_sys_sendto+0xe0/0x1c0 [ 197.030267][ T7311] ? x64_sys_call+0x1407/0x1530 [ 197.030285][ T7311] do_syscall_64+0x115/0x870 [ 197.030299][ T7311] ? clear_bhb_loop+0x70/0xc0 [ 197.030315][ T7311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.030327][ T7311] RIP: 0033:0x7fdd2f99e0d9 [ 197.030337][ T7311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.030347][ T7311] RSP: 002b:00007fdd30821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 197.030358][ T7311] RAX: ffffffffffffffda RBX: 00007fdd2fc26090 RCX: 00007fdd2f99e0d9 [ 197.030365][ T7311] RDX: 00000000000212a7 RSI: 0000200000000180 RDI: 0000000000000007 [ 197.030372][ T7311] RBP: 00007fdd30821090 R08: 0000200000000480 R09: 000000000000001c [ 197.030378][ T7311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.030385][ T7311] R13: 00007fdd2fc26128 R14: 00007fdd2fc26090 R15: 00007ffe79379d48 [ 197.030399][ T7311] [ 197.213280][ T29] audit: type=1400 audit(1786338559.787:446): avc: denied { sqpoll } for pid=7308 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 197.520410][ T29] audit: type=1400 audit(1786338559.827:447): avc: denied { read write } for pid=7308 comm="syz.2.398" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 197.547096][ T29] audit: type=1400 audit(1786338559.987:448): avc: denied { open } for pid=7308 comm="syz.2.398" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.357991][ T29] audit: type=1400 audit(1786338561.147:449): avc: denied { unmount } for pid=5601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 198.484926][ T7323] syzkaller0: entered promiscuous mode [ 198.514013][ T7323] syzkaller0: entered allmulticast mode [ 198.826033][ T29] audit: type=1400 audit(1786338561.607:450): avc: denied { relabelfrom } for pid=7322 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 198.936869][ T29] audit: type=1400 audit(1786338561.637:451): avc: denied { relabelto } for pid=7322 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 199.154923][ T29] audit: type=1400 audit(1786338561.757:452): avc: denied { accept } for pid=7322 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 199.278651][ T29] audit: type=1400 audit(1786338561.977:453): avc: denied { setattr } for pid=7329 comm="syz.3.402" name="ALG" dev="sockfs" ino=16269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 199.367100][ T5723] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 199.665715][ T7335] __nla_validate_parse: 2 callbacks suppressed [ 199.665747][ T7335] netlink: 132 bytes leftover after parsing attributes in process `syz.5.403'. [ 200.268843][ T7341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.289836][ T7347] kthread_run failed with err -4 [ 201.400493][ T5723] usb 3-1: unable to get BOS descriptor or descriptor too short [ 201.413389][ T5723] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=c3.40 [ 201.525487][ T5723] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 201.552676][ T5723] usb 3-1: can't read configurations, error -71 [ 202.066296][ T7340] syz.4.405 (7340): drop_caches: 2 [ 202.077809][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 202.235609][ T7357] jffs2: notice: (7357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 202.330263][ T29] audit: type=1400 audit(1786338565.067:454): avc: denied { write } for pid=7356 comm="syz.2.410" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.735557][ T7379] netlink: 132 bytes leftover after parsing attributes in process `syz.3.416'. [ 204.136002][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 204.588325][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 204.597403][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 204.606321][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 204.847457][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 205.548162][ T7388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.545941][ T29] audit: type=1326 audit(1786338569.327:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f99e0d9 code=0x7ffc0000 [ 206.713666][ T29] audit: type=1326 audit(1786338569.327:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f99e0d9 code=0x7ffc0000 [ 206.747320][ T29] audit: type=1326 audit(1786338569.327:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f99e0d9 code=0x7ffc0000 [ 206.775044][ T29] audit: type=1326 audit(1786338569.327:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f99e0d9 code=0x7ffc0000 [ 206.859241][ T29] audit: type=1326 audit(1786338569.327:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fdd2f99e0d9 code=0x7ffc0000 [ 206.887308][ T29] audit: type=1326 audit(1786338569.327:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f99e0d9 code=0x7ffc0000 [ 206.924973][ T29] audit: type=1326 audit(1786338569.327:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f99e0d9 code=0x7ffc0000 [ 206.960657][ T29] audit: type=1326 audit(1786338569.327:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f99e0d9 code=0x7ffc0000 [ 206.975264][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 206.987498][ T29] audit: type=1326 audit(1786338569.327:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2f99e0d9 code=0x7ffc0000 [ 207.029662][ T7402] FAULT_INJECTION: forcing a failure. [ 207.029662][ T7402] name failslab, interval 1, probability 0, space 0, times 0 [ 207.042336][ T7402] CPU: 1 UID: 0 PID: 7402 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(full) [ 207.042354][ T7402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 207.042361][ T7402] Call Trace: [ 207.042365][ T7402] [ 207.042369][ T7402] dump_stack_lvl+0x100/0x190 [ 207.042389][ T7402] should_fail_ex.cold+0x5/0xa [ 207.042405][ T7402] should_failslab+0xc2/0x120 [ 207.042421][ T7402] kmem_cache_alloc_noprof+0x91/0x6a0 [ 207.042436][ T7402] ? skb_clone+0x190/0x400 [ 207.042453][ T7402] skb_clone+0x190/0x400 [ 207.042468][ T7402] bpf_clone_redirect+0x166/0x500 [ 207.042485][ T7402] ? __pfx___cant_migrate+0x10/0x10 [ 207.042499][ T7402] bpf_prog_d6425cb8ebdd0ce0+0x22/0x2a [ 207.042509][ T7402] bpf_test_run+0x39c/0xa40 [ 207.042527][ T7402] ? bpf_test_run+0x1c6/0xa40 [ 207.042546][ T7402] ? __pfx_bpf_test_run+0x10/0x10 [ 207.042573][ T7402] ? eth_type_trans+0x2e3/0x720 [ 207.042587][ T7402] bpf_prog_test_run_skb+0x15c4/0x3540 [ 207.042604][ T7402] ? __fget_files+0x1d1/0x3d0 [ 207.042619][ T7402] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 207.042637][ T7402] ? fput+0x79/0x100 [ 207.042652][ T7402] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 207.042663][ T7402] __sys_bpf+0x2a12/0x4e80 [ 207.042679][ T7402] ? __pfx___sys_bpf+0x10/0x10 [ 207.042690][ T7402] ? find_held_lock+0x2b/0x80 [ 207.042700][ T7402] ? get_pid_task+0xfc/0x250 [ 207.042711][ T7402] ? get_pid_task+0xfc/0x250 [ 207.042725][ T7402] ? find_held_lock+0x2b/0x80 [ 207.042738][ T7402] ? rcu_read_lock_any_held+0x6a/0xa0 [ 207.042749][ T7402] ? find_held_lock+0x2b/0x80 [ 207.042759][ T7402] ? ksys_write+0x190/0x250 [ 207.042769][ T7402] ? ksys_write+0x190/0x250 [ 207.042788][ T7402] ? fput+0x79/0x100 [ 207.042803][ T7402] ? __x64_sys_bpf+0xce/0x140 [ 207.042815][ T7402] __x64_sys_bpf+0xce/0x140 [ 207.042827][ T7402] ? do_syscall_64+0x90/0x870 [ 207.042843][ T7402] do_syscall_64+0x115/0x870 [ 207.042857][ T7402] ? clear_bhb_loop+0x70/0xc0 [ 207.042871][ T7402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.042883][ T7402] RIP: 0033:0x7fd2fcb9e0d9 [ 207.042893][ T7402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.042904][ T7402] RSP: 002b:00007fd2fdaa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.042915][ T7402] RAX: ffffffffffffffda RBX: 00007fd2fce25fa0 RCX: 00007fd2fcb9e0d9 [ 207.042922][ T7402] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 207.042929][ T7402] RBP: 00007fd2fdaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 207.042935][ T7402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.042941][ T7402] R13: 00007fd2fce26038 R14: 00007fd2fce25fa0 R15: 00007ffcd673ba28 [ 207.042955][ T7402] [ 207.588056][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.607087][ T42] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=c3.40 [ 207.636068][ T42] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 207.647547][ T29] audit: type=1326 audit(1786338569.327:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7395 comm="syz.2.420" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd2f99de42 code=0x7ffc0000 [ 207.668237][ T42] usb 5-1: can't read configurations, error -71 [ 208.026145][ T7414] FAULT_INJECTION: forcing a failure. [ 208.026145][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.045536][ T7414] CPU: 1 UID: 0 PID: 7414 Comm: syz.5.427 Not tainted syzkaller #0 PREEMPT(full) [ 208.045562][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.045573][ T7414] Call Trace: [ 208.045579][ T7414] [ 208.045587][ T7414] dump_stack_lvl+0x100/0x190 [ 208.045623][ T7414] should_fail_ex.cold+0x5/0xa [ 208.045646][ T7414] _copy_from_user+0x2e/0xd0 [ 208.045672][ T7414] copy_msghdr_from_user+0x9f/0x4c0 [ 208.045692][ T7414] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 208.045722][ T7414] ___sys_sendmsg+0x106/0x1e0 [ 208.045741][ T7414] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.045757][ T7414] ? __lock_acquire+0x49f/0x1a40 [ 208.045779][ T7414] ? get_pid_task+0x106/0x250 [ 208.045824][ T7414] __sys_sendmsg+0x160/0x210 [ 208.045848][ T7414] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.045883][ T7414] do_syscall_64+0x115/0x870 [ 208.045907][ T7414] ? clear_bhb_loop+0x70/0xc0 [ 208.045929][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.045947][ T7414] RIP: 0033:0x7f7cad19e0d9 [ 208.045963][ T7414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.045980][ T7414] RSP: 002b:00007f7cadffc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.045998][ T7414] RAX: ffffffffffffffda RBX: 00007f7cad425fa0 RCX: 00007f7cad19e0d9 [ 208.046010][ T7414] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 208.046020][ T7414] RBP: 00007f7cadffc090 R08: 0000000000000000 R09: 0000000000000000 [ 208.046030][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.046041][ T7414] R13: 00007f7cad426038 R14: 00007f7cad425fa0 R15: 00007ffc06c89f28 [ 208.046066][ T7414] [ 208.231258][ T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 208.254661][ T7412] jffs2: notice: (7412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 208.417221][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 208.424826][ T42] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 208.452375][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 208.454274][ T7420] netlink: 132 bytes leftover after parsing attributes in process `syz.5.428'. [ 208.460739][ T42] usb 5-1: Product: syz [ 208.476843][ T42] usb 5-1: Manufacturer: syz [ 208.482953][ T42] usb 5-1: SerialNumber: syz [ 208.678260][ T42] usb 5-1: config 0 descriptor?? [ 208.691725][ T42] gspca_main: sq905-2.14.0 probing 2770:9120 [ 209.094817][ T42] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 209.115604][ T42] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 209.133629][ T42] usb 5-1: USB disconnect, device number 14 [ 209.207434][ T7436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.472878][ T7442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.433'. [ 210.259337][ T7440] netlink: 56 bytes leftover after parsing attributes in process `syz.3.433'. [ 210.905090][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 210.914862][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 212.078521][ T7453] WARNING! power/level is deprecated; use power/control instead [ 212.294724][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 212.294740][ T29] audit: type=1804 audit(1786338575.077:551): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.437" name="/newroot/104/file0" dev="tmpfs" ino=594 res=1 errno=0 [ 212.477230][ T5770] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 212.478164][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 212.607120][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 212.618219][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 212.631590][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 212.900850][ T5770] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.908737][ T29] audit: type=1400 audit(1786338575.677:552): avc: denied { name_bind } for pid=7467 comm="syz.0.441" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 212.932951][ T5770] usb 3-1: New USB device found, idVendor=07d1, idProduct=3c09, bcdDevice=a7.d2 [ 212.955521][ T5770] usb 3-1: config 1 has an invalid interface number: 97 but max is 0 [ 212.965248][ T5770] usb 3-1: config 1 has no interface number 0 [ 212.978770][ T5770] usb 3-1: config 1 interface 97 has no altsetting 0 [ 212.997304][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.013932][ T5770] usb 3-1: Product: syz [ 213.032993][ T5770] usb 3-1: Manufacturer: syz [ 213.049510][ T5770] usb 3-1: SerialNumber: syz [ 213.362523][ T7475] netlink: 132 bytes leftover after parsing attributes in process `syz.5.442'. [ 214.078408][ T7492] tipc: Enabled bearer , priority 0 [ 214.137476][ T7490] syzkaller0: entered promiscuous mode [ 214.163642][ T7490] syzkaller0: entered allmulticast mode [ 214.246688][ T7503] xt_CT: No such helper "snmp" [ 214.293775][ T7486] tipc: Resetting bearer [ 214.365287][ T29] audit: type=1400 audit(1786338577.147:553): avc: denied { append } for pid=7497 comm="syz.5.445" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 214.387048][ T5700] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 214.439583][ T7500] syzkaller0: entered promiscuous mode [ 214.445109][ T7500] syzkaller0: entered allmulticast mode [ 214.464288][ T7477] tipc: Resetting bearer [ 214.484258][ T7477] tipc: Disabling bearer [ 214.556266][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 214.574083][ T5700] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 214.604537][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 214.627532][ T5700] usb 5-1: Product: syz [ 214.641427][ T5700] usb 5-1: Manufacturer: syz [ 214.649388][ T5700] usb 5-1: SerialNumber: syz [ 214.673280][ T5700] usb 5-1: config 0 descriptor?? [ 214.711523][ T5700] gspca_main: sq905-2.14.0 probing 2770:9120 [ 214.865386][ T7513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.112801][ T5700] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 215.137639][ T5700] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 215.168244][ T5700] usb 5-1: USB disconnect, device number 15 [ 216.607677][ T29] audit: type=1400 audit(1786338579.397:554): avc: denied { getopt } for pid=7521 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.705285][ T7526] netlink: 'syz.4.450': attribute type 10 has an invalid length. [ 218.093305][ T5770] usb 3-1: USB disconnect, device number 14 [ 218.236046][ T7526] team0: Port device geneve0 added [ 218.314071][ T7531] FAULT_INJECTION: forcing a failure. [ 218.314071][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 218.326949][ T7531] CPU: 1 UID: 0 PID: 7531 Comm: syz.2.451 Not tainted syzkaller #0 PREEMPT(full) [ 218.326978][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 218.326989][ T7531] Call Trace: [ 218.326995][ T7531] [ 218.327002][ T7531] dump_stack_lvl+0x100/0x190 [ 218.327032][ T7531] should_fail_ex.cold+0x5/0xa [ 218.327056][ T7531] should_failslab+0xc2/0x120 [ 218.327081][ T7531] __kmalloc_cache_noprof+0x91/0x6c0 [ 218.327098][ T7531] ? preempt_schedule_irq+0x7b/0x90 [ 218.327122][ T7531] ? fuse_file_alloc+0x51/0x2d0 [ 218.327152][ T7531] fuse_file_alloc+0x51/0x2d0 [ 218.327177][ T7531] fuse_file_open+0xbf/0x820 [ 218.327206][ T7531] fuse_do_open+0x50/0xd0 [ 218.327231][ T7531] fuse_dir_open+0x12c/0x2a0 [ 218.327262][ T7531] do_dentry_open+0x6ab/0x14d0 [ 218.327281][ T7531] ? __pfx_fuse_dir_open+0x10/0x10 [ 218.327313][ T7531] vfs_open+0x82/0x3f0 [ 218.327338][ T7531] path_openat+0x2873/0x4280 [ 218.327370][ T7531] ? __pfx_path_openat+0x10/0x10 [ 218.327390][ T7531] ? do_file_open+0xe0/0x430 [ 218.327414][ T7531] do_file_open+0x20e/0x430 [ 218.327436][ T7531] ? __pfx_do_file_open+0x10/0x10 [ 218.327474][ T7531] ? alloc_fd+0x471/0x7a0 [ 218.327504][ T7531] ? do_getname+0x191/0x390 [ 218.327529][ T7531] do_sys_openat2+0x10f/0x1e0 [ 218.327552][ T7531] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.327585][ T7531] __x64_sys_openat+0x12d/0x210 [ 218.327609][ T7531] ? __pfx___x64_sys_openat+0x10/0x10 [ 218.327634][ T7531] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 218.327667][ T7531] do_syscall_64+0x115/0x870 [ 218.327689][ T7531] ? clear_bhb_loop+0x70/0xc0 [ 218.327712][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.327730][ T7531] RIP: 0033:0x7fdd2f99e0d9 [ 218.327746][ T7531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.327763][ T7531] RSP: 002b:00007fdd30800028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.327780][ T7531] RAX: ffffffffffffffda RBX: 00007fdd2fc26180 RCX: 00007fdd2f99e0d9 [ 218.327791][ T7531] RDX: 0000000000040000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 218.327802][ T7531] RBP: 00007fdd30800090 R08: 0000000000000000 R09: 0000000000000000 [ 218.327813][ T7531] R10: 0000000000000073 R11: 0000000000000246 R12: 0000000000000001 [ 218.327823][ T7531] R13: 00007fdd2fc26218 R14: 00007fdd2fc26180 R15: 00007ffe79379d48 [ 218.327848][ T7531] [ 218.747495][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 218.817650][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 218.835034][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 218.847859][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 218.867051][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.453'. [ 219.148625][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.455'. [ 219.237714][ T7540] tipc: Enabled bearer , priority 0 [ 219.255092][ T7540] syzkaller0: entered promiscuous mode [ 219.280182][ T7540] syzkaller0: entered allmulticast mode [ 219.601066][ T7540] tipc: Resetting bearer [ 219.898586][ T7537] tipc: Resetting bearer [ 220.124067][ T7537] tipc: Disabling bearer [ 220.731118][ T29] audit: type=1400 audit(1786338583.517:555): avc: denied { read } for pid=5259 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 221.257214][ T7564] dummy0: entered allmulticast mode [ 221.491139][ T7561] dummy0: left allmulticast mode [ 221.662617][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.461'. [ 222.407198][ T5700] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 223.380014][ T7575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.418250][ T5700] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 224.039661][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.425355][ T5700] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 224.497371][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 224.637322][ T5863] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 224.645896][ T5700] usb 3-1: USB disconnect, device number 15 [ 224.654397][ T7572] cdc_acm 3-1:1.0: acm_port_activate - usb_submit_urb(ctrl irq) failed [ 224.707321][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 224.768386][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.862321][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 224.916880][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.003719][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.105978][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.164276][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.216287][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.252151][ T7590] xt_nfacct: accounting object `syz0' does not exist [ 225.320060][ T5863] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.338520][ T5863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.349035][ T5863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.358199][ T5863] usb 1-1: config 1 has no interface number 0 [ 225.364511][ T5863] usb 1-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 225.379517][ T5863] usb 1-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 225.388932][ T5863] usb 1-1: config 1 interface 2 has no altsetting 1 [ 225.398748][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.408407][ T5863] usb 1-1: Product: syz [ 225.412612][ T5863] usb 1-1: Manufacturer: syz [ 225.417686][ T5863] usb 1-1: SerialNumber: syz [ 225.456807][ T10] usb 5-1: usb_control_msg returned -32 [ 225.474140][ T10] usbtmc 5-1:16.0: can't read capabilities [ 226.862361][ T29] audit: type=1400 audit(1786338589.447:556): avc: denied { write } for pid=7583 comm="syz.4.466" name="usbtmc0" dev="devtmpfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 227.089938][ T5770] usb 5-1: USB disconnect, device number 16 [ 227.089958][ T7584] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 227.132664][ T7599] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -19 [ 227.143117][ T5863] usb 1-1: USB disconnect, device number 6 [ 227.175047][ T7603] jffs2: notice: (7603) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 227.213194][ T29] audit: type=1400 audit(1786338589.997:557): avc: denied { write } for pid=7602 comm="syz.2.472" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.657157][ T5700] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 227.747212][ T29] audit: type=1400 audit(1786338590.487:558): avc: denied { kexec_image_load } for pid=7614 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 227.787082][ T29] audit: type=1400 audit(1786338590.507:559): avc: denied { ioctl } for pid=7614 comm="syz.2.475" path="socket:[17976]" dev="sockfs" ino=17976 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 227.887797][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 228.335192][ T5700] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 228.347998][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 228.356401][ T5700] usb 4-1: Product: syz [ 228.361290][ T5700] usb 4-1: Manufacturer: syz [ 228.366102][ T5700] usb 4-1: SerialNumber: syz [ 228.424230][ T5700] usb 4-1: config 0 descriptor?? [ 228.432993][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 228.505268][ T5700] gspca_main: sq905-2.14.0 probing 2770:9120 [ 228.943293][ T5700] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 228.954325][ T5700] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 229.017344][ T5700] usb 4-1: USB disconnect, device number 20 [ 229.039091][ T7630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.015023][ T29] audit: type=1400 audit(1786338592.797:560): avc: denied { bind } for pid=7639 comm="syz.5.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 230.155870][ T29] audit: type=1400 audit(1786338592.797:561): avc: denied { name_bind } for pid=7639 comm="syz.5.482" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 230.176776][ T29] audit: type=1400 audit(1786338592.797:562): avc: denied { node_bind } for pid=7639 comm="syz.5.482" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 230.328051][ T7645] FAT-fs (nbd4): unable to read boot sector [ 230.857348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 231.529807][ T29] audit: type=1400 audit(1786338594.007:563): avc: granted { setsecparam } for pid=7634 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 232.957108][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 232.999337][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 233.014515][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 233.027000][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 233.131468][ T7666] FAT-fs (nbd3): unable to read boot sector [ 233.500763][ T7675] syzkaller0: entered promiscuous mode [ 233.533495][ T7675] syzkaller0: entered allmulticast mode [ 234.417031][ T5863] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 235.039412][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 235.203998][ T5863] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 235.518607][ T7682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.532258][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 235.563800][ T5863] usb 6-1: Product: syz [ 235.570174][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 235.571261][ T5863] usb 6-1: Manufacturer: syz [ 235.586862][ T5863] usb 6-1: SerialNumber: syz [ 235.597674][ T5863] usb 6-1: config 0 descriptor?? [ 235.725806][ T5863] gspca_main: sq905-2.14.0 probing 2770:9120 [ 236.087588][ T5863] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 236.225923][ T5863] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 236.238715][ T5863] usb 6-1: USB disconnect, device number 3 [ 237.435072][ T7717] netlink: 36 bytes leftover after parsing attributes in process `syz.4.501'. [ 238.066773][ T29] audit: type=1400 audit(1786338600.847:564): avc: denied { create } for pid=7714 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 238.105440][ T7715] FAULT_INJECTION: forcing a failure. [ 238.105440][ T7715] name failslab, interval 1, probability 0, space 0, times 0 [ 238.118306][ T7715] CPU: 1 UID: 0 PID: 7715 Comm: syz.3.500 Not tainted syzkaller #0 PREEMPT(full) [ 238.118323][ T7715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 238.118330][ T7715] Call Trace: [ 238.118333][ T7715] [ 238.118337][ T7715] dump_stack_lvl+0x100/0x190 [ 238.118356][ T7715] should_fail_ex.cold+0x5/0xa [ 238.118372][ T7715] should_failslab+0xc2/0x120 [ 238.118387][ T7715] __kmalloc_noprof+0xfc/0x820 [ 238.118401][ T7715] ? __bfs+0x150/0x2a0 [ 238.118412][ T7715] ? iter_file_splice_write+0x1d8/0x10b0 [ 238.118430][ T7715] iter_file_splice_write+0x1d8/0x10b0 [ 238.118449][ T7715] ? check_prev_add+0xfe/0xe60 [ 238.118463][ T7715] ? __pfx_iter_file_splice_write+0x10/0x10 [ 238.118477][ T7715] ? lockdep_unlock+0x5a/0xc0 [ 238.118487][ T7715] ? __lock_acquire+0xd5b/0x1a40 [ 238.118513][ T7715] backing_file_splice_write+0x27b/0x820 [ 238.118529][ T7715] ovl_splice_write+0x328/0x610 [ 238.118543][ T7715] ? __pfx_ovl_splice_write+0x10/0x10 [ 238.118554][ T7715] ? __pfx_ovl_file_end_write+0x10/0x10 [ 238.118577][ T7715] ? __pfx_ovl_splice_write+0x10/0x10 [ 238.118589][ T7715] direct_splice_actor+0x192/0x690 [ 238.118604][ T7715] splice_direct_to_actor+0x345/0xa30 [ 238.118619][ T7715] ? __pfx_direct_splice_actor+0x10/0x10 [ 238.118634][ T7715] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 238.118653][ T7715] do_splice_direct+0x174/0x240 [ 238.118667][ T7715] ? __pfx_do_splice_direct+0x10/0x10 [ 238.118679][ T7715] ? avc_policy_seqno+0x9/0x20 [ 238.118693][ T7715] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 238.118708][ T7715] ? rw_verify_area+0xce/0x6d0 [ 238.118726][ T7715] do_sendfile+0xadc/0xe20 [ 238.118746][ T7715] ? __pfx_do_sendfile+0x10/0x10 [ 238.118768][ T7715] __x64_sys_sendfile64+0x154/0x220 [ 238.118783][ T7715] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 238.118801][ T7715] do_syscall_64+0x115/0x870 [ 238.118816][ T7715] ? clear_bhb_loop+0x70/0xc0 [ 238.118830][ T7715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.118842][ T7715] RIP: 0033:0x7fd2fcb9e0d9 [ 238.118853][ T7715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.118864][ T7715] RSP: 002b:00007fd2fdaa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 238.118875][ T7715] RAX: ffffffffffffffda RBX: 00007fd2fce25fa0 RCX: 00007fd2fcb9e0d9 [ 238.118882][ T7715] RDX: 0000200000000080 RSI: 0000000000000005 RDI: 0000000000000005 [ 238.118888][ T7715] RBP: 00007fd2fdaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 238.118895][ T7715] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 238.118901][ T7715] R13: 00007fd2fce26038 R14: 00007fd2fce25fa0 R15: 00007ffcd673ba28 [ 238.118915][ T7715] [ 238.533451][ T29] audit: type=1800 audit(1786338600.877:565): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.500" name="file0" dev="overlay" ino=554 res=0 errno=0 [ 240.197466][ T5770] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 240.440004][ T7730] FAT-fs (nbd0): unable to read boot sector [ 240.485162][ T5770] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.625613][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 240.647157][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 240.660566][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 240.671407][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 240.682792][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.508'. [ 240.683363][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.840241][ T5770] usb 3-1: Product: syz [ 240.934711][ T5770] usb 3-1: Manufacturer: syz [ 240.961458][ T5770] usb 3-1: SerialNumber: syz [ 240.991356][ T29] audit: type=1400 audit(1786338603.757:566): avc: denied { listen } for pid=7744 comm="syz.3.509" lport=59205 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.031309][ T5770] usb 3-1: config 0 descriptor?? [ 241.487728][ T5770] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.567381][ T29] audit: type=1400 audit(1786338603.777:567): avc: denied { accept } for pid=7744 comm="syz.3.509" lport=59205 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.612250][ T29] audit: type=1400 audit(1786338603.777:568): avc: denied { read } for pid=7744 comm="syz.3.509" lport=59205 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 241.636299][ T29] audit: type=1400 audit(1786338603.837:569): avc: denied { setopt } for pid=7744 comm="syz.3.509" lport=59205 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 242.081540][ T7756] netlink: 5 bytes leftover after parsing attributes in process `syz.5.513'. [ 242.090856][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.5.513'. [ 242.100192][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.513'. [ 242.103813][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.511'. [ 242.161007][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 242.295070][ T7761] FAULT_INJECTION: forcing a failure. [ 242.295070][ T7761] name failslab, interval 1, probability 0, space 0, times 0 [ 242.466115][ T7761] CPU: 1 UID: 0 PID: 7761 Comm: syz.3.514 Not tainted syzkaller #0 PREEMPT(full) [ 242.466134][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.466141][ T7761] Call Trace: [ 242.466145][ T7761] [ 242.466149][ T7761] dump_stack_lvl+0x100/0x190 [ 242.466170][ T7761] should_fail_ex.cold+0x5/0xa [ 242.466184][ T7761] should_failslab+0xc2/0x120 [ 242.466201][ T7761] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 242.466216][ T7761] ? __alloc_skb+0x5b7/0x710 [ 242.466230][ T7761] ? __alloc_skb+0x140/0x710 [ 242.466246][ T7761] __alloc_skb+0x140/0x710 [ 242.466258][ T7761] ? __alloc_skb+0x5b7/0x710 [ 242.466271][ T7761] ? __pfx___alloc_skb+0x10/0x10 [ 242.466289][ T7761] netlink_alloc_large_skb+0x69/0x150 [ 242.466306][ T7761] netlink_sendmsg+0x680/0xda0 [ 242.466320][ T7761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.466334][ T7761] ? selinux_socket_sendmsg+0x198/0x2f0 [ 242.466353][ T7761] ____sys_sendmsg+0xa4d/0xbe0 [ 242.466371][ T7761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.466384][ T7761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.466409][ T7761] ___sys_sendmsg+0x190/0x1e0 [ 242.466421][ T7761] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.466431][ T7761] ? __lock_acquire+0x49f/0x1a40 [ 242.466446][ T7761] ? get_pid_task+0x106/0x250 [ 242.466472][ T7761] __sys_sendmsg+0x160/0x210 [ 242.466487][ T7761] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.466510][ T7761] do_syscall_64+0x115/0x870 [ 242.466525][ T7761] ? clear_bhb_loop+0x70/0xc0 [ 242.466539][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.466551][ T7761] RIP: 0033:0x7fd2fcb9e0d9 [ 242.466562][ T7761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.466572][ T7761] RSP: 002b:00007fd2fdaa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.466584][ T7761] RAX: ffffffffffffffda RBX: 00007fd2fce25fa0 RCX: 00007fd2fcb9e0d9 [ 242.466591][ T7761] RDX: 0000000004004084 RSI: 0000200000000000 RDI: 0000000000000004 [ 242.466597][ T7761] RBP: 00007fd2fdaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 242.466604][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.466610][ T7761] R13: 00007fd2fce26038 R14: 00007fd2fce25fa0 R15: 00007ffcd673ba28 [ 242.466624][ T7761] [ 243.441088][ T29] audit: type=1400 audit(1786338606.227:570): avc: denied { read write } for pid=7738 comm="syz.2.507" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 243.467123][ T29] audit: type=1400 audit(1786338606.227:571): avc: denied { open } for pid=7738 comm="syz.2.507" path="/100/file0/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 243.496265][ T29] audit: type=1400 audit(1786338606.227:572): avc: denied { ioctl } for pid=7738 comm="syz.2.507" path="/100/file0/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 243.526884][ T29] audit: type=1804 audit(1786338606.277:573): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.517" name="/newroot/99/file0" dev="tmpfs" ino=575 res=1 errno=0 [ 243.705749][ T5770] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 244.515596][ T7786] jffs2: notice: (7786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 244.550965][ T5770] usb 3-1: USB disconnect, device number 16 [ 244.626369][ T29] audit: type=1400 audit(1786338607.407:574): avc: denied { write } for pid=7785 comm="syz.5.519" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.288908][ T7803] FAULT_INJECTION: forcing a failure. [ 245.288908][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 245.346423][ T7803] CPU: 0 UID: 0 PID: 7803 Comm: syz.2.527 Not tainted syzkaller #0 PREEMPT(full) [ 245.346441][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 245.346448][ T7803] Call Trace: [ 245.346452][ T7803] [ 245.346456][ T7803] dump_stack_lvl+0x100/0x190 [ 245.346476][ T7803] should_fail_ex.cold+0x5/0xa [ 245.346490][ T7803] should_failslab+0xc2/0x120 [ 245.346507][ T7803] __kmalloc_noprof+0xfc/0x820 [ 245.346524][ T7803] ? rcu_is_watching+0x12/0xc0 [ 245.346549][ T7803] ? tomoyo_realpath_from_path+0xb6/0x690 [ 245.346567][ T7803] tomoyo_realpath_from_path+0xb6/0x690 [ 245.346581][ T7803] tomoyo_path_number_perm+0x23c/0x580 [ 245.346597][ T7803] ? tomoyo_path_number_perm+0x22e/0x580 [ 245.346614][ T7803] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.346645][ T7803] ? find_held_lock+0x2b/0x80 [ 245.346656][ T7803] ? __fget_files+0x215/0x3d0 [ 245.346667][ T7803] ? hook_file_ioctl_common+0x140/0x440 [ 245.346679][ T7803] ? __fget_files+0x215/0x3d0 [ 245.346693][ T7803] ? __fget_files+0x21f/0x3d0 [ 245.346707][ T7803] security_file_ioctl+0xd3/0x230 [ 245.346727][ T7803] __x64_sys_ioctl+0xb7/0x210 [ 245.346746][ T7803] do_syscall_64+0x115/0x870 [ 245.346761][ T7803] ? clear_bhb_loop+0x70/0xc0 [ 245.346775][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.346788][ T7803] RIP: 0033:0x7fdd2f99e0d9 [ 245.346798][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.346809][ T7803] RSP: 002b:00007fdd30842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.346821][ T7803] RAX: ffffffffffffffda RBX: 00007fdd2fc25fa0 RCX: 00007fdd2f99e0d9 [ 245.346828][ T7803] RDX: 00002000000004c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 245.346835][ T7803] RBP: 00007fdd30842090 R08: 0000000000000000 R09: 0000000000000000 [ 245.346841][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.346847][ T7803] R13: 00007fdd2fc26038 R14: 00007fdd2fc25fa0 R15: 00007ffe79379d48 [ 245.346861][ T7803] [ 245.346872][ T7803] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.608388][ T7814] FAT-fs (nbd3): unable to read boot sector [ 246.689279][ T42] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 246.787075][ T5863] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 246.868749][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 246.883697][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.908743][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.927759][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.943173][ T42] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.966499][ T42] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 246.986010][ T5863] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.001078][ T42] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 247.017411][ T42] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 247.029403][ T5863] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.046359][ T5863] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.067117][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.095168][ T7813] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 247.123157][ T5863] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.137424][ T5611] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 247.239822][ T5611] Bluetooth: hci0: unexpected event for opcode 0x200c [ 247.463834][ T7823] netlink: 160 bytes leftover after parsing attributes in process `syz.0.530'. [ 247.490300][ T7823] netlink: 160 bytes leftover after parsing attributes in process `syz.0.530'. [ 247.523072][ T7826] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 247.790921][ T5700] usb 1-1: USB disconnect, device number 7 [ 248.004520][ T29] audit: type=1400 audit(1786338610.787:575): avc: denied { name_bind } for pid=7829 comm="syz.4.535" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 248.183472][ T7835] sctp: [Deprecated]: syz.4.535 (pid 7835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.183472][ T7835] Use struct sctp_sack_info instead [ 248.959642][ T5722] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 249.171963][ T5722] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 249.291719][ T5722] usb 1-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 249.310803][ T5722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 249.321594][ T5722] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.343336][ T5722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 249.359206][ T42] usb 3-1: string descriptor 0 read error: -71 [ 249.370324][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.503458][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.765175][ T5722] usb 1-1: config 0 descriptor?? [ 250.335004][ T42] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 250.345344][ T42] usb 3-1: no configuration chosen from 1 choice [ 250.366269][ T42] usb 3-1: USB disconnect, device number 17 [ 250.376935][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.383624][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.054038][ T5722] usbhid 1-1:0.0: can't add hid device: -71 [ 251.180073][ T5722] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 251.559815][ T5722] usb 1-1: USB disconnect, device number 8 [ 252.442050][ T5611] Bluetooth: hci5: command 0x0406 tx timeout [ 252.553695][ T29] audit: type=1400 audit(1786338615.297:576): avc: denied { create } for pid=7872 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.627039][ T29] audit: type=1400 audit(1786338615.307:577): avc: denied { read } for pid=7872 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.852410][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 252.894815][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 252.906876][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 252.920727][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 252.932501][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 253.390199][ T7881] block nbd0: server does not support multiple connections per device. [ 253.446667][ T7883] jffs2: notice: (7883) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 253.449113][ T7885] netlink: 'syz.5.550': attribute type 4 has an invalid length. [ 253.580302][ T7881] block nbd0: shutting down sockets [ 253.929767][ T29] audit: type=1326 audit(1786338616.717:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7539e0d9 code=0x7ffc0000 [ 253.964646][ T29] audit: type=1326 audit(1786338616.717:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7539e0d9 code=0x7ffc0000 [ 254.030338][ T29] audit: type=1326 audit(1786338616.717:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7539e0d9 code=0x7ffc0000 [ 254.104307][ T29] audit: type=1326 audit(1786338616.717:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7539e0d9 code=0x7ffc0000 [ 254.131681][ T29] audit: type=1326 audit(1786338616.747:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7c7539e0d9 code=0x7ffc0000 [ 254.160399][ T29] audit: type=1326 audit(1786338616.747:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7539e0d9 code=0x7ffc0000 [ 254.168185][ T5722] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 254.218933][ T29] audit: type=1326 audit(1786338616.747:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7539e0d9 code=0x7ffc0000 [ 254.259582][ T29] audit: type=1326 audit(1786338616.747:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7901 comm="syz.0.554" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7539e0d9 code=0x7ffc0000 [ 254.441456][ T5722] usb 3-1: device descriptor read/64, error -71 [ 255.148473][ T5722] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 255.297306][ T5722] usb 3-1: device descriptor read/64, error -71 [ 255.328833][ T7917] program syz.5.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.397129][ T42] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 255.407470][ T5722] usb usb3-port1: attempt power cycle [ 255.547625][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 255.563164][ T42] usb 1-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 255.573476][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 255.586120][ T42] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.597525][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.604944][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.620556][ T42] usb 1-1: config 0 descriptor?? [ 255.757061][ T5770] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 256.335325][ T42] usbhid 1-1:0.0: can't add hid device: -71 [ 256.381507][ T5722] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 256.673878][ T42] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 256.685290][ T42] usb 1-1: USB disconnect, device number 9 [ 256.697483][ T5722] usb 3-1: device descriptor read/8, error -71 [ 256.840201][ T5770] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 256.861826][ T5770] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 256.874767][ T5770] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 256.895518][ T5770] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.918597][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0 [ 256.926113][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.063662][ T5722] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 257.077530][ T5770] usb 4-1: config 0 descriptor?? [ 257.698279][ T5722] usb 3-1: device not accepting address 21, error -71 [ 257.705510][ T5722] usb usb3-port1: unable to enumerate USB device [ 257.958448][ T5770] usbhid 4-1:0.0: can't add hid device: -71 [ 258.082373][ T5770] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 258.636846][ T5770] usb 4-1: USB disconnect, device number 21 [ 259.017076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 260.437268][ T7967] FAT-fs (nbd4): unable to read boot sector [ 260.510907][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 260.521171][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 260.530521][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 260.539489][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 260.628412][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 260.775614][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 260.825697][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 260.874483][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 260.931417][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 261.087340][ T5702] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 261.169533][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 261.528816][ T5702] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 261.649808][ T5702] usb 1-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 261.725846][ T5702] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 261.915803][ T5702] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.060046][ T5702] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.067011][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.164466][ T5702] usb 1-1: config 0 descriptor?? [ 262.427431][ T5700] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 262.675870][ T5702] usbhid 1-1:0.0: can't add hid device: -71 [ 262.687503][ T5702] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 262.704820][ T5700] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.156883][ T5700] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=c3.40 [ 263.173078][ T5702] usb 1-1: USB disconnect, device number 10 [ 263.179836][ T5700] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 263.198902][ T5700] usb 3-1: can't read configurations, error -71 [ 263.495278][ T8007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.051542][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 264.051562][ T29] audit: type=1804 audit(1786338626.797:677): pid=8006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.585" name="/newroot/115/file0" dev="tmpfs" ino=663 res=1 errno=0 [ 264.437227][ T30] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 264.446377][ T30] Not tainted syzkaller #0 [ 264.451688][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 264.460616][ T30] task:kworker/1:0 state:D stack:21576 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 264.473784][ T30] Workqueue: usb_hub_wq hub_event [ 264.479185][ T30] Call Trace: [ 264.482493][ T30] [ 264.485436][ T30] __schedule+0x125c/0x6730 [ 264.490659][ T30] ? __pfx___schedule+0x10/0x10 [ 264.495903][ T30] ? find_held_lock+0x2b/0x80 [ 264.500831][ T30] ? schedule+0x225/0x2c0 [ 264.505226][ T30] schedule+0xdd/0x2c0 [ 264.509638][ T30] schedule_timeout+0x1b2/0x280 [ 264.514531][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 264.521723][ T30] ? mark_held_locks+0x40/0x70 [ 264.526549][ T30] __wait_for_common+0x2e7/0x4c0 [ 264.532162][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 264.538026][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 264.543533][ T30] ? __pfx_device_del+0x10/0x10 [ 264.551682][ T30] ? kobject_put+0xb9/0x640 [ 264.561913][ T30] i2c_del_adapter+0x1d4/0x2d0 [ 264.570451][ T30] dvb_usb_i2c_exit+0x9f/0xf0 [ 264.576863][ T30] dvb_usb_device_exit+0x313/0x520 [ 264.582356][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 264.588272][ T30] ? _raw_spin_lock_irqsave+0x52/0x60 [ 264.593700][ T30] cxusb_probe.cold+0x4d/0xc2 [ 264.598848][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.604689][ T30] ? __pfx_cxusb_probe+0x10/0x10 [ 264.610029][ T30] ? __pm_runtime_set_status+0x13c/0x970 [ 264.615716][ T30] usb_probe_interface+0x303/0x8f0 [ 264.626833][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 264.719190][ T30] really_probe+0x241/0xa60 [ 264.771363][ T30] __driver_probe_device+0x20e/0x450 [ 264.820838][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 264.867145][ T30] driver_probe_device+0x4a/0x140 [ 264.909362][ T30] __device_attach_driver+0x1df/0x320 [ 264.963608][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 265.006657][ T30] bus_for_each_drv+0x159/0x1e0 [ 265.053470][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 265.105254][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 265.157576][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.209727][ T30] __device_attach+0x1e4/0x4d0 [ 265.597117][ T30] ? __pfx___device_attach+0x10/0x10 [ 265.602535][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 265.607954][ T30] device_initial_probe+0xaf/0xd0 [ 265.613127][ T30] bus_probe_device+0x64/0x160 [ 265.618037][ T30] device_add+0x121d/0x1970 [ 265.622665][ T30] ? __pfx_device_add+0x10/0x10 [ 265.662519][ T30] ? mark_held_locks+0x40/0x70 [ 265.676434][ T30] usb_set_configuration+0xd97/0x1c60 [ 265.686703][ T8015] FAT-fs (nbd2): unable to read boot sector [ 265.696947][ T30] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 265.714775][ T30] usb_generic_driver_probe+0xa1/0xe0 [ 265.734260][ T30] usb_probe_device+0xef/0x400 [ 265.750213][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 265.767659][ T30] really_probe+0x241/0xa60 [ 265.785103][ T30] __driver_probe_device+0x20e/0x450 [ 265.798233][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 265.814279][ T30] driver_probe_device+0x4a/0x140 [ 265.830305][ T30] __device_attach_driver+0x1df/0x320 [ 265.847757][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 265.865443][ T30] bus_for_each_drv+0x159/0x1e0 [ 265.882050][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 265.904167][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 265.922669][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.938197][ T30] __device_attach+0x1e4/0x4d0 [ 265.944864][ T30] ? __pfx___device_attach+0x10/0x10 [ 265.950364][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 265.955603][ T30] device_initial_probe+0xaf/0xd0 [ 265.960965][ T30] bus_probe_device+0x64/0x160 [ 265.965750][ T30] device_add+0x121d/0x1970 [ 265.970342][ T30] ? __pfx_device_add+0x10/0x10 [ 265.975233][ T30] usb_new_device.part.0+0xcc2/0x1686 [ 265.981517][ T30] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 265.987421][ T30] ? hub_event+0x3119/0x4420 [ 265.992030][ T30] hub_event.cold+0x1e3/0xe90 [ 265.996720][ T30] ? __pfx_hub_event+0x10/0x10 [ 266.001615][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 266.007361][ T30] ? rcu_is_watching+0x12/0xc0 [ 266.012183][ T30] process_one_work+0xa23/0x1940 [ 266.018377][ T30] ? __pfx_process_one_work+0x10/0x10 [ 266.023763][ T30] ? __pfx_hub_event+0x10/0x10 [ 266.029046][ T30] worker_thread+0x5ef/0xe50 [ 266.033657][ T30] ? kthread+0x13a/0x450 [ 266.038024][ T30] ? __pfx_worker_thread+0x10/0x10 [ 266.043150][ T30] kthread+0x370/0x450 [ 266.047746][ T30] ? __pfx_kthread+0x10/0x10 [ 266.052347][ T30] ret_from_fork+0x72b/0xd50 [ 266.056929][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 266.062075][ T30] ? __switch_to+0x800/0x10f0 [ 266.066742][ T30] ? __pfx_kthread+0x10/0x10 [ 266.071466][ T30] ret_from_fork_asm+0x1a/0x30 [ 266.076278][ T30] [ 266.079613][ T30] [ 266.079613][ T30] Showing all locks held in the system: [ 266.129087][ T30] 1 lock held by ksoftirqd/0/15: [ 266.134119][ T30] 5 locks held by kworker/1:0/24: [ 266.147019][ T30] #0: ffff888020ed0940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 266.167027][ T30] #1: ffffc900001e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 266.187050][ T30] #2: ffff888029f141d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 266.197188][ T5722] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 266.201272][ T30] #3: ffff88802130b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 266.223252][ T30] #4: ffff88802a8451a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 266.232609][ T30] 1 lock held by khungtaskd/30: [ 266.238544][ T30] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 266.258807][ T30] 2 locks held by getty/5347: [ 266.263505][ T30] #0: ffff888037c0f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 266.273275][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 266.283897][ T30] 4 locks held by udevd/5621: [ 266.289437][ T30] #0: ffff88802aef53f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 266.298363][ T30] #1: ffff888055a34080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 266.307930][ T30] #2: ffff8880759664b8 (kn->active#29){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 266.317479][ T30] #3: ffff88802130b1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 266.326900][ T30] 6 locks held by kworker/1:4/5722: [ 266.332202][ T30] #0: ffff888020ed0940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 266.343168][ T30] #1: ffffc90004c5fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 266.354911][ T30] #2: ffff88801e7881d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 266.357526][ T5722] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 266.364245][ T30] #3: ffffc90000a08ca0 ((&timer.timer)){+.-.}-{0:0}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 266.384327][ T30] #4: ffff8880b8524568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e8e/0x6730 [ 266.394248][ T30] #5: ffff88801bc63018 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x298/0x12b0 [ 266.403850][ T30] [ 266.404440][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.406243][ T30] ============================================= [ 266.406243][ T30] [ 266.417671][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.434719][ T30] NMI backtrace for cpu 0 [ 266.434734][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 266.434755][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 266.434765][ T30] Call Trace: [ 266.434772][ T30] [ 266.434778][ T30] dump_stack_lvl+0x100/0x190 [ 266.434806][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 266.434830][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 266.434873][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 266.434895][ T30] sys_info+0x141/0x190 [ 266.434911][ T30] watchdog+0xcb1/0x1030 [ 266.434943][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 266.434964][ T30] ? __pfx_watchdog+0x10/0x10 [ 266.434985][ T30] ? __kthread_parkme+0x18c/0x230 [ 266.435014][ T30] ? kthread+0x13a/0x450 [ 266.435030][ T30] ? __pfx_watchdog+0x10/0x10 [ 266.435049][ T30] kthread+0x370/0x450 [ 266.435065][ T30] ? __pfx_kthread+0x10/0x10 [ 266.435084][ T30] ret_from_fork+0x72b/0xd50 [ 266.435111][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 266.435136][ T30] ? __switch_to+0x800/0x10f0 [ 266.435154][ T30] ? __pfx_kthread+0x10/0x10 [ 266.435172][ T30] ret_from_fork_asm+0x1a/0x30 [ 266.435210][ T30] [ 266.435218][ T30] Sending NMI from CPU 0 to CPUs 1: [ 266.436518][ T5722] usb 5-1: config 0 descriptor?? [ 266.439681][ C1] NMI backtrace for cpu 1 [ 266.439696][ C1] CPU: 1 UID: 0 PID: 5722 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 266.439714][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 266.439723][ C1] Workqueue: usb_hub_wq hub_event [ 266.439745][ C1] RIP: 0010:unwind_next_frame+0x574/0x2090 [ 266.439763][ C1] Code: c0 84 c2 0f 85 c0 14 00 00 4c 89 f2 44 0f b6 79 05 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 4c 89 f2 41 c0 ef 03 <83> e2 07 41 83 e7 01 38 d0 7f 08 84 c0 0f 85 d6 14 00 00 45 88 7d [ 266.439776][ C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00000246 [ 266.439786][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff922f8eac [ 266.439795][ C1] RDX: ffffc90000a08a5d RSI: 0000000000000001 RDI: ffffffff91828cbc [ 266.439804][ C1] RBP: ffffc90000a08a70 R08: ffffffff922f8eb0 R09: 0000000000000007 [ 266.439813][ C1] R10: 0000000000000200 R11: 0000000000067ff7 R12: ffffc90000a08a78 [ 266.439822][ C1] R13: ffffc90000a08a28 R14: ffffc90000a08a5d R15: 0000000000000000 [ 266.439831][ C1] FS: 0000000000000000(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 266.439845][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.439855][ C1] CR2: 00007fd2fcdef2f8 CR3: 000000007e31e000 CR4: 00000000003526f0 [ 266.439864][ C1] Call Trace: [ 266.439869][ C1] [ 266.439875][ C1] ? usb_probe_device+0xef/0x400 [ 266.439893][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 266.439908][ C1] arch_stack_walk+0x94/0xf0 [ 266.439924][ C1] ? usb_probe_device+0xef/0x400 [ 266.439941][ C1] ? rcu_core+0x5a2/0x10d0 [ 266.439959][ C1] stack_trace_save+0x8e/0xc0 [ 266.439972][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 266.439986][ C1] ? try_to_wake_up+0x158/0x1c90 [ 266.440011][ C1] ? __lock_acquire+0x49f/0x1a40 [ 266.440028][ C1] kasan_save_stack+0x30/0x50 [ 266.440044][ C1] ? kasan_save_stack+0x30/0x50 [ 266.440058][ C1] ? kasan_save_track+0x14/0x30 [ 266.440073][ C1] ? kasan_save_free_info+0x3b/0x70 [ 266.440085][ C1] ? __kasan_slab_free+0x5f/0x80 [ 266.440100][ C1] ? kmem_cache_free+0x127/0x6b0 [ 266.440112][ C1] ? rcu_core+0x5a2/0x10d0 [ 266.440128][ C1] ? handle_softirqs+0x1ea/0x9b0 [ 266.440145][ C1] ? __irq_exit_rcu+0x162/0x210 [ 266.440161][ C1] ? irq_exit_rcu+0x9/0x30 [ 266.440176][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 266.440193][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.440208][ C1] ? vprintk_emit+0x553/0x6b0 [ 266.440220][ C1] ? dev_vprintk_emit+0x391/0x3e0 [ 266.440236][ C1] ? dev_printk_emit+0xd2/0x10d [ 266.440250][ C1] ? __dev_printk+0xcb/0x100 [ 266.440265][ C1] ? _dev_warn+0xef/0x127 [ 266.440278][ C1] ? usb_set_configuration.cold+0x1b6/0x1f1 [ 266.440296][ C1] ? usb_generic_driver_probe+0xa1/0xe0 [ 266.440310][ C1] ? usb_probe_device+0xef/0x400 [ 266.440337][ C1] kasan_save_track+0x14/0x30 [ 266.440352][ C1] kasan_save_free_info+0x3b/0x70 [ 266.440364][ C1] __kasan_slab_free+0x5f/0x80 [ 266.440380][ C1] kmem_cache_free+0x127/0x6b0 [ 266.440395][ C1] ? rcu_core+0x59d/0x10d0 [ 266.440411][ C1] rcu_core+0x5a2/0x10d0 [ 266.440430][ C1] ? __pfx_rcu_core+0x10/0x10 [ 266.440447][ C1] ? clockevents_program_event+0x1ef/0x820 [ 266.440471][ C1] handle_softirqs+0x1ea/0x9b0 [ 266.440488][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 266.440505][ C1] ? _raw_spin_unlock+0x28/0x50 [ 266.440519][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 266.440534][ C1] __irq_exit_rcu+0x162/0x210 [ 266.440551][ C1] irq_exit_rcu+0x9/0x30 [ 266.440567][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 266.440583][ C1] [ 266.440587][ C1] [ 266.440592][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.440606][ C1] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 266.440619][ C1] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 b0 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 aa 21 00 48 85 ed 0f 85 27 01 00 00 18 b0 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 266.440631][ C1] RSP: 0018:ffffc90004c5f0b8 EFLAGS: 00000283 [ 266.440641][ C1] RAX: 00000000000d49a8 RBX: 000000000000001e RCX: ffffc9001a15e000 [ 266.440649][ C1] RDX: 0000000000100000 RSI: ffffffff81e8c484 RDI: ffff88807e2bca80 [ 266.440658][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 266.440666][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200098be19 [ 266.440679][ C1] R13: 0000000000000200 R14: ffff88801f6da540 R15: ffffc90004c5f278 [ 266.440691][ C1] ? vprintk_emit+0x674/0x6b0 [ 266.440704][ C1] ? vprintk_emit+0x674/0x6b0 [ 266.440717][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 266.440728][ C1] ? __driver_probe_device+0x20e/0x450 [ 266.440744][ C1] ? __device_attach_driver+0x1df/0x320 [ 266.440760][ C1] ? __device_attach+0x1e4/0x4d0 [ 266.440775][ C1] ? device_initial_probe+0xaf/0xd0 [ 266.440792][ C1] dev_vprintk_emit+0x391/0x3e0 [ 266.440809][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 266.440826][ C1] ? kernfs_root+0xf8/0x2a0 [ 266.440840][ C1] ? kernfs_xattr_get+0x5f/0x80 [ 266.440854][ C1] dev_printk_emit+0xd2/0x10d [ 266.440870][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 266.440891][ C1] __dev_printk+0xcb/0x100 [ 266.440907][ C1] _dev_warn+0xef/0x127 [ 266.440921][ C1] ? __pfx__dev_warn+0x10/0x10 [ 266.440939][ C1] ? find_held_lock+0x2b/0x80 [ 266.440952][ C1] ? kernfs_add_one+0x611/0xaa0 [ 266.440969][ C1] usb_set_configuration.cold+0x1b6/0x1f1 [ 266.440990][ C1] ? usb_device_is_owned+0x203/0x290 [ 266.441005][ C1] ? usb_choose_configuration+0x561/0xa30 [ 266.441026][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 266.441039][ C1] usb_generic_driver_probe+0xa1/0xe0 [ 266.441054][ C1] usb_probe_device+0xef/0x400 [ 266.441070][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 266.441086][ C1] really_probe+0x241/0xa60 [ 266.441103][ C1] __driver_probe_device+0x20e/0x450 [ 266.441118][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.441135][ C1] driver_probe_device+0x4a/0x140 [ 266.441151][ C1] __device_attach_driver+0x1df/0x320 [ 266.441173][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 266.441189][ C1] bus_for_each_drv+0x159/0x1e0 [ 266.441203][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 266.441216][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 266.441232][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 266.441249][ C1] __device_attach+0x1e4/0x4d0 [ 266.441265][ C1] ? __pfx___device_attach+0x10/0x10 [ 266.441281][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 266.441302][ C1] device_initial_probe+0xaf/0xd0 [ 266.441318][ C1] bus_probe_device+0x64/0x160 [ 266.441334][ C1] device_add+0x121d/0x1970 [ 266.441354][ C1] ? __pfx_device_add+0x10/0x10 [ 266.441370][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 266.441388][ C1] usb_new_device.part.0+0xcc2/0x1686 [ 266.441407][ C1] ? do_raw_spin_lock+0x128/0x260 [ 266.441424][ C1] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 266.441441][ C1] ? mark_held_locks+0x40/0x70 [ 266.441458][ C1] hub_event.cold+0x1e3/0xe90 [ 266.441484][ C1] ? __pfx_hub_event+0x10/0x10 [ 266.441508][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 266.441530][ C1] ? rcu_is_watching+0x12/0xc0 [ 266.441552][ C1] process_one_work+0xa23/0x1940 [ 266.441572][ C1] ? __pfx_process_one_work+0x10/0x10 [ 266.441589][ C1] ? __pfx_hub_event+0x10/0x10 [ 266.441605][ C1] worker_thread+0x5ef/0xe50 [ 266.441623][ C1] ? __pfx_worker_thread+0x10/0x10 [ 266.441637][ C1] ? kthread+0x13a/0x450 [ 266.441650][ C1] ? __pfx_worker_thread+0x10/0x10 [ 266.441663][ C1] kthread+0x370/0x450 [ 266.441681][ C1] ? __pfx_kthread+0x10/0x10 [ 266.441695][ C1] ret_from_fork+0x72b/0xd50 [ 266.441715][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 266.441732][ C1] ? rcu_is_watching+0x12/0xc0 [ 266.441750][ C1] ? __switch_to+0x800/0x10f0 [ 266.441765][ C1] ? __pfx_kthread+0x10/0x10 [ 266.441778][ C1] ret_from_fork_asm+0x1a/0x30 [ 266.441804][ C1] [ 266.442763][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 266.442776][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 266.442794][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 266.442803][ T30] Call Trace: [ 266.442809][ T30] [ 266.442816][ T30] dump_stack_lvl+0x100/0x190 [ 266.442837][ T30] vpanic+0x552/0x970 [ 266.442853][ T30] ? __pfx_vpanic+0x10/0x10 [ 266.442870][ T30] ? rcu_is_watching+0x12/0xc0 [ 266.442896][ T30] panic+0xd1/0xe0 [ 266.442911][ T30] ? __pfx_panic+0x10/0x10 [ 266.442929][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 266.442947][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 266.442964][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 266.442981][ T30] ? watchdog.cold+0x1ec/0x234 [ 266.442998][ T30] ? watchdog+0xcc1/0x1030 [ 266.443018][ T30] watchdog.cold+0x1fd/0x234 [ 266.443039][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 266.443058][ T30] ? __pfx_watchdog+0x10/0x10 [ 266.443077][ T30] ? __kthread_parkme+0x18c/0x230 [ 266.443103][ T30] ? kthread+0x13a/0x450 [ 266.443117][ T30] ? __pfx_watchdog+0x10/0x10 [ 266.443135][ T30] kthread+0x370/0x450 [ 266.443150][ T30] ? __pfx_kthread+0x10/0x10 [ 266.443168][ T30] ret_from_fork+0x72b/0xd50 [ 266.443195][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 266.443218][ T30] ? __switch_to+0x800/0x10f0 [ 266.443234][ T30] ? __pfx_kthread+0x10/0x10 [ 266.443252][ T30] ret_from_fork_asm+0x1a/0x30 [ 266.443284][ T30] [ 266.451297][ T30] Kernel Offset: disabled