last executing test programs: 8.520346814s ago: executing program 1 (id=1922): socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x200, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x4430, 0x80000, 0x0, 0x40055}, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000100001040000000000dcb0b93d000000", @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r0], 0x7c}}, 0x0) 8.328928547s ago: executing program 2 (id=1925): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000002c0)={r3, 0x200}, 0x8) 8.326799363s ago: executing program 1 (id=1926): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2d}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 8.169616038s ago: executing program 1 (id=1928): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24841}, 0x4840) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4040880) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @broadcast}, {{0xfffc, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}, 0x0) 7.977085469s ago: executing program 2 (id=1930): socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(r0) 7.895619673s ago: executing program 1 (id=1931): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 7.595718492s ago: executing program 1 (id=1933): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6.883925399s ago: executing program 1 (id=1935): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x70bd2d, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x50}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014000100"], 0xb8}}, 0x987a3a9f32358a4c) 5.244083967s ago: executing program 2 (id=1944): socket$inet6(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000097b000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 4.991741358s ago: executing program 2 (id=1947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) setpriority(0x1, r1, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cd"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000002c0)="304a188661b3b00e812e48e879d8184ad5693568c0b7db76120ba8df73a6f6c74cce87c4ff70", &(0x7f0000000540)=""/138}, 0x20) 4.013736854s ago: executing program 2 (id=1951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0005040000000c8a8ecec451"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x4, 0x10010, 0xffffffffffffffff, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001540)) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_NET_SET_BACKEND(r8, 0xaf02, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c80)={r0, 0x0, &(0x7f0000000c40)=""/62}, 0x20) 3.694297013s ago: executing program 0 (id=1954): socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x100000000000026d, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c1042, 0x134) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) 2.514563095s ago: executing program 0 (id=1958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="76b0c94c8eaad7858a", 0x9}], 0x1}}], 0x1, 0x51) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x2, {0x1, 0xf0, 0x2}, {0x0, 0x1, 0x1}, 0xff, 0xfe}, {0x3, 0x0, {}, {0xcf566215295f5787, 0x1, 0x1}, 0x2, 0x1}, {0x0, 0x3, {0x1, 0xff}, {0x0, 0xf0, 0xbbb88231f7c69642}, 0xfc, 0xfe}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xd, 0x9}, {0xfff1, 0xffff}, {0xfff3, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4008886}, 0x20000050) 2.315430774s ago: executing program 0 (id=1959): r0 = io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4174, 0x100, 0x8001002, 0x77}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 2.115983406s ago: executing program 0 (id=1960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x28, 0x0, 0xefff}, 0x28) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000580)={0xfffffffb, {{0xa, 0x4e21, 0x1ffc000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e23, 0x3, @private0, 0x2}}}, 0x108) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r8, 0x0, 0x0, 0x0, 0x8) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000280)={0x0}) ioctl$UBLK_U_CMD_START_DEV(r7, 0xc0207506, &(0x7f00000003c0)={r9, 0xffff, 0x0, 0x0, r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x1, 0x2}]}, @union]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1}, 0x28) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 1.963427962s ago: executing program 4 (id=1961): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) setpriority(0x1, r1, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cd"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000002c0)="304a188661b3b00e812e48e879d8184ad5693568c0b7db76120ba8df73a6f6c74cce87c4ff70", &(0x7f0000000540)=""/138}, 0x20) 1.803123644s ago: executing program 3 (id=1962): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x400004, 0x100000001, 0x3, 0x24, 0x83a3, 0xe92, 0x4, 0x9}) write(r0, &(0x7f0000000180)="10d6463aed", 0x5) listen(0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 1.434321229s ago: executing program 3 (id=1963): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a2800e6ff050a0904000000000000000002004b00140004801000018008"], 0x50}}, 0x4800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.345989903s ago: executing program 3 (id=1964): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.146340084s ago: executing program 3 (id=1965): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xc0003, 0x0, {[0x9, 0x64ac, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9, 0x80000000000006, 0x6, 0x1]}}) 1.085402712s ago: executing program 4 (id=1966): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 1.013507225s ago: executing program 0 (id=1967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r2, 0x0, 0x2100000c, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8100002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x6400) 983.715737ms ago: executing program 4 (id=1968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@arm64={0x4, 0x7, 0x7, '\x00', 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 918.370731ms ago: executing program 3 (id=1969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 857.523971ms ago: executing program 4 (id=1970): syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x201e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x8, 0xa1, "", [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0xf31}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0x5, 0xf}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x80, 0x8, 0x5, 0x20, 0x40}, 0x29, &(0x7f0000000300)={0x5, 0xf, 0x29, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x44, 0xc5, 0x1000}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x8cfc, 0xf00, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x16, 0x6, 0x4}]}, 0x1, [{0x0, 0x0}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 738.669728ms ago: executing program 2 (id=1971): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x1006, 0x0) signalfd(r0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, &(0x7f0000000040)=0x4) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r4, 0x2007ffb) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) fcntl$setsig(r5, 0xa, 0x21) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x1000, 0x800000000000000) splice(r8, 0x0, r12, 0x0, 0x80, 0x8) write$tun(r9, &(0x7f00000033c0)=ANY=[], 0x107c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x88882, 0x0) dup(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) 737.727698ms ago: executing program 3 (id=1972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000"], 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000840)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0005040000000c8a8ecec451"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x400000, 0x0, 0x4}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x4, 0x10010, 0xffffffffffffffff, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001540)) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$VHOST_NET_SET_BACKEND(r8, 0xaf02, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c80)={r0, 0x0, &(0x7f0000000c40)=""/62}, 0x20) 679.292907ms ago: executing program 0 (id=1973): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_VM_TYPES(r0, 0x4068aea3, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000040)={0xbc, 0x0, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000001000000000000800018010000786c6c2500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000c9ee0000ab82e19356ffe2191b4a39706ffb408870019afac626"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 155.020684ms ago: executing program 4 (id=1974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x82000) r5 = dup3(r4, r3, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec83502"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) kernel console output (not intermixed with test programs): _gadget_register_driver returned -16 [ 452.539317][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.552269][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.110146][T10733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.119575][T10733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.290945][ T118] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 454.291545][ T43] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 454.292395][ T118] (NULL device *): queue 0 connect admin queue failed (-6). [ 454.292412][ T118] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 454.292425][ T118] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 454.786430][ T30] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 455.042848][ T30] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 455.047328][ T30] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 455.047359][ T30] usb 3-1: can't read configurations, error -71 [ 455.387197][T10753] kvm [10752]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000 [ 455.456298][ T942] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 455.766266][ T942] usb 2-1: Using ep0 maxpacket: 16 [ 455.772043][ T942] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 455.786466][ T942] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 455.786528][ T942] usb 2-1: config 0 has no interface number 0 [ 455.786573][ T942] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.786600][ T942] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.786637][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.306332][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 456.318982][ T6241] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 456.327391][ T942] usb 2-1: config 0 descriptor?? [ 456.328043][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 456.328066][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 456.328081][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 456.809767][ T31] audit: type=1400 audit(1788410851.842:1001): avc: denied { write } for pid=10772 comm="syz.2.1403" name="max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 457.475370][ T942] uclogic 0003:28BD:0071.0006: pen parameters not found [ 457.475409][ T942] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring [ 457.484574][ T942] usb 2-1: USB disconnect, device number 32 [ 457.625418][ T31] audit: type=1400 audit(1788410852.652:1002): avc: denied { write } for pid=10788 comm="syz.0.1411" name="dynamic_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 457.690906][T10790] openvswitch: netlink: Unknown key attributes 1 [ 457.781731][T10796] ªªªªªª: renamed from vlan0 (while UP) [ 457.792408][ T31] audit: type=1400 audit(1788410852.822:1003): avc: denied { write } for pid=10797 comm="syz.0.1414" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 457.956742][T10803] binder: 10802:10803 ioctl 541b 0 returned -22 [ 458.299897][ T31] audit: type=1400 audit(1788410853.292:1004): avc: denied { load_policy } for pid=10811 comm="syz.3.1420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 458.388023][ T1007] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 458.413274][ T50] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 458.426517][ T1007] (NULL device *): queue 0 connect admin queue failed (-6). [ 458.434634][ T1007] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 458.435165][ T1007] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 458.713085][T10818] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 458.728028][T10818] SELinux: failed to load policy [ 459.296265][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 459.766311][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 459.766870][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 459.767816][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.767846][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.767878][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.774428][ T10] usb 3-1: config 0 descriptor?? [ 459.776376][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 459.776394][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 460.060860][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 460.944027][ T5873] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 460.951273][ T43] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 460.958167][ T5873] (NULL device *): queue 0 connect admin queue failed (-6). [ 460.958191][ T5873] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 460.958206][ T5873] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 462.347852][ T5700] usb 3-1: USB disconnect, device number 24 [ 462.736473][ T942] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 462.921408][ T942] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 462.934808][ T942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.934853][ T942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 463.027882][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 463.046892][ T5873] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 463.055905][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 463.055930][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 463.055940][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 463.078511][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 463.078528][ T942] usb 3-1: Product: syz [ 463.078536][ T942] usb 3-1: Manufacturer: syz [ 463.458374][ T942] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 463.492219][ T31] audit: type=1400 audit(1788410858.522:1005): avc: denied { bind } for pid=10865 comm="syz.1.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 463.676285][ T31] audit: type=1400 audit(1788410858.652:1006): avc: denied { write } for pid=10871 comm="syz.1.1438" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 463.723427][ T30] kernel read not supported for file /usbmon9 (pid: 30 comm: kworker/1:1) [ 465.116529][ T1007] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 465.131835][ T6241] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 465.134366][ T942] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 465.149363][ T942] usb 3-1: USB disconnect, device number 25 [ 465.149840][ T1007] (NULL device *): queue 0 connect admin queue failed (-6). [ 465.149873][ T1007] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 465.149888][ T1007] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 465.162780][ T942] mos7840 3-1:1.0: device disconnected [ 465.192900][ T5613] udevd[5613]: setting mode of /dev/bus/usb/003/025 to 020664 failed: No such file or directory [ 465.204777][ T5613] udevd[5613]: setting owner of /dev/bus/usb/003/025 to uid=0, gid=0 failed: No such file or directory [ 465.887957][T10894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.899616][T10894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.946476][T10900] lo speed is unknown, defaulting to 1000 [ 467.015081][T10919] overlayfs: failed to clone upperpath [ 467.191761][ T1007] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 467.205260][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 467.205339][ T1007] (NULL device *): queue 0 connect admin queue failed (-6). [ 467.205358][ T1007] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 467.205381][ T1007] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 467.418493][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 468.120046][ T5700] hid_parser_main: 16 callbacks suppressed [ 468.127858][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.150127][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.163423][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.174811][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.183493][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.197126][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.206911][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.215024][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.215045][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.215063][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.215080][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.215098][ T5700] hid-generic 0000:0000:0004.0007: unknown main item tag 0x0 [ 468.363874][ T5700] hid-generic 0000:0000:0004.0007: hidraw0: HID v0.03 Device [syz1] on syz0 [ 468.877203][T10952] lo speed is unknown, defaulting to 1000 [ 468.973263][T10948] fido_id[10948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 469.286319][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 469.317721][ T50] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 469.329848][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 469.337485][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 469.345866][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 469.376308][ T5700] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 469.807003][ T5700] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 469.817409][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.828265][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.840272][ T5700] usb 4-1: config 0 descriptor?? [ 469.848742][ T5700] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 470.016418][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 470.167163][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 470.179894][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.192158][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 470.192250][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.217668][ T10] usb 2-1: config 0 descriptor?? [ 470.251658][ T5700] pwc: recv_control_msg error -71 req 02 val 2b00 [ 470.259053][ T5700] pwc: recv_control_msg error -71 req 02 val 2700 [ 470.265911][ T5700] pwc: recv_control_msg error -71 req 04 val 1700 [ 470.273509][ T5700] pwc: recv_control_msg error -71 req 02 val 2c00 [ 470.280950][ T5700] pwc: recv_control_msg error -71 req 04 val 1000 [ 470.287970][ T5700] pwc: recv_control_msg error -71 req 04 val 1300 [ 470.294880][ T5700] pwc: recv_control_msg error -71 req 04 val 1400 [ 470.301929][ T5700] pwc: recv_control_msg error -71 req 02 val 2000 [ 470.308941][ T5700] pwc: recv_control_msg error -71 req 02 val 2100 [ 470.315901][ T5700] pwc: recv_control_msg error -71 req 02 val 2200 [ 470.323094][ T5700] pwc: recv_control_msg error -71 req 06 val 0600 [ 470.330110][ T5700] pwc: recv_control_msg error -71 req 04 val 1500 [ 470.337167][ T5700] pwc: recv_control_msg error -71 req 02 val 2500 [ 470.344078][ T5700] pwc: recv_control_msg error -71 req 02 val 2400 [ 470.351038][ T5700] pwc: recv_control_msg error -71 req 02 val 2600 [ 470.358010][ T5700] pwc: recv_control_msg error -71 req 02 val 2900 [ 470.364934][ T5700] pwc: recv_control_msg error -71 req 02 val 2800 [ 470.372030][ T5700] pwc: recv_control_msg error -71 req 04 val 1100 [ 470.379079][ T5700] pwc: recv_control_msg error -71 req 04 val 1200 [ 470.387949][ T5700] pwc: Registered as video103. [ 470.397149][ T5700] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 470.427532][ T5700] usb 4-1: USB disconnect, device number 36 [ 470.969827][ T10] apple 0003:05AC:024F.0008: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 471.077327][ T10] apple 0003:05AC:024F.0008: hidraw0: USB HID v0.00 Joystick [HID 05ac:024f] on usb-dummy_hcd.1-1/input0 [ 471.296107][ T10] usb 2-1: USB disconnect, device number 33 [ 471.347546][ T6499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 471.362181][ T50] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 471.362384][ T6499] (NULL device *): queue 0 connect admin queue failed (-6). [ 471.362402][ T6499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 471.362446][ T6499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 471.721861][T10979] fido_id[10979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 471.890954][T10984] overlayfs: failed to resolve './file0': -2 [ 472.921028][T10984] lo speed is unknown, defaulting to 1000 [ 473.157196][T11001] overlayfs: failed to clone upperpath [ 473.507181][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 473.546638][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 473.556383][ T942] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 473.570306][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 473.579025][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 473.587310][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 473.746843][ T942] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 473.757569][ T942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.757623][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.771459][ T942] usb 4-1: config 0 descriptor?? [ 473.805965][ T942] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 474.689315][T11022] lo speed is unknown, defaulting to 1000 [ 475.384438][T11024] netlink: 'syz.0.1485': attribute type 13 has an invalid length. [ 475.384460][T11024] netlink: 'syz.0.1485': attribute type 17 has an invalid length. [ 475.671872][T11024] gretap0: refused to change device tx_queue_len [ 475.672301][T11024] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 475.681673][ T6499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 475.715210][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 475.725243][ T6499] (NULL device *): queue 0 connect admin queue failed (-6). [ 475.725303][ T6499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 475.725341][ T6499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 475.780945][ T5733] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 475.986324][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 475.988488][ T5733] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 475.989575][ T5733] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.989607][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.989637][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.992594][ T5733] usb 3-1: config 0 descriptor?? [ 475.994880][ T5733] hub 3-1:0.0: bad descriptor, ignoring hub [ 475.994927][ T5733] hub 3-1:0.0: probe with driver hub failed with error -5 [ 476.006397][ T5733] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 476.055613][ T942] pwc: recv_control_msg error -71 req 02 val 2b00 [ 476.063816][ T942] pwc: recv_control_msg error -71 req 02 val 2700 [ 476.064301][ T942] pwc: recv_control_msg error -71 req 04 val 1700 [ 476.064815][ T942] pwc: recv_control_msg error -71 req 02 val 2c00 [ 476.065423][ T942] pwc: recv_control_msg error -71 req 04 val 1000 [ 476.066469][ T942] pwc: recv_control_msg error -71 req 04 val 1300 [ 476.066868][ T942] pwc: recv_control_msg error -71 req 04 val 1400 [ 476.067265][ T942] pwc: recv_control_msg error -71 req 02 val 2000 [ 476.072094][ T942] pwc: recv_control_msg error -71 req 02 val 2100 [ 476.073165][ T942] pwc: recv_control_msg error -71 req 02 val 2200 [ 476.074064][ T942] pwc: recv_control_msg error -71 req 06 val 0600 [ 476.076112][ T942] pwc: recv_control_msg error -71 req 04 val 1500 [ 476.077181][ T942] pwc: recv_control_msg error -71 req 02 val 2500 [ 476.078599][ T942] pwc: recv_control_msg error -71 req 02 val 2400 [ 476.092474][ T942] pwc: recv_control_msg error -71 req 02 val 2600 [ 476.094833][ T942] pwc: recv_control_msg error -71 req 02 val 2900 [ 476.096925][ T942] pwc: recv_control_msg error -71 req 02 val 2800 [ 476.097550][ T942] pwc: recv_control_msg error -71 req 04 val 1100 [ 476.101235][ T942] pwc: recv_control_msg error -71 req 04 val 1200 [ 476.232088][ T942] pwc: Registered as video103. [ 476.234382][T11032] overlayfs: failed to clone upperpath [ 476.237767][T11033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.426646][ T942] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 476.444499][ T942] usb 4-1: USB disconnect, device number 37 [ 477.610581][T11056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.784768][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 477.813113][ T6499] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 477.813206][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 477.813224][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 477.813237][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 478.255357][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.255832][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.385604][T11070] overlayfs: failed to clone upperpath [ 478.607742][ T31] audit: type=1400 audit(1788410873.642:1007): avc: denied { read } for pid=11072 comm="syz.2.1500" path="socket:[30455]" dev="sockfs" ino=30455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 478.632518][ T5700] usb 3-1: USB disconnect, device number 26 [ 478.758876][T11079] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.826249][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.861662][ T118] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 479.909419][ T1007] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 479.923510][ T118] (NULL device *): queue 0 connect admin queue failed (-6). [ 479.923550][ T118] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 479.923576][ T118] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 479.977624][ T5700] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 480.136240][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 480.150013][ T5700] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 480.185797][ T5700] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.185850][ T5700] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.185897][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.525773][ T5700] usb 3-1: config 0 descriptor?? [ 480.655790][ T31] audit: type=1800 audit(1788410875.682:1008): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1495" name="bus" dev="ramfs" ino=31231 res=0 errno=0 [ 480.928529][ T5700] hub 3-1:0.0: bad descriptor, ignoring hub [ 480.937628][ T5700] hub 3-1:0.0: probe with driver hub failed with error -5 [ 480.946623][ T5700] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 481.993227][ T6499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 482.065003][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 482.078182][ T6499] (NULL device *): queue 0 connect admin queue failed (-6). [ 482.078239][ T6499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 482.079440][ T6499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 482.173333][T11115] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 483.004582][T11129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.337829][ T5700] usb 3-1: USB disconnect, device number 27 [ 484.149167][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 484.149348][ T13] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 484.149457][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 484.149472][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 484.149485][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 484.919537][T11157] ima: policy update failed [ 484.924381][ T31] audit: type=1802 audit(1788410879.952:1009): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.1524" res=0 errno=0 [ 485.939127][ T942] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 486.002740][T11172] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.043840][T11174] FAULT_INJECTION: forcing a failure. [ 486.043840][T11174] name failslab, interval 1, probability 0, space 0, times 0 [ 486.056934][T11174] CPU: 0 UID: 0 PID: 11174 Comm: syz.0.1531 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.056966][T11174] Tainted: [L]=SOFTLOCKUP [ 486.056974][T11174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 486.056984][T11174] Call Trace: [ 486.056990][T11174] [ 486.056999][T11174] dump_stack_lvl+0x100/0x190 [ 486.057030][T11174] should_fail_ex.cold+0x5/0xa [ 486.057054][T11174] should_failslab+0xc2/0x120 [ 486.057076][T11174] __kmalloc_cache_noprof+0x91/0x6d0 [ 486.057102][T11174] ? do_eventfd+0x67/0x2b0 [ 486.057126][T11174] do_eventfd+0x67/0x2b0 [ 486.057149][T11174] __x64_sys_eventfd2+0x53/0x80 [ 486.057168][T11174] do_syscall_64+0x123/0x790 [ 486.057207][T11174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.057226][T11174] RIP: 0033:0x7f35f3d9e159 [ 486.057243][T11174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.057260][T11174] RSP: 002b:00007f35f4c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 486.057280][T11174] RAX: ffffffffffffffda RBX: 00007f35f4025fa0 RCX: 00007f35f3d9e159 [ 486.057293][T11174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.057304][T11174] RBP: 00007f35f3e35024 R08: 0000000000000000 R09: 0000000000000000 [ 486.057315][T11174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.057326][T11174] R13: 00007f35f4026038 R14: 00007f35f4025fa0 R15: 00007ffc41e88c78 [ 486.057351][T11174] [ 486.237345][ T942] usb 3-1: Using ep0 maxpacket: 8 [ 486.241312][ T6241] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 486.242618][ T13] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 486.244734][ T6241] (NULL device *): queue 0 connect admin queue failed (-6). [ 486.244756][ T6241] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 486.245939][ T942] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 486.246098][ T6241] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 486.702733][ T942] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 486.702818][ T942] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 486.702854][ T942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 486.702878][ T942] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 486.702902][ T942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 486.702923][ T942] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.702985][ T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.767119][ T5733] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 486.989464][ T5733] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 486.997267][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.997295][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.997313][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 486.997372][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.022476][ T5733] usb 2-1: config 0 descriptor?? [ 487.065158][ T942] usb 3-1: usb_control_msg returned -32 [ 487.065194][ T942] usbtmc 3-1:16.0: can't read capabilities [ 487.823121][ T5733] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 488.006650][ T5700] usb 2-1: USB disconnect, device number 34 [ 488.802245][ T6241] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 488.824664][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 488.842698][ T6241] (NULL device *): queue 0 connect admin queue failed (-6). [ 488.842735][ T6241] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 488.842762][ T6241] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 488.984347][T11209] overlayfs: failed to resolve './file1/file0': -2 [ 489.034054][ T5733] usb 3-1: USB disconnect, device number 28 [ 490.769910][T11223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.888780][ T5873] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 490.951127][ T6241] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 490.965360][ T5873] (NULL device *): queue 0 connect admin queue failed (-6). [ 490.965391][ T5873] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 490.965412][ T5873] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 492.169383][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.184370][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.236835][T11243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.398758][ T5700] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 492.547610][ T5700] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.550478][ T5700] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 492.550546][ T5700] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 492.550596][ T5700] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.550684][ T5700] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 492.550740][ T5700] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 492.584616][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.584702][ T5700] usb 4-1: Product: syz [ 492.584749][ T5700] usb 4-1: Manufacturer: syz [ 492.823371][ T5700] cdc_wdm 4-1:1.0: skipping garbage [ 492.823538][ T5700] cdc_wdm 4-1:1.0: skipping garbage [ 492.942596][ T5700] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 492.949006][ T5700] cdc_wdm 4-1:1.0: Unknown control protocol [ 493.012754][ T31] audit: type=1400 audit(1788410888.042:1010): avc: denied { read write } for pid=11236 comm="syz.3.1551" name="cdc-wdm0" dev="devtmpfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 493.013726][ T31] audit: type=1400 audit(1788410888.042:1011): avc: denied { open } for pid=11236 comm="syz.3.1551" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 493.047269][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 493.047453][ T1007] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 493.049216][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 493.049261][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 493.049274][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 493.395915][T11266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.628552][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 494.466227][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.871107][T11277] overlayfs: failed to clone upperpath [ 495.049078][T11283] overlayfs: failed to clone upperpath [ 495.064257][T11283] overlayfs: failed to resolve './cgroup': -2 [ 495.095653][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'. [ 495.106291][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 495.119033][T11285] ipvlan2: entered allmulticast mode [ 495.119056][T11285] syz_tun: entered allmulticast mode [ 495.120838][ T1007] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 495.120931][ T50] (NULL device *): queue 0 connect admin queue failed (-6). [ 495.120951][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 495.120965][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 495.446259][ T5700] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 495.461547][T11299] overlayfs: failed to clone upperpath [ 495.608144][ T5700] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.08 [ 495.730999][ T5700] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 495.731041][ T5700] usb 3-1: config 1 has no interface number 0 [ 496.048365][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.048411][ T5700] usb 3-1: Product: syz [ 496.048444][ T5700] usb 3-1: Manufacturer: syz [ 496.048455][ T5700] usb 3-1: SerialNumber: syz [ 496.071947][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.431854][ T5700] usb 3-1: 3:0 : does not exist [ 496.431894][ T5700] usb 3-1: 3:0 : does not exist [ 496.475690][ T5733] usb 4-1: USB disconnect, device number 38 [ 496.556111][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.556589][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.693604][T11320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.793312][ T5700] usb 3-1: USB disconnect, device number 29 [ 496.853377][T11326] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 496.972408][ T31] audit: type=1400 audit(1788410892.002:1012): avc: denied { shutdown } for pid=11329 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 497.166302][ T5733] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 497.186932][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 497.191435][ T6241] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 497.191518][ T12] (NULL device *): queue 0 connect admin queue failed (-6). [ 497.191535][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 497.191548][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 497.316994][ T5733] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 497.329997][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.348342][ T5733] usb 4-1: config 0 descriptor?? [ 497.360377][ T5733] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 498.291742][ T5733] gspca_cpia1: usb_control_msg 03, error -32 [ 498.293144][ T5733] gspca_cpia1: usb_control_msg 03, error -71 [ 498.293944][ T5733] gspca_cpia1: usb_control_msg 01, error -71 [ 498.294040][ T5733] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 498.482190][ T5733] usb 4-1: USB disconnect, device number 39 [ 499.056334][ T942] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 499.219680][ T942] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.269902][ T43] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 499.290156][ T2920] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 499.300716][ T43] (NULL device *): queue 0 connect admin queue failed (-6). [ 499.309295][ T43] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 499.321968][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.335502][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.345849][ T942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.346061][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.377453][ T43] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 499.447806][ T942] usb 2-1: config 0 descriptor?? [ 499.792641][ T5700] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 499.968661][T11377] lo speed is unknown, defaulting to 1000 [ 500.650169][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 500.654523][ T5700] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 500.658240][ T5700] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.658289][ T5700] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.658322][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.667831][ T5700] usb 3-1: config 0 descriptor?? [ 500.670299][ T5700] hub 3-1:0.0: bad descriptor, ignoring hub [ 500.670327][ T5700] hub 3-1:0.0: probe with driver hub failed with error -5 [ 500.673594][ T5700] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 500.702891][T11371] netlink: 'syz.3.1601': attribute type 13 has an invalid length. [ 500.702913][T11371] netlink: 'syz.3.1601': attribute type 17 has an invalid length. [ 500.734707][T11371] gretap0: refused to change device tx_queue_len [ 500.735099][T11371] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 500.793092][ T942] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 500.822174][ T942] usb 2-1: USB disconnect, device number 35 [ 501.039628][ T31] audit: type=1400 audit(1788410896.072:1013): avc: denied { cmd } for pid=11386 comm="syz.0.1605" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 501.095941][T11384] fido_id[11384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 501.651179][ T6499] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 501.652997][ T64] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 501.654250][ T6499] (NULL device *): queue 0 connect admin queue failed (-6). [ 501.654272][ T6499] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 501.654286][ T6499] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 501.819649][T11398] FAULT_INJECTION: forcing a failure. [ 501.819649][T11398] name failslab, interval 1, probability 0, space 0, times 0 [ 501.819699][T11398] CPU: 1 UID: 0 PID: 11398 Comm: syz.0.1607 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.819727][T11398] Tainted: [L]=SOFTLOCKUP [ 501.819734][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 501.819746][T11398] Call Trace: [ 501.819753][T11398] [ 501.819761][T11398] dump_stack_lvl+0x100/0x190 [ 501.819793][T11398] should_fail_ex.cold+0x5/0xa [ 501.819826][T11398] should_failslab+0xc2/0x120 [ 501.819850][T11398] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 501.819871][T11398] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 501.819908][T11398] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 501.819937][T11398] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 501.819968][T11398] alloc_inode+0x68/0x250 [ 501.819997][T11398] new_inode+0x22/0x1c0 [ 501.820025][T11398] hugetlbfs_get_inode+0x39a/0x700 [ 501.820042][T11398] ? do_raw_spin_lock+0x128/0x260 [ 501.820067][T11398] hugetlb_file_setup+0x15b/0x5b0 [ 501.820089][T11398] memfd_alloc_file+0xc2/0x610 [ 501.820111][T11398] ? _raw_spin_unlock+0x28/0x50 [ 501.820139][T11398] ? __pfx_memfd_alloc_file+0x10/0x10 [ 501.820171][T11398] __do_sys_memfd_create+0x236/0x3d0 [ 501.820207][T11398] do_syscall_64+0x123/0x790 [ 501.820230][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.820251][T11398] RIP: 0033:0x7f35f3d9e159 [ 501.820268][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.820288][T11398] RSP: 002b:00007f35f4c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 501.820309][T11398] RAX: ffffffffffffffda RBX: 00007f35f4025fa0 RCX: 00007f35f3d9e159 [ 501.820323][T11398] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 501.820335][T11398] RBP: 00007f35f3e35024 R08: 0000000000000000 R09: 0000000000000000 [ 501.820347][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.820360][T11398] R13: 00007f35f4026038 R14: 00007f35f4025fa0 R15: 00007ffc41e88c78 [ 501.820387][T11398] [ 502.045838][T11402] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 502.122489][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 502.273744][T11413] netlink: 'syz.1.1614': attribute type 2 has an invalid length. [ 502.284420][T11413] netlink: 'syz.1.1614': attribute type 2 has an invalid length. [ 502.507938][T11423] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0018 instead [ 502.519388][T11423] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2000 instead [ 502.530053][T11423] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x013f instead [ 502.542916][T11423] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000740: 0x642f instead [ 502.554734][T11423] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000744: 0x6d2f instead [ 502.566856][T11423] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000748: 0x0023 instead [ 502.758422][T11423] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 502.758458][T11423] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 502.836413][ T5689] usb 3-1: USB disconnect, device number 30 [ 502.906390][ T5733] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 502.954744][ T31] audit: type=1400 audit(1788410897.982:1014): avc: denied { map } for pid=11434 comm="syz.3.1608" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 502.989231][ T31] audit: type=1400 audit(1788410898.022:1015): avc: denied { append } for pid=11434 comm="syz.3.1608" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 503.013453][ T31] audit: type=1400 audit(1788410898.042:1016): avc: denied { ioctl } for pid=11434 comm="syz.3.1608" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 503.052456][T11435] nullb0: [POWERTEC] p1 [ 503.053163][T11435] nullb0: p1 start 1986356271 is beyond EOD, truncated [ 503.056930][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 503.069719][ T5733] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 503.080860][T11441] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1626'. [ 503.092705][ T5733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.092777][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.092824][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.128912][ T5733] usb 2-1: config 0 descriptor?? [ 503.143721][ T5733] hub 2-1:0.0: bad descriptor, ignoring hub [ 503.150336][ T5733] hub 2-1:0.0: probe with driver hub failed with error -5 [ 503.155077][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.155333][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.174713][ T5733] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 503.666403][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 503.666654][ T43] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 503.666841][ T50] (NULL device *): queue 0 connect admin queue failed (-6). [ 503.666915][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 503.666964][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 505.456282][ T5733] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 505.636417][ T5733] usb 3-1: Using ep0 maxpacket: 32 [ 505.645737][ T5733] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 505.826309][ T2920] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 505.839850][ T6241] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 505.854208][ T2920] (NULL device *): queue 0 connect admin queue failed (-6). [ 505.854281][ T2920] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 505.854343][ T2920] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 505.876788][ T5733] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.876867][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.876906][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.913933][ T5733] usb 3-1: config 0 descriptor?? [ 505.927944][ T5733] hub 3-1:0.0: bad descriptor, ignoring hub [ 505.946297][ T5733] hub 3-1:0.0: probe with driver hub failed with error -5 [ 505.955393][ T5733] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 505.987139][ T942] usb 2-1: USB disconnect, device number 36 [ 506.102527][T11486] webusb: landingPage URL too long [ 507.276254][ T5733] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 507.446294][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 507.452196][ T5733] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 507.462229][ T5733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.472561][ T5733] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.485703][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.496973][ T5733] usb 4-1: config 0 descriptor?? [ 507.508352][ T5733] hub 4-1:0.0: bad descriptor, ignoring hub [ 507.514439][ T5733] hub 4-1:0.0: probe with driver hub failed with error -5 [ 507.523728][ T5733] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 507.906255][ T2920] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 507.906346][ T6241] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 507.906403][ T2920] (NULL device *): queue 0 connect admin queue failed (-6). [ 507.906418][ T2920] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 507.906431][ T2920] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 508.609127][ T5689] usb 3-1: USB disconnect, device number 31 [ 510.755371][ T118] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 510.767117][ T5873] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 510.768546][ T118] (NULL device *): queue 0 connect admin queue failed (-6). [ 510.768578][ T118] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 510.768607][ T118] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 511.026575][ T5733] usb 4-1: USB disconnect, device number 40 [ 511.053686][T11540] syzkaller1: entered promiscuous mode [ 511.053729][T11540] syzkaller1: entered allmulticast mode [ 512.786880][ T5873] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 512.788761][ T12] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 512.790570][ T5873] (NULL device *): queue 0 connect admin queue failed (-6). [ 512.790641][ T5873] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 512.790689][ T5873] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 513.132851][T11558] SELinux: invalid class [ 513.571150][T11558] SELinux: failed to load policy [ 514.506376][ T5733] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 514.561852][T11596] overlayfs: failed to resolve './file1/file0': -2 [ 514.890699][ T6241] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 514.891059][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 514.891142][ T6241] (NULL device *): queue 0 connect admin queue failed (-6). [ 514.891162][ T6241] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 514.891180][ T6241] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 514.966223][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 514.972008][ T5733] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 514.986896][ T5733] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 514.995132][ T5733] usb 2-1: config 0 has no interface number 0 [ 515.004651][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.012835][ T5733] usb 2-1: Product: syz [ 515.012858][ T5733] usb 2-1: Manufacturer: syz [ 515.012872][ T5733] usb 2-1: SerialNumber: syz [ 515.030911][ T5733] usb 2-1: config 0 descriptor?? [ 515.038834][ T5733] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 515.186291][ T5604] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 515.524117][ T5733] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 515.526253][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 515.569940][ T5733] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 515.628307][T11607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.637694][T11607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.758509][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 515.759082][ T10] usb 2-1: USB disconnect, device number 37 [ 515.800971][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 515.806261][ T5689] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 515.811575][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 515.814290][ T10] quatech2 2-1:0.51: device disconnected [ 516.307799][ T5689] usb 4-1: Using ep0 maxpacket: 32 [ 516.314790][ T5689] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 516.326501][ T5689] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 516.355787][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.355826][ T5689] usb 4-1: Product: syz [ 516.355849][ T5689] usb 4-1: Manufacturer: syz [ 516.355867][ T5689] usb 4-1: SerialNumber: syz [ 516.375226][T11605] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 516.423506][T11617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.604444][ T5689] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.618434][ T5689] usb 4-1: MIDIStreaming interface descriptor not found [ 516.666095][ T5689] usb 4-1: USB disconnect, device number 41 [ 516.717774][ T6671] udevd[6671]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 516.847075][ T5733] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 516.956356][ T5873] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 516.957626][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 516.957719][ T5873] (NULL device *): queue 0 connect admin queue failed (-6). [ 516.957760][ T5873] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 516.957774][ T5873] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 516.996899][ T5733] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.997941][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.997969][ T5733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.998013][ T5733] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 516.998045][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.000798][ T5733] usb 3-1: config 0 descriptor?? [ 517.442945][ T5733] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 519.034304][ T5873] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 519.050434][ T43] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 519.052603][ T5873] (NULL device *): queue 0 connect admin queue failed (-6). [ 519.053653][ T5873] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 519.054362][ T5873] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 519.209245][ C1] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 519.265453][T11654] netlink: 'syz.4.1691': attribute type 18 has an invalid length. [ 519.265526][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 519.292193][T11654] netlink: 'syz.4.1691': attribute type 18 has an invalid length. [ 519.292284][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 519.297588][ T118] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.297654][ T118] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.306300][ T118] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.306340][ T118] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.451559][ T31] audit: type=1400 audit(1788410914.422:1017): avc: denied { map } for pid=11655 comm="syz.0.1692" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 520.365689][ T30] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 520.399296][ T942] usb 3-1: USB disconnect, device number 32 [ 520.492154][T11673] FAULT_INJECTION: forcing a failure. [ 520.492154][T11673] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 520.492206][T11673] CPU: 1 UID: 0 PID: 11673 Comm: syz.1.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.492235][T11673] Tainted: [L]=SOFTLOCKUP [ 520.492241][T11673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 520.492249][T11673] Call Trace: [ 520.492256][T11673] [ 520.492264][T11673] dump_stack_lvl+0x100/0x190 [ 520.492292][T11673] should_fail_ex.cold+0x5/0xa [ 520.492313][T11673] ? prepare_alloc_pages+0x16d/0x5b0 [ 520.492336][T11673] should_fail_alloc_page+0xeb/0x140 [ 520.492359][T11673] prepare_alloc_pages+0x1f0/0x5b0 [ 520.492381][T11673] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 520.492407][T11673] ? mlock_drain_local+0x254/0x4e0 [ 520.492438][T11673] ? try_to_migrate_one+0x14a6/0x30d0 [ 520.492461][T11673] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 520.492495][T11673] ? __pfx_try_to_migrate_one+0x10/0x10 [ 520.492518][T11673] ? lock_acquire+0x1d1/0x380 [ 520.492535][T11673] ? folio_lock_anon_vma_read+0x348/0xe30 [ 520.492563][T11673] ? folio_lock_anon_vma_read+0x348/0xe30 [ 520.492591][T11673] ? rcu_is_watching+0x13/0xc0 [ 520.492613][T11673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 520.492635][T11673] ? policy_nodemask+0xed/0x4f0 [ 520.492660][T11673] alloc_pages_mpol+0x201/0x550 [ 520.492680][T11673] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 520.492706][T11673] folio_alloc_mpol_noprof+0x36/0x260 [ 520.492730][T11673] alloc_migration_target_by_mpol+0x2c1/0x650 [ 520.492755][T11673] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 520.492778][T11673] ? __pfx___might_resched+0x10/0x10 [ 520.492794][T11673] ? folio_get_anon_vma+0x16b/0x980 [ 520.492817][T11673] migrate_pages_batch+0x5c4/0x4680 [ 520.492840][T11673] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 520.492869][T11673] ? walk_pgd_range+0x11d1/0x1e00 [ 520.492893][T11673] ? __pfx_migrate_pages_batch+0x10/0x10 [ 520.492930][T11673] migrate_pages_sync+0x12c/0x880 [ 520.492952][T11673] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 520.492976][T11673] ? lockdep_hardirqs_on+0x7d/0x110 [ 520.492994][T11673] ? irqentry_exit+0x24d/0xa10 [ 520.493011][T11673] ? __pfx_migrate_pages_sync+0x10/0x10 [ 520.493042][T11673] migrate_pages+0x1a83/0x2850 [ 520.493066][T11673] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 520.493095][T11673] ? __pfx_migrate_pages+0x10/0x10 [ 520.493120][T11673] ? do_mbind+0x555/0xfd0 [ 520.493149][T11673] do_mbind+0x5a4/0xfd0 [ 520.493178][T11673] ? __pfx_do_mbind+0x10/0x10 [ 520.493199][T11673] ? find_held_lock+0x2b/0x80 [ 520.493221][T11673] ? ksys_write+0x190/0x250 [ 520.493244][T11673] ? __pfx_get_nodes+0x10/0x10 [ 520.493268][T11673] kernel_mbind+0x1b7/0x200 [ 520.493292][T11673] ? __pfx_kernel_mbind+0x10/0x10 [ 520.493320][T11673] do_syscall_64+0x123/0x790 [ 520.493340][T11673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.493357][T11673] RIP: 0033:0x7ff1e019e159 [ 520.493372][T11673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.493387][T11673] RSP: 002b:00007ff1e1095028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 520.493404][T11673] RAX: ffffffffffffffda RBX: 00007ff1e0425fa0 RCX: 00007ff1e019e159 [ 520.493415][T11673] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 520.493425][T11673] RBP: 00007ff1e0235024 R08: 0000000000000000 R09: 0000000000000002 [ 520.493434][T11673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.493444][T11673] R13: 00007ff1e0426038 R14: 00007ff1e0425fa0 R15: 00007ffe4b422218 [ 520.493466][T11673] [ 520.517090][ T30] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 520.518294][ T30] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 520.518354][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.520268][ T30] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 520.520287][ T30] usb 4-1: Manufacturer: syz [ 520.532384][ T30] usb 4-1: config 0 descriptor?? [ 520.699462][ T30] rc_core: IR keymap rc-hauppauge not found [ 520.699477][ T30] Registered IR keymap rc-empty [ 520.700446][ T30] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 520.714622][ T30] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input35 [ 520.938425][ T30] usb 4-1: USB disconnect, device number 42 [ 521.117999][ T43] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 521.136012][ T6241] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 521.153333][ T43] (NULL device *): queue 0 connect admin queue failed (-6). [ 521.161518][ T43] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 521.161582][ T43] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 521.611061][ T942] usb 1-1: USB disconnect, device number 11 [ 521.660066][ T942] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 522.004110][T11717] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1713'. [ 522.046322][ T5689] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 522.067105][ T30] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 522.068600][ T31] audit: type=1400 audit(1788410917.092:1018): avc: denied { write } for pid=11703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.191912][ T31] audit: type=1400 audit(1788410917.222:1019): avc: denied { write } for pid=11727 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.219293][ T5689] usb 3-1: Using ep0 maxpacket: 8 [ 522.225760][ T5689] usb 3-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 522.228505][ T30] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 522.230892][ T30] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 522.230911][ T30] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 522.230926][ T30] usb 4-1: config 4 has no interface number 0 [ 522.230952][ T30] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 522.243230][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.243253][ T30] usb 4-1: Product: syz [ 522.243265][ T30] usb 4-1: Manufacturer: syz [ 522.243277][ T30] usb 4-1: SerialNumber: syz [ 522.257039][ T5689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.257067][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.257104][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.293973][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 522.311116][T11729] ipvlan2: entered allmulticast mode [ 522.311135][T11729] syz_tun: entered allmulticast mode [ 522.364187][ T5689] usb 3-1: config 0 descriptor?? [ 522.599988][ T5689] usbhid 3-1:0.0: can't add hid device: -71 [ 522.600095][ T5689] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 522.618375][ T5689] usb 3-1: USB disconnect, device number 33 [ 522.676406][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 522.701297][ T30] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 522.775368][ T30] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 522.777212][ T30] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 522.777252][ T30] usb 4-1: media controller created [ 522.808379][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.844750][ T31] audit: type=1400 audit(1788410917.872:1020): avc: denied { write } for pid=11734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.886248][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 522.891890][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 522.905082][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 522.905119][ T10] usb 2-1: config 179 has no interface number 0 [ 522.905163][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 522.905189][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 522.905218][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 522.905241][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 522.905265][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 522.905299][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.985941][T11756] FAULT_INJECTION: forcing a failure. [ 522.985941][T11756] name failslab, interval 1, probability 0, space 0, times 0 [ 522.985993][T11756] CPU: 1 UID: 0 PID: 11756 Comm: syz.0.1721 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.986019][T11756] Tainted: [L]=SOFTLOCKUP [ 522.986026][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 522.986036][T11756] Call Trace: [ 522.986042][T11756] [ 522.986049][T11756] dump_stack_lvl+0x100/0x190 [ 522.986078][T11756] should_fail_ex.cold+0x5/0xa [ 522.986100][T11756] should_failslab+0xc2/0x120 [ 522.986122][T11756] __kvmalloc_node_noprof+0x113/0x9b0 [ 522.986143][T11756] ? vfree+0x12a/0x6d0 [ 522.986161][T11756] ? bpf_check_cfg+0xb4/0x990 [ 522.986189][T11756] bpf_check_cfg+0xb4/0x990 [ 522.986212][T11756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 522.986235][T11756] bpf_check+0x7a15/0xa7c0 [ 522.986256][T11756] ? __css_rstat_updated+0x1ce/0x590 [ 522.986274][T11756] ? __lock_acquire+0x4c5/0x1ec0 [ 522.986307][T11756] ? __pfx_bpf_check+0x10/0x10 [ 522.986326][T11756] ? lock_acquire+0x1d1/0x380 [ 522.986341][T11756] ? bpf_prog_load+0x1a09/0x2a80 [ 522.986360][T11756] ? find_held_lock+0x2b/0x80 [ 522.986381][T11756] ? bpf_prog_load+0x1a09/0x2a80 [ 522.986403][T11756] ? __asan_memset+0x23/0x50 [ 522.986435][T11756] ? bpf_prog_load+0x1ac3/0x2a80 [ 522.986454][T11756] bpf_prog_load+0x1ac3/0x2a80 [ 522.986479][T11756] ? __pfx_bpf_prog_load+0x10/0x10 [ 522.986517][T11756] __sys_bpf+0x1f46/0x4a30 [ 522.986537][T11756] ? __pfx___sys_bpf+0x10/0x10 [ 522.986550][T11756] ? find_held_lock+0x2b/0x80 [ 522.986570][T11756] ? futex_wake+0x4ea/0x5e0 [ 522.986610][T11756] ? rcu_read_lock_any_held+0x6a/0x90 [ 522.986634][T11756] ? find_held_lock+0x2b/0x80 [ 522.986654][T11756] ? ksys_write+0x190/0x250 [ 522.986669][T11756] ? ksys_write+0x190/0x250 [ 522.986697][T11756] ? __x64_sys_futex+0x34f/0x4d0 [ 522.986716][T11756] ? __x64_sys_futex+0x358/0x4d0 [ 522.986739][T11756] ? xfd_validate_state+0x129/0x190 [ 522.986759][T11756] ? __x64_sys_bpf+0xce/0x140 [ 522.986772][T11756] __x64_sys_bpf+0xce/0x140 [ 522.986788][T11756] ? do_syscall_64+0xae/0x790 [ 522.986807][T11756] do_syscall_64+0x123/0x790 [ 522.986826][T11756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.986844][T11756] RIP: 0033:0x7f35f3d9e159 [ 522.986857][T11756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.986872][T11756] RSP: 002b:00007f35f4c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.986888][T11756] RAX: ffffffffffffffda RBX: 00007f35f4025fa0 RCX: 00007f35f3d9e159 [ 522.986899][T11756] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 522.986909][T11756] RBP: 00007f35f3e35024 R08: 0000000000000000 R09: 0000000000000000 [ 522.986918][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.986927][T11756] R13: 00007f35f4026038 R14: 00007f35f4025fa0 R15: 00007ffc41e88c78 [ 522.986948][T11756] [ 523.016817][T11733] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 523.132045][ T31] audit: type=1400 audit(1788410918.172:1021): avc: denied { write } for pid=11757 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.137174][ T30] DVB: Unable to find symbol dib7000p_attach() [ 523.137188][ T30] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 523.199469][ T2920] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 523.203936][ T12] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 523.206374][ T2920] (NULL device *): queue 0 connect admin queue failed (-6). [ 523.206397][ T2920] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 523.206411][ T2920] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 523.370838][ T30] rc_core: IR keymap rc-dib0700-rc5 not found [ 523.370855][ T30] Registered IR keymap rc-empty [ 523.371325][ T30] dvb-usb: could not initialize remote control. [ 523.371336][ T30] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 523.518703][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input37 [ 523.610354][ T10] usb 4-1: USB disconnect, device number 43 [ 523.662352][ T10] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 523.878442][ T30] usb 2-1: USB disconnect, device number 38 [ 523.878553][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 523.878590][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 523.960576][T11783] process 'syz.4.1727' launched './file0' with NULL argv: empty string added [ 523.969669][ T31] audit: type=1400 audit(1788410918.992:1022): avc: denied { execute_no_trans } for pid=11781 comm="syz.4.1727" path="/420/file0" dev="tmpfs" ino=2387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 524.519181][ T31] audit: type=1400 audit(1788410919.552:1023): avc: denied { write } for pid=11770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.629886][ T31] audit: type=1400 audit(1788410919.662:1024): avc: denied { write } for pid=11804 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.185299][T11821] lo speed is unknown, defaulting to 1000 [ 525.505900][T11825] netlink: 'syz.4.1736': attribute type 13 has an invalid length. [ 525.505925][T11825] netlink: 'syz.4.1736': attribute type 17 has an invalid length. [ 525.775795][T11825] gretap0: refused to change device tx_queue_len [ 525.776066][T11825] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 525.818806][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 525.819632][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 525.820360][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 525.820377][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 525.820390][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 526.541679][T11834] FAULT_INJECTION: forcing a failure. [ 526.541679][T11834] name failslab, interval 1, probability 0, space 0, times 0 [ 526.555362][T11834] CPU: 1 UID: 0 PID: 11834 Comm: syz.0.1739 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.555398][T11834] Tainted: [L]=SOFTLOCKUP [ 526.555406][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 526.555419][T11834] Call Trace: [ 526.555427][T11834] [ 526.555436][T11834] dump_stack_lvl+0x100/0x190 [ 526.555474][T11834] should_fail_ex.cold+0x5/0xa [ 526.555505][T11834] should_failslab+0xc2/0x120 [ 526.555530][T11834] __kmalloc_noprof+0xfc/0x840 [ 526.555552][T11834] ? lsm_blob_alloc+0x68/0x90 [ 526.555582][T11834] lsm_blob_alloc+0x68/0x90 [ 526.555608][T11834] security_prepare_creds+0x2d/0x290 [ 526.555642][T11834] prepare_creds+0x5d6/0x950 [ 526.555680][T11834] lookup_user_key+0x5d0/0x1300 [ 526.555716][T11834] ? __pfx_lookup_user_key+0x10/0x10 [ 526.555745][T11834] ? __might_fault+0xc5/0x140 [ 526.555772][T11834] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 526.555803][T11834] ? _copy_from_user+0x59/0xd0 [ 526.555829][T11834] ? memdup_user+0x82/0xe0 [ 526.555863][T11834] __do_sys_add_key+0x2a6/0x460 [ 526.555888][T11834] ? __pfx___do_sys_add_key+0x10/0x10 [ 526.555925][T11834] do_syscall_64+0x123/0x790 [ 526.555948][T11834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.555967][T11834] RIP: 0033:0x7f35f3d9e159 [ 526.555985][T11834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.556008][T11834] RSP: 002b:00007f35f4c4d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 526.556030][T11834] RAX: ffffffffffffffda RBX: 00007f35f4025fa0 RCX: 00007f35f3d9e159 [ 526.556043][T11834] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 526.556056][T11834] RBP: 00007f35f3e35024 R08: fffffffffffffffe R09: 0000000000000000 [ 526.556069][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.556083][T11834] R13: 00007f35f4026038 R14: 00007f35f4025fa0 R15: 00007ffc41e88c78 [ 526.556110][T11834] [ 527.023039][ T31] audit: type=1400 audit(1788410922.052:1025): avc: denied { write } for pid=11808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.215211][T11852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.282673][ T31] audit: type=1400 audit(1788410922.312:1026): avc: denied { write } for pid=11854 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.826425][ T5873] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 527.839770][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 527.851157][ T5873] (NULL device *): queue 0 connect admin queue failed (-6). [ 527.859845][ T5873] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 527.859894][ T5873] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 528.306075][ T31] audit: type=1400 audit(1788410923.332:1027): avc: denied { bind } for pid=11869 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 528.475818][T11873] overlayfs: overlapping lowerdir path [ 529.326857][T11878] lo speed is unknown, defaulting to 1000 [ 529.565846][T11882] netlink: 'syz.4.1748': attribute type 13 has an invalid length. [ 529.565868][T11882] netlink: 'syz.4.1748': attribute type 17 has an invalid length. [ 529.960945][T11882] gretap0: refused to change device tx_queue_len [ 529.961214][T11882] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 529.972961][ T2920] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 529.973276][ T5873] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 529.974653][ T2920] (NULL device *): queue 0 connect admin queue failed (-6). [ 529.974673][ T2920] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 529.974686][ T2920] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 530.103058][ T31] audit: type=1400 audit(1788410925.132:1028): avc: denied { write } for pid=11859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.194761][ T31] audit: type=1400 audit(1788410925.222:1029): avc: denied { write } for pid=11889 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.738214][ T30] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 530.746563][ T31] audit: type=1400 audit(1788410925.772:1030): avc: denied { write } for pid=11895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.826303][ T5586] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 530.887899][ T31] audit: type=1400 audit(1788410925.922:1031): avc: denied { write } for pid=11916 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.926268][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 530.938204][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 530.949355][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.949415][ T30] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.949456][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.987108][ T30] usb 3-1: config 0 descriptor?? [ 530.997786][ T30] hub 3-1:0.0: bad descriptor, ignoring hub [ 531.005469][ T5586] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 531.017382][ T30] hub 3-1:0.0: probe with driver hub failed with error -5 [ 531.029916][ T30] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 531.142127][ T5586] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 531.142167][ T5586] usb 4-1: config 0 has no interface number 0 [ 531.142213][ T5586] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.175983][ T5586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.176022][ T5586] usb 4-1: Product: syz [ 531.176047][ T5586] usb 4-1: Manufacturer: syz [ 531.176063][ T5586] usb 4-1: SerialNumber: syz [ 531.295503][ T5586] usb 4-1: config 0 descriptor?? [ 531.990114][ T2920] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 532.133992][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 532.156706][ T2920] (NULL device *): queue 0 connect admin queue failed (-6). [ 532.164325][ T2920] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 532.164374][ T2920] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 532.299923][ T5586] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 532.328283][ T5586] usb 4-1: USB disconnect, device number 44 [ 532.364541][ T5586] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 532.675577][T11949] lo speed is unknown, defaulting to 1000 [ 533.241077][T11950] netlink: 'syz.0.1760': attribute type 13 has an invalid length. [ 533.241104][T11950] netlink: 'syz.0.1760': attribute type 17 has an invalid length. [ 533.276061][T11954] overlayfs: overlapping lowerdir path [ 533.636687][T11950] gretap0: refused to change device tx_queue_len [ 533.637031][T11950] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 533.740555][ T31] audit: type=1400 audit(1788410928.772:1032): avc: denied { write } for pid=11922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.852515][ T10] usb 3-1: USB disconnect, device number 34 [ 533.951017][T11959] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 534.100699][ T31] audit: type=1400 audit(1788410929.132:1033): avc: denied { write } for pid=11968 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.226513][ T6241] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 534.227179][ T12] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 534.227248][ T6241] (NULL device *): queue 0 connect admin queue failed (-6). [ 534.227262][ T6241] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 534.227276][ T6241] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 534.246214][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 534.369381][T11980] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 534.369673][T11980] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 534.369695][T11980] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 534.369715][T11980] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 534.369733][T11980] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 534.369751][T11980] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 534.369769][T11980] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 534.369787][T11980] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 534.369805][T11980] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 534.407621][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 534.409351][T11982] FAULT_INJECTION: forcing a failure. [ 534.409351][T11982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.409380][T11982] CPU: 0 UID: 0 PID: 11982 Comm: syz.3.1769 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.409405][T11982] Tainted: [L]=SOFTLOCKUP [ 534.409411][T11982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 534.409422][T11982] Call Trace: [ 534.409431][T11982] [ 534.409438][T11982] dump_stack_lvl+0x100/0x190 [ 534.409468][T11982] should_fail_ex.cold+0x5/0xa [ 534.409487][T11982] ? prepare_alloc_pages+0x16d/0x5b0 [ 534.409510][T11982] should_fail_alloc_page+0xeb/0x140 [ 534.409533][T11982] prepare_alloc_pages+0x1f0/0x5b0 [ 534.409557][T11982] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 534.409584][T11982] ? __asan_memset+0x23/0x50 [ 534.409608][T11982] ? folios_put_refs+0x58a/0xaa0 [ 534.409634][T11982] ? __lock_acquire+0x4c5/0x1ec0 [ 534.409653][T11982] ? __css_rstat_updated+0x1ce/0x590 [ 534.409672][T11982] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.409704][T11982] ? rcu_is_watching+0x13/0xc0 [ 534.409725][T11982] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 534.409743][T11982] ? find_held_lock+0x2b/0x80 [ 534.409771][T11982] ? __lock_acquire+0x4c5/0x1ec0 [ 534.409788][T11982] ? rcu_is_watching+0x13/0xc0 [ 534.409806][T11982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 534.409825][T11982] ? policy_nodemask+0xed/0x4f0 [ 534.409847][T11982] alloc_pages_mpol+0x201/0x550 [ 534.409868][T11982] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 534.409887][T11982] ? filemap_get_entry+0x22d/0x450 [ 534.409907][T11982] ? filemap_get_entry+0x22d/0x450 [ 534.409930][T11982] folio_alloc_noprof+0x22/0x250 [ 534.409953][T11982] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 534.409982][T11982] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 534.410007][T11982] ? __filemap_get_folio_mpol+0xc22/0x1320 [ 534.410029][T11982] ? kasan_check_range+0x17d/0x1e0 [ 534.410053][T11982] __filemap_get_folio_mpol+0x653/0x1320 [ 534.410079][T11982] ioctx_alloc+0x7e1/0x21a0 [ 534.410111][T11982] ? __pfx_ioctx_alloc+0x10/0x10 [ 534.410139][T11982] __x64_sys_io_setup+0xc9/0x220 [ 534.410162][T11982] do_syscall_64+0x123/0x790 [ 534.410184][T11982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.410201][T11982] RIP: 0033:0x7f746e19e159 [ 534.410215][T11982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.410231][T11982] RSP: 002b:00007f746f053028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 534.410248][T11982] RAX: ffffffffffffffda RBX: 00007f746e425fa0 RCX: 00007f746e19e159 [ 534.410259][T11982] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000400 [ 534.410268][T11982] RBP: 00007f746e235024 R08: 0000000000000000 R09: 0000000000000000 [ 534.410277][T11982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.410286][T11982] R13: 00007f746e426038 R14: 00007f746e425fa0 R15: 00007fffd7027ca8 [ 534.410308][T11982] [ 534.410772][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 534.414494][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.414531][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.414564][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.418150][ T10] usb 3-1: config 0 descriptor?? [ 534.423794][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 534.423815][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 534.434993][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 535.671854][ T31] audit: type=1400 audit(1788410930.702:1034): avc: denied { lock } for pid=11998 comm="syz.0.1765" path="socket:[35513]" dev="sockfs" ino=35513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 535.760877][ T31] audit: type=1400 audit(1788410930.792:1035): avc: denied { write } for pid=11979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.045536][ T31] audit: type=1400 audit(1788410931.072:1036): avc: denied { write } for pid=12006 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.306731][ T5873] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 536.359233][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 536.505511][ T5873] (NULL device *): queue 0 connect admin queue failed (-6). [ 536.513373][ T5873] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 536.513420][ T5873] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 537.110111][ T5586] usb 3-1: USB disconnect, device number 35 [ 537.224937][ T31] audit: type=1400 audit(1788410932.252:1037): avc: denied { write } for pid=12016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.436426][ T31] audit: type=1400 audit(1788410932.472:1038): avc: denied { write } for pid=12054 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.557901][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1784'. [ 537.562625][T12060] netlink: 75 bytes leftover after parsing attributes in process `syz.3.1784'. [ 537.585844][T12063] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.606291][ T5586] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 537.756244][ T5586] usb 3-1: Using ep0 maxpacket: 32 [ 537.763026][ T5586] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 537.780733][ T5586] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.780786][ T5586] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.780832][ T5586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.819709][ T5586] usb 3-1: config 0 descriptor?? [ 537.864335][ T5586] hub 3-1:0.0: bad descriptor, ignoring hub [ 537.870629][ T5586] hub 3-1:0.0: probe with driver hub failed with error -5 [ 537.931168][ T5586] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 538.325151][ T31] audit: type=1400 audit(1788410933.352:1039): avc: denied { write } for pid=12061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.548700][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 538.562857][ T43] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 538.563040][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 538.563088][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 538.563118][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 538.830031][ T31] audit: type=1400 audit(1788410933.862:1040): avc: denied { write } for pid=12083 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.902654][ T31] audit: type=1400 audit(1788410934.932:1041): avc: denied { write } for pid=12085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.071031][T12107] bridge1: entered promiscuous mode [ 540.076964][T12107] bridge1: entered allmulticast mode [ 540.101731][T12107] team0: Port device bridge1 added [ 540.110579][ T31] audit: type=1400 audit(1788410935.152:1042): avc: denied { write } for pid=12112 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.142361][T12107] bridge0: port 1(team0) entered blocking state [ 540.142450][T12107] bridge0: port 1(team0) entered disabled state [ 540.142571][T12107] team0: entered allmulticast mode [ 540.210286][T12107] team0: entered promiscuous mode [ 540.286245][ T5586] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 540.444594][ T5586] usb 2-1: device descriptor read/64, error -71 [ 540.556503][ T30] usb 3-1: USB disconnect, device number 36 [ 540.628146][ T6241] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 540.641672][ T2920] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 540.641757][ T6241] (NULL device *): queue 0 connect admin queue failed (-6). [ 540.641797][ T6241] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 540.641811][ T6241] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 540.676228][ T5586] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 540.810368][ T5586] usb 2-1: device descriptor read/64, error -71 [ 540.947604][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 541.000160][ T5586] usb usb2-port1: attempt power cycle [ 541.149134][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 541.149338][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 541.153611][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.154142][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.161341][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.161417][ T10] usb 1-1: Product: syz [ 541.162251][ T10] usb 1-1: Manufacturer: syz [ 541.162575][ T10] usb 1-1: SerialNumber: syz [ 541.376794][ T10] usb 1-1: selecting invalid altsetting 1 [ 541.405447][ T10] usb 1-1: unit 6 not found! [ 541.676503][ T5586] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 541.697235][ T5586] usb 2-1: device descriptor read/8, error -71 [ 541.936311][ T5586] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 541.956877][ T5586] usb 2-1: device descriptor read/8, error -71 [ 542.069261][ T5586] usb usb2-port1: unable to enumerate USB device [ 542.071401][ T10] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 542.574705][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 542.597582][ T10] usb 1-1: USB disconnect, device number 12 [ 542.633841][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.706256][ T43] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 542.720251][ T5873] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 542.721852][ T43] (NULL device *): queue 0 connect admin queue failed (-6). [ 542.721881][ T43] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 542.721896][ T43] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 542.998851][T12179] veth0: entered promiscuous mode [ 543.006050][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 543.031235][T12181] overlayfs: failed to clone upperpath [ 543.252078][T12185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.930140][T12201] fuse: fd is not a fuse device [ 544.076810][T12209] SELinux: invalid class [ 544.080224][T12209] SELinux: failed to load policy [ 544.245893][T12214] overlayfs: failed to clone lowerpath [ 544.506023][T12229] FAULT_INJECTION: forcing a failure. [ 544.506023][T12229] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 544.524359][T12229] CPU: 1 UID: 0 PID: 12229 Comm: syz.3.1836 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.524398][T12229] Tainted: [L]=SOFTLOCKUP [ 544.524405][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 544.524418][T12229] Call Trace: [ 544.524424][T12229] [ 544.524431][T12229] dump_stack_lvl+0x100/0x190 [ 544.524464][T12229] should_fail_ex.cold+0x5/0xa [ 544.524485][T12229] ? prepare_alloc_pages+0x16d/0x5b0 [ 544.524506][T12229] should_fail_alloc_page+0xeb/0x140 [ 544.524527][T12229] prepare_alloc_pages+0x1f0/0x5b0 [ 544.524549][T12229] ? find_held_lock+0x2b/0x80 [ 544.524572][T12229] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 544.524602][T12229] ? is_bpf_text_address+0x94/0x1a0 [ 544.524623][T12229] ? kernel_text_address+0x8d/0x100 [ 544.524650][T12229] ? __kernel_text_address+0xd/0x30 [ 544.524673][T12229] ? unwind_get_return_address+0x59/0xa0 [ 544.524697][T12229] ? arch_stack_walk+0xa6/0xf0 [ 544.524724][T12229] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 544.524753][T12229] ? mas_next_node+0x29c/0x1020 [ 544.524773][T12229] ? stack_trace_save+0x8e/0xc0 [ 544.524817][T12229] ? mt_validate_nulls+0x22f/0xae0 [ 544.524844][T12229] ? __pfx_mt_validate_nulls+0x10/0x10 [ 544.524866][T12229] ? create_init_stack_vma+0x830/0xcf0 [ 544.524901][T12229] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 544.524923][T12229] ? policy_nodemask+0xed/0x4f0 [ 544.524949][T12229] alloc_pages_mpol+0x201/0x550 [ 544.524972][T12229] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 544.525002][T12229] alloc_pages_noprof+0x1a/0x160 [ 544.525030][T12229] __pud_alloc+0x3b/0x690 [ 544.525052][T12229] __handle_mm_fault+0x1078/0x2f60 [ 544.525083][T12229] ? __pfx___handle_mm_fault+0x10/0x10 [ 544.525106][T12229] ? __pfx_mt_find+0x10/0x10 [ 544.525150][T12229] handle_mm_fault+0x363/0xa20 [ 544.525181][T12229] __get_user_pages+0x8ae/0x2c30 [ 544.525212][T12229] ? __pfx___get_user_pages+0x10/0x10 [ 544.525233][T12229] ? lock_acquire+0x1d1/0x380 [ 544.525250][T12229] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 544.525279][T12229] get_user_pages_remote+0x3d2/0xb10 [ 544.525303][T12229] ? __pfx_get_user_pages_remote+0x10/0x10 [ 544.525392][T12229] get_arg_page+0xf4/0x310 [ 544.525424][T12229] ? __pfx_get_arg_page+0x10/0x10 [ 544.525455][T12229] ? do_raw_spin_lock+0x128/0x260 [ 544.525476][T12229] ? alloc_bprm+0x54e/0x9e0 [ 544.525489][T12229] ? alloc_bprm+0x54e/0x9e0 [ 544.525508][T12229] copy_string_kernel+0x17d/0x3f0 [ 544.525537][T12229] ? alloc_bprm+0x596/0x9e0 [ 544.525557][T12229] do_execveat_common.isra.0+0x2e6/0x580 [ 544.525582][T12229] __x64_sys_execve+0x93/0xd0 [ 544.525602][T12229] do_syscall_64+0x123/0x790 [ 544.525624][T12229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.525645][T12229] RIP: 0033:0x7f746e19e159 [ 544.525662][T12229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.525680][T12229] RSP: 002b:00007f746f053028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 544.525700][T12229] RAX: ffffffffffffffda RBX: 00007f746e425fa0 RCX: 00007f746e19e159 [ 544.525713][T12229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 544.525723][T12229] RBP: 00007f746e235024 R08: 0000000000000000 R09: 0000000000000000 [ 544.525734][T12229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.525746][T12229] R13: 00007f746e426038 R14: 00007f746e425fa0 R15: 00007fffd7027ca8 [ 544.525770][T12229] [ 544.786710][ T2920] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 544.786943][ T13] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 544.787344][ T2920] (NULL device *): queue 0 connect admin queue failed (-6). [ 544.787439][ T2920] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 544.787474][ T2920] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 544.974835][ T31] audit: type=1400 audit(1788410940.002:1043): avc: denied { ioctl } for pid=12231 comm="syz.1.1837" path="socket:[37795]" dev="sockfs" ino=37795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 545.050953][ T30] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 545.264027][T12236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 545.293423][ T31] audit: type=1400 audit(1788410940.332:1044): avc: denied { mounton } for pid=12240 comm="syz.4.1841" path="/452/file0" dev="tmpfs" ino=2566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 545.293540][T12241] fuse: fd is not a fuse device [ 545.294736][ T31] audit: type=1400 audit(1788410940.332:1045): avc: denied { read } for pid=12240 comm="syz.4.1841" name="file0" dev="tmpfs" ino=2566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 545.295023][ T31] audit: type=1400 audit(1788410940.332:1046): avc: denied { open } for pid=12240 comm="syz.4.1841" path="/452/file0" dev="tmpfs" ino=2566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 545.397027][ T30] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 545.400557][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.400795][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 545.401007][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 545.401057][ T30] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.401161][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.656448][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 546.277304][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 546.278036][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 546.279723][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.279754][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.279789][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.318040][ T10] usb 3-1: config 0 descriptor?? [ 546.781491][ T10] hid_parser_main: 79 callbacks suppressed [ 546.788004][ T10] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 546.788051][ T10] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 546.866521][ T43] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 546.866651][ T5873] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 546.867084][ T43] (NULL device *): queue 0 connect admin queue failed (-6). [ 546.867110][ T43] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 546.867136][ T43] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 546.979276][ T10] ft260 0003:0403:6030.000C: chip code: 0000 0000 [ 547.195597][ T10] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 547.449178][ T10] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 547.472305][ T30] gud 1-1:1.0: USB-1: Failed to add TV modes (ret=-71) [ 547.472358][ T30] gud 1-1:1.0: USB-1: Failed to add properties (ret=-71) [ 547.472395][ T30] gud 1-1:1.0: Failed to get connectors (error=-71) [ 547.472419][ T30] gud 1-1:1.0: probe with driver gud failed with error -71 [ 547.493061][ T30] usb 1-1: USB disconnect, device number 13 [ 547.729382][ T10] ft260 0003:0403:6030.000C: failed to reset I2C controller: -71 [ 547.802059][ T10] usb 3-1: USB disconnect, device number 37 [ 547.875588][T12289] xt_hashlimit: size too large, truncated to 1048576 [ 547.926951][ T31] audit: type=1400 audit(1788410942.962:1047): avc: denied { getopt } for pid=12288 comm="syz.1.1853" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.941641][ T31] audit: type=1400 audit(1788410942.972:1048): avc: denied { wake_alarm } for pid=12288 comm="syz.1.1853" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 548.129089][T12297] net_ratelimit: 3255 callbacks suppressed [ 548.135229][T12297] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 548.154177][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.154294][ T6241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.198220][T12299] pim6reg1: entered promiscuous mode [ 548.203903][T12299] pim6reg1: entered allmulticast mode [ 548.497277][T12309] MTDSB: Device #1 doesn't appear to exist [ 548.497277][T12309] [ 548.600371][ T31] audit: type=1400 audit(1788410943.632:1049): avc: denied { listen } for pid=12312 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 548.621162][ T31] audit: type=1400 audit(1788410943.652:1050): avc: denied { accept } for pid=12312 comm="syz.1.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 548.969035][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 549.050371][ T6241] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 549.064731][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 549.064760][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 549.064775][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 549.669543][ T31] audit: type=1400 audit(1788410944.702:1051): avc: denied { remount } for pid=12339 comm="syz.1.1871" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 550.013123][T12352] syz.3.1875 uses obsolete (PF_INET,SOCK_PACKET) [ 550.117637][ T30] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 550.134688][ T31] audit: type=1400 audit(1788410945.162:1052): avc: denied { bind } for pid=12360 comm="syz.4.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 550.186441][ T31] audit: type=1400 audit(1788410945.222:1053): avc: denied { setopt } for pid=12360 comm="syz.4.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 550.206846][ T31] audit: type=1400 audit(1788410945.232:1054): avc: denied { accept } for pid=12360 comm="syz.4.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 550.229552][ T31] audit: type=1400 audit(1788410945.262:1055): avc: denied { append } for pid=12365 comm="syz.1.1880" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 550.280120][ T30] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 550.282719][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 550.282752][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 550.282778][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.541521][ T31] audit: type=1400 audit(1788410945.572:1056): avc: denied { map } for pid=12378 comm="syz.1.1884" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 550.565532][ T31] audit: type=1400 audit(1788410945.592:1057): avc: denied { cmd } for pid=12378 comm="syz.1.1884" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=io_uring permissive=1 [ 550.589529][ T5700] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 550.752574][T12383] FAULT_INJECTION: forcing a failure. [ 550.752574][T12383] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 550.752646][T12383] CPU: 1 UID: 0 PID: 12383 Comm: syz.1.1885 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.752675][T12383] Tainted: [L]=SOFTLOCKUP [ 550.752681][T12383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 550.752691][T12383] Call Trace: [ 550.752698][T12383] [ 550.752705][T12383] dump_stack_lvl+0x100/0x190 [ 550.752736][T12383] should_fail_ex.cold+0x5/0xa [ 550.752761][T12383] _copy_from_iter+0x43a/0x1690 [ 550.752792][T12383] ? __pfx__copy_from_iter+0x10/0x10 [ 550.752816][T12383] ? __pfx___alloc_skb+0x10/0x10 [ 550.752852][T12383] netlink_sendmsg+0x808/0xda0 [ 550.752881][T12383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.752907][T12383] ? selinux_socket_sendmsg+0x198/0x2f0 [ 550.752934][T12383] sock_write_iter+0x53a/0x5b0 [ 550.752954][T12383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.752978][T12383] ? __pfx_sock_write_iter+0x10/0x10 [ 550.753004][T12383] ? __pfx___file_has_perm+0x10/0x10 [ 550.753031][T12383] do_iter_readv_writev+0x6f7/0x930 [ 550.753056][T12383] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 550.753077][T12383] ? selinux_file_permission+0x8f/0x6d0 [ 550.753104][T12383] ? bpf_lsm_file_permission+0x9/0x10 [ 550.753123][T12383] ? security_file_permission+0x76/0x210 [ 550.753140][T12383] ? rw_verify_area+0xce/0x6d0 [ 550.753163][T12383] vfs_writev+0x360/0xdd0 [ 550.753187][T12383] ? __lock_acquire+0x4c5/0x1ec0 [ 550.753206][T12383] ? __pfx_vfs_writev+0x10/0x10 [ 550.753233][T12383] ? lock_acquire+0x1d1/0x380 [ 550.753248][T12383] ? __fget_files+0x34/0x3d0 [ 550.753280][T12383] ? __fget_files+0x21f/0x3d0 [ 550.753303][T12383] ? do_writev+0x28a/0x340 [ 550.753324][T12383] do_writev+0x28a/0x340 [ 550.753347][T12383] ? __pfx_do_writev+0x10/0x10 [ 550.753375][T12383] do_syscall_64+0x123/0x790 [ 550.753397][T12383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.753415][T12383] RIP: 0033:0x7ff1e019e159 [ 550.753429][T12383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.753444][T12383] RSP: 002b:00007ff1e1095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 550.753461][T12383] RAX: ffffffffffffffda RBX: 00007ff1e0425fa0 RCX: 00007ff1e019e159 [ 550.753471][T12383] RDX: 0000000000000002 RSI: 0000200000009ac0 RDI: 0000000000000003 [ 550.753481][T12383] RBP: 00007ff1e0235024 R08: 0000000000000000 R09: 0000000000000000 [ 550.753490][T12383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.753499][T12383] R13: 00007ff1e0426038 R14: 00007ff1e0425fa0 R15: 00007ffe4b422218 [ 550.753520][T12383] [ 550.797626][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 550.797647][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 550.797686][T12385] netlink: 'syz.0.1886': attribute type 11 has an invalid length. [ 550.835967][ T5700] usb 4-1: not running at top speed; connect to a high speed hub [ 550.835997][ T5700] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 550.846330][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.846620][ T6241] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.846650][ T6241] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.846695][ T6241] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.849199][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 550.849218][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 550.849239][T12385] netlink: 'syz.0.1886': attribute type 11 has an invalid length. [ 550.868601][ T5700] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.868647][ T5700] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 550.868684][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.116112][ T13] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 551.116316][ T5873] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 551.116402][ T13] (NULL device *): queue 0 connect admin queue failed (-6). [ 551.116445][ T13] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 551.116458][ T13] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 551.124106][ T5700] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 551.218677][ T5700] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 551.228143][ T5700] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 551.237805][ T5700] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 551.245628][ T5700] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 551.257649][ T5700] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 551.268164][ T5586] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 551.322544][ T942] usb 4-1: USB disconnect, device number 45 [ 551.428027][ T5586] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.429110][ T5586] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.429136][ T5586] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.429170][ T5586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.538192][ T942] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 551.550714][ T30] pegasus 3-1:1.0: can't reset MAC [ 551.550952][ T30] pegasus 3-1:1.0: probe with driver pegasus failed with error -5 [ 551.553070][ T942] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 551.553771][ T942] keyspan 4-1:1.0: device disconnected [ 551.565829][ T30] usb 3-1: USB disconnect, device number 38 [ 551.641689][ T5586] usb 1-1: usb_control_msg returned -32 [ 551.641738][ T5586] usbtmc 1-1:16.0: can't read capabilities [ 551.703535][T12403] xt_hashlimit: size too large, truncated to 1048576 [ 552.138286][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'. [ 552.197033][ T5700] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 552.209954][ T942] usb 1-1: USB disconnect, device number 14 [ 552.260848][T12420] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 552.316522][T12426] binder: 12424:12426 ioctl c0306201 200000000640 returned -22 [ 552.346816][ T5700] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 552.357232][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.367458][ T5700] usb 2-1: config 0 descriptor?? [ 552.421032][T12431] overlayfs: failed to clone lowerpath [ 552.440136][T12431] overlayfs: failed to clone lowerpath [ 552.440969][T12432] FAULT_INJECTION: forcing a failure. [ 552.440969][T12432] name failslab, interval 1, probability 0, space 0, times 0 [ 552.440996][T12432] CPU: 1 UID: 0 PID: 12432 Comm: syz.2.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.441021][T12432] Tainted: [L]=SOFTLOCKUP [ 552.441027][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 552.441038][T12432] Call Trace: [ 552.441044][T12432] [ 552.441050][T12432] dump_stack_lvl+0x100/0x190 [ 552.441078][T12432] should_fail_ex.cold+0x5/0xa [ 552.441101][T12432] should_failslab+0xc2/0x120 [ 552.441122][T12432] __kvmalloc_node_noprof+0x113/0x9b0 [ 552.441142][T12432] ? lock_acquire+0x1d1/0x380 [ 552.441159][T12432] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 552.441187][T12432] __nf_hook_entries_try_shrink+0x164/0x400 [ 552.441216][T12432] __nf_unregister_net_hook+0x1d2/0x6a0 [ 552.441248][T12432] nf_unregister_net_hooks+0x11b/0x170 [ 552.441274][T12432] nf_ct_netns_do_put+0x168/0x2f0 [ 552.441299][T12432] nf_ct_netns_put+0x39/0x90 [ 552.441322][T12432] find_check_entry.isra.0+0x4ca/0xa00 [ 552.441346][T12432] ? __pfx_helper_mt_destroy+0x10/0x10 [ 552.441373][T12432] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 552.441407][T12432] ? kasan_quarantine_put+0x104/0x240 [ 552.441423][T12432] ? lockdep_hardirqs_on+0x7d/0x110 [ 552.441442][T12432] ? translate_table+0xa60/0x16c0 [ 552.441465][T12432] ? translate_table+0xb53/0x16c0 [ 552.441487][T12432] ? kfree+0x22b/0x6d0 [ 552.441507][T12432] ? xt_check_table_hooks+0x206/0x330 [ 552.441526][T12432] translate_table+0xc31/0x16c0 [ 552.441559][T12432] ? __pfx_translate_table+0x10/0x10 [ 552.441590][T12432] do_ip6t_set_ctl+0x689/0xd00 [ 552.441613][T12432] ? nf_sockopt_find.isra.0+0x222/0x290 [ 552.441630][T12432] ? nf_sockopt_find.isra.0+0x222/0x290 [ 552.441649][T12432] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 552.441672][T12432] ? __mutex_unlock_slowpath+0x35d/0x930 [ 552.441694][T12432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 552.441723][T12432] ? nf_sockopt_find.isra.0+0x222/0x290 [ 552.441741][T12432] nf_setsockopt+0x8d/0xf0 [ 552.441759][T12432] ipv6_setsockopt+0x135/0x170 [ 552.441787][T12432] rawv6_setsockopt+0xee/0x5a0 [ 552.441809][T12432] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 552.441832][T12432] ? selinux_socket_setsockopt+0x6a/0x80 [ 552.441854][T12432] ? sock_common_setsockopt+0x2e/0xf0 [ 552.441873][T12432] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 552.441894][T12432] do_sock_setsockopt+0xf3/0x1d0 [ 552.441918][T12432] __sys_setsockopt+0x195/0x220 [ 552.441947][T12432] __x64_sys_setsockopt+0xbd/0x160 [ 552.441970][T12432] ? do_syscall_64+0xae/0x790 [ 552.441986][T12432] ? lockdep_hardirqs_on+0x7d/0x110 [ 552.442003][T12432] do_syscall_64+0x123/0x790 [ 552.442023][T12432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.442041][T12432] RIP: 0033:0x7f37bbb9e159 [ 552.442055][T12432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.442070][T12432] RSP: 002b:00007f37bc9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 552.442087][T12432] RAX: ffffffffffffffda RBX: 00007f37bbe25fa0 RCX: 00007f37bbb9e159 [ 552.442098][T12432] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 552.442108][T12432] RBP: 00007f37bbc35024 R08: 0000000000000528 R09: 0000000000000000 [ 552.442118][T12432] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 552.442127][T12432] R13: 00007f37bbe26038 R14: 00007f37bbe25fa0 R15: 00007ffe53418538 [ 552.442150][T12432] [ 552.500317][ T31] audit: type=1400 audit(1788410947.532:1058): avc: denied { mount } for pid=12427 comm="syz.3.1902" name="/" dev="rpc_pipefs" ino=40680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 552.764576][ T31] audit: type=1400 audit(1788410947.792:1059): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 553.195355][ T43] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 553.889726][ T13] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 553.899469][ T43] (NULL device *): queue 0 connect admin queue failed (-6). [ 553.899497][ T43] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 553.899513][ T43] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 554.873024][ T5700] usb 2-1: Cannot set autoneg [ 554.873216][ T5700] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 554.949536][ T5700] usb 2-1: USB disconnect, device number 43 [ 554.979926][ T31] audit: type=1400 audit(1788410950.012:1060): avc: denied { mounton } for pid=12460 comm="syz.2.1913" path="/proc/1161/task" dev="proc" ino=43165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 555.194684][ T31] audit: type=1400 audit(1788410950.222:1061): avc: denied { write } for pid=12469 comm="syz.3.1917" path="socket:[41315]" dev="sockfs" ino=41315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 555.223641][ T31] audit: type=1400 audit(1788410950.252:1062): avc: denied { setopt } for pid=12469 comm="syz.3.1917" lport=42306 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 555.733402][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1926'. [ 555.733443][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1926'. [ 555.786698][ T5700] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 555.916663][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 555.929704][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 555.930152][ T50] (NULL device *): queue 0 connect admin queue failed (-6). [ 555.930171][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 555.930185][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 555.956492][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 555.957145][ T5700] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 555.960013][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.960048][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 555.960081][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.974360][T12499] ip_tables: iptables: counters copy to user failed while replacing table [ 555.978289][ T5700] usb 4-1: config 0 descriptor?? [ 555.983149][ T5700] hub 4-1:0.0: bad descriptor, ignoring hub [ 555.983169][ T5700] hub 4-1:0.0: probe with driver hub failed with error -5 [ 555.992131][ T5700] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 556.421168][ T31] audit: type=1400 audit(1788410951.452:1063): avc: denied { mounton } for pid=12510 comm="syz.1.1933" path="/350/file1/file1" dev="autofs" ino=43230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 556.514047][ T5700] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 556.689089][ T5700] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.693471][ T5700] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.693532][ T5700] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 556.693640][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.772889][T12504] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 556.915952][ T5700] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.509336][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.987599][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 557.987884][ T2920] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 557.988275][ T50] (NULL device *): queue 0 connect admin queue failed (-6). [ 557.988295][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 557.988316][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 558.123619][ T5700] usb 3-1: USB disconnect, device number 39 [ 558.579017][ T31] audit: type=1400 audit(1788410953.612:1064): avc: denied { accept } for pid=12534 comm="syz.4.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 558.579578][ T31] audit: type=1400 audit(1788410953.612:1065): avc: denied { read } for pid=12534 comm="syz.4.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 558.726501][ T30] usb 4-1: USB disconnect, device number 46 [ 558.833192][T12542] fuse: fd is not a fuse device [ 560.070692][ T6241] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 560.083222][ T118] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 560.092464][ T6241] (NULL device *): queue 0 connect admin queue failed (-6). [ 560.092492][ T6241] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 560.092508][ T6241] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 560.367007][T12421] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 560.526262][T12421] usb 3-1: Using ep0 maxpacket: 32 [ 560.532239][T12421] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 560.542966][T12421] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.543016][T12421] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.543062][T12421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.578539][T12421] usb 3-1: config 0 descriptor?? [ 560.590622][T12421] hub 3-1:0.0: bad descriptor, ignoring hub [ 560.590659][T12421] hub 3-1:0.0: probe with driver hub failed with error -5 [ 560.609327][T12421] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 560.685048][T12577] bridge2: entered promiscuous mode [ 560.691426][T12577] bridge2: entered allmulticast mode [ 560.698350][T12577] team0: Device bridge2 is of different type [ 561.519624][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 562.147768][ T6241] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 562.148557][ T50] nvmet_fc: {0}: Create Association LS failed: Association Allocation Failed [ 562.148639][ T6241] (NULL device *): queue 0 connect admin queue failed (-6). [ 562.148655][ T6241] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-6) [ 562.148668][ T6241] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 562.591755][T12605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.114203][T12618] tipc: Enabled bearer , priority 0 [ 563.117486][T12618] syzkaller0: MTU too low for tipc bearer [ 563.117503][T12618] tipc: Disabling bearer [ 563.336437][ T942] usb 3-1: USB disconnect, device number 40 [ 563.526279][ T30] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 563.606429][T12421] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 563.676232][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 563.682018][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 563.692135][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.692187][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.692248][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.725990][ T30] usb 4-1: config 0 descriptor?? [ 563.735884][ T30] hub 4-1:0.0: bad descriptor, ignoring hub [ 563.742360][ T30] hub 4-1:0.0: probe with driver hub failed with error -5 [ 563.751193][ T30] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 563.766341][T12421] usb 1-1: Using ep0 maxpacket: 32 [ 563.769777][T12421] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 563.770631][T12421] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 563.770649][T12421] usb 1-1: config 0 has no interface number 0 [ 563.772276][T12421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.772296][T12421] usb 1-1: Product: syz [ 563.772308][T12421] usb 1-1: Manufacturer: syz [ 563.772320][T12421] usb 1-1: SerialNumber: syz [ 563.780101][T12421] usb 1-1: config 0 descriptor?? [ 563.785818][T12421] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 564.123833][ C0] ================================================================== [ 564.123850][ C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 564.123878][ C0] Read of size 1 at addr ffff88807d718ce8 by task kworker/0:0/12421 [ 564.123893][ C0] [ 564.123905][ C0] CPU: 0 UID: 0 PID: 12421 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.123929][ C0] Tainted: [L]=SOFTLOCKUP [ 564.123936][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 564.123947][ C0] Workqueue: usb_hub_wq hub_event [ 564.123968][ C0] Call Trace: [ 564.123975][ C0] [ 564.123982][ C0] dump_stack_lvl+0x100/0x190 [ 564.124007][ C0] print_report+0x13d/0x4b0 [ 564.124035][ C0] ? __virt_addr_valid+0x239/0x430 [ 564.124055][ C0] ? find_endpoint+0x2a3/0x2c0 [ 564.124075][ C0] kasan_report+0xdf/0x1c0 [ 564.124099][ C0] ? find_endpoint+0x2a3/0x2c0 [ 564.124122][ C0] find_endpoint+0x2a3/0x2c0 [ 564.124146][ C0] dummy_timer+0x500/0x3700 [ 564.124180][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 564.124199][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 564.124223][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 564.124249][ C0] ? mark_held_locks+0x40/0x70 [ 564.124269][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 564.124288][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 564.124313][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 564.124344][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 564.124371][ C0] handle_softirqs+0x1e6/0x9d0 [ 564.124393][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 564.124413][ C0] ? _raw_spin_unlock+0x28/0x50 [ 564.124440][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 564.124469][ C0] __irq_exit_rcu+0x194/0x210 [ 564.124487][ C0] irq_exit_rcu+0x9/0x30 [ 564.124506][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 564.124528][ C0] [ 564.124535][ C0] [ 564.124542][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.124563][ C0] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 564.124585][ C0] Code: ff ff ff ff 65 0f c1 15 f1 e6 bc 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 4c 46 03 00 e9 47 46 03 00 31 c0 [ 564.124604][ C0] RSP: 0018:ffffc900038beaf0 EFLAGS: 00000296 [ 564.124625][ C0] RAX: 0000000000000001 RBX: ffffffff8edec060 RCX: 0000000000000001 [ 564.124638][ C0] RDX: 0000000000000046 RSI: ffffffff8e3c4c52 RDI: ffffffff8c620e80 [ 564.124651][ C0] RBP: ffff888029e90000 R08: 0000000000000005 R09: 0000000000000000 [ 564.124664][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 564.124675][ C0] R13: 0000000000000246 R14: ffff888029e90ca0 R15: 0000000000000006 [ 564.124696][ C0] kernfs_root+0x20e/0x2a0 [ 564.124721][ C0] kernfs_add_one+0x623/0xaa0 [ 564.124749][ C0] kernfs_create_dir_ns+0x157/0x2b0 [ 564.124779][ C0] sysfs_create_dir_ns+0x13a/0x2b0 [ 564.124802][ C0] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.124824][ C0] ? find_held_lock+0x2b/0x80 [ 564.124849][ C0] ? kobject_add_internal+0x25f/0x930 [ 564.124875][ C0] ? kobject_add_internal+0x25f/0x930 [ 564.124902][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 564.124926][ C0] kobject_add_internal+0x2c8/0x930 [ 564.124955][ C0] kobject_add+0x16a/0x1e0 [ 564.124980][ C0] ? __pfx_kobject_add+0x10/0x10 [ 564.125008][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 564.125029][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 564.125050][ C0] ? class_to_subsys+0x114/0x150 [ 564.125075][ C0] device_add+0x294/0x1970 [ 564.125099][ C0] ? __pfx_dev_set_name+0x10/0x10 [ 564.125122][ C0] ? __pfx_device_add+0x10/0x10 [ 564.125142][ C0] ? idr_alloc+0xdd/0x130 [ 564.125164][ C0] ? __pfx_idr_alloc+0x10/0x10 [ 564.125189][ C0] usb_serial_probe.cold+0x257e/0x29f8 [ 564.125223][ C0] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 564.125256][ C0] usb_probe_interface+0x386/0x9b0 [ 564.125283][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 564.125308][ C0] ? kernfs_put+0x3f/0x60 [ 564.125333][ C0] ? sysfs_create_link+0x68/0xc0 [ 564.125355][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 564.125381][ C0] really_probe+0x241/0xa60 [ 564.125400][ C0] __driver_probe_device+0x210/0x460 [ 564.125418][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 564.125439][ C0] driver_probe_device+0x4a/0x140 [ 564.125457][ C0] __device_attach_driver+0x1df/0x320 [ 564.125476][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 564.125495][ C0] bus_for_each_drv+0x159/0x1e0 [ 564.125520][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 564.125545][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 564.125565][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 564.125585][ C0] __device_attach+0x1e4/0x4d0 [ 564.125604][ C0] ? __pfx___device_attach+0x10/0x10 [ 564.125628][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 564.125654][ C0] device_initial_probe+0xaf/0xd0 [ 564.125673][ C0] bus_probe_device+0x64/0x160 [ 564.125701][ C0] device_add+0x121d/0x1970 [ 564.125724][ C0] ? __pfx_device_add+0x10/0x10 [ 564.125743][ C0] ? mark_held_locks+0x40/0x70 [ 564.125760][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 564.125782][ C0] usb_set_configuration+0xd97/0x1c60 [ 564.125810][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 564.125841][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 564.125870][ C0] usb_probe_device+0xef/0x400 [ 564.125892][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 564.125915][ C0] really_probe+0x241/0xa60 [ 564.125935][ C0] __driver_probe_device+0x210/0x460 [ 564.125952][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 564.125971][ C0] driver_probe_device+0x4a/0x140 [ 564.125989][ C0] __device_attach_driver+0x1df/0x320 [ 564.126020][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 564.126038][ C0] bus_for_each_drv+0x159/0x1e0 [ 564.126064][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 564.126090][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 564.126111][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 564.126128][ C0] __device_attach+0x1e4/0x4d0 [ 564.126144][ C0] ? __pfx___device_attach+0x10/0x10 [ 564.126160][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 564.126182][ C0] device_initial_probe+0xaf/0xd0 [ 564.126200][ C0] bus_probe_device+0x64/0x160 [ 564.126225][ C0] device_add+0x121d/0x1970 [ 564.126247][ C0] ? __pfx_device_add+0x10/0x10 [ 564.126268][ C0] ? add_device_randomness+0xc9/0x110 [ 564.126296][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 564.126325][ C0] ? do_raw_spin_lock+0x128/0x260 [ 564.126347][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 564.126375][ C0] ? mark_held_locks+0x40/0x70 [ 564.126395][ C0] hub_event.cold+0x1e3/0xe90 [ 564.126431][ C0] ? __pfx_hub_event+0x10/0x10 [ 564.126452][ C0] ? mark_lock+0xea0/0x1020 [ 564.126472][ C0] ? lock_acquire+0x1d1/0x380 [ 564.126490][ C0] ? process_one_work+0xa2c/0x1b10 [ 564.126520][ C0] ? process_one_work+0x906/0x1b10 [ 564.126546][ C0] ? process_one_work+0x906/0x1b10 [ 564.126575][ C0] process_one_work+0xac7/0x1b10 [ 564.126608][ C0] ? __pfx_process_one_work+0x10/0x10 [ 564.126643][ C0] ? lock_acquire+0x1d1/0x380 [ 564.126665][ C0] ? __pfx_hub_event+0x10/0x10 [ 564.126688][ C0] worker_thread+0x5ef/0xe50 [ 564.126718][ C0] ? __pfx_worker_thread+0x10/0x10 [ 564.126746][ C0] ? kthread+0x13a/0x450 [ 564.126770][ C0] ? __pfx_worker_thread+0x10/0x10 [ 564.126796][ C0] kthread+0x373/0x450 [ 564.126821][ C0] ? __pfx_kthread+0x10/0x10 [ 564.126846][ C0] ret_from_fork+0x730/0xd60 [ 564.126865][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 564.126883][ C0] ? __switch_to+0x800/0x10f0 [ 564.126906][ C0] ? __pfx_kthread+0x10/0x10 [ 564.126931][ C0] ret_from_fork_asm+0x1a/0x30 [ 564.126958][ C0] [ 564.126966][ C0] [ 564.126970][ C0] Allocated by task 12128: [ 564.126980][ C0] kasan_save_stack+0x30/0x50 [ 564.126999][ C0] kasan_save_track+0x14/0x30 [ 564.127017][ C0] __kasan_kmalloc+0xaa/0xb0 [ 564.127033][ C0] __kmalloc_flags_noprof+0x370/0x8e0 [ 564.127058][ C0] alloc_slab_obj_exts+0x6a/0x170 [ 564.127082][ C0] new_slab+0x4ac/0x6e0 [ 564.127104][ C0] refill_objects+0xe3/0x410 [ 564.127127][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 564.127151][ C0] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 564.127167][ C0] __send_signal_locked+0x155/0x12d0 [ 564.127193][ C0] send_signal_locked+0x15e/0xa00 [ 564.127209][ C0] do_send_sig_info+0xa3/0x130 [ 564.127225][ C0] send_sigio_to_task+0x491/0x710 [ 564.127249][ C0] send_sigio+0x29e/0x4a0 [ 564.127272][ C0] dnotify_handle_event+0x15e/0x2b0 [ 564.127289][ C0] fsnotify_handle_inode_event.isra.0+0x1e3/0x480 [ 564.127313][ C0] fsnotify+0x1a8e/0x3240 [ 564.127334][ C0] __fsnotify_parent+0x6c3/0xd00 [ 564.127356][ C0] __kernel_read+0x5b2/0xad0 [ 564.127382][ C0] integrity_kernel_read+0x7e/0xb0 [ 564.127402][ C0] ima_calc_file_hash_tfm+0x25e/0x350 [ 564.127419][ C0] ima_calc_file_hash+0x1e3/0x380 [ 564.127436][ C0] ima_collect_measurement+0x94f/0xb30 [ 564.127453][ C0] process_measurement+0xdfe/0x2350 [ 564.127479][ C0] ima_file_check+0xc3/0x110 [ 564.127503][ C0] security_file_post_open+0xc4/0x210 [ 564.127528][ C0] path_openat+0x5cd/0x2440 [ 564.127547][ C0] do_file_open+0x20e/0x430 [ 564.127565][ C0] do_sys_openat2+0x10f/0x1e0 [ 564.127586][ C0] __x64_sys_open+0xfe/0x1d0 [ 564.127606][ C0] do_syscall_64+0x123/0x790 [ 564.127634][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.127653][ C0] [ 564.127657][ C0] Freed by task 5596: [ 564.127666][ C0] kasan_save_stack+0x30/0x50 [ 564.127684][ C0] kasan_save_track+0x14/0x30 [ 564.127701][ C0] kasan_save_free_info+0x3b/0x70 [ 564.127725][ C0] __kasan_slab_free+0x5f/0x80 [ 564.127743][ C0] kfree+0x22b/0x6d0 [ 564.127763][ C0] __free_slab+0x13d/0x220 [ 564.127786][ C0] qlist_free_all+0x47/0xf0 [ 564.127801][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 564.127818][ C0] __kasan_slab_alloc+0x69/0x90 [ 564.127837][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 564.127854][ C0] do_getname+0x35/0x390 [ 564.127877][ C0] user_path_at+0x26/0x60 [ 564.127893][ C0] __x64_sys_umount+0x10a/0x1a0 [ 564.127914][ C0] do_syscall_64+0x123/0x790 [ 564.127933][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.127951][ C0] [ 564.127955][ C0] The buggy address belongs to the object at ffff88807d718c00 [ 564.127955][ C0] which belongs to the cache kmalloc-512 of size 512 [ 564.127970][ C0] The buggy address is located 232 bytes inside of [ 564.127970][ C0] freed 512-byte region [ffff88807d718c00, ffff88807d718e00) [ 564.127988][ C0] [ 564.127993][ C0] The buggy address belongs to the physical page: [ 564.128001][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d718 [ 564.128019][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 564.128034][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 564.128051][ C0] page_type: f5(slab) [ 564.128068][ C0] raw: 00fff00000000040 ffff88801c02ec80 dead000000000100 dead000000000122 [ 564.128085][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 564.128103][ C0] head: 00fff00000000040 ffff88801c02ec80 dead000000000100 dead000000000122 [ 564.128120][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 564.128137][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 564.128155][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 564.128166][ C0] page dumped because: kasan: bad access detected [ 564.128175][ C0] page_owner tracks the page as allocated [ 564.128181][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5601, tgid 5601 (syz-executor), ts 64214005639 [ 564.128212][ C0] post_alloc_hook+0xfd/0x120 [ 564.128235][ C0] get_page_from_freelist+0x110d/0x35d0 [ 564.128260][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 564.128287][ C0] new_slab+0xa9/0x6e0 [ 564.128309][ C0] refill_objects+0xe3/0x410 [ 564.128334][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 564.128358][ C0] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 564.128381][ C0] __ipv6_dev_mc_inc+0x2f1/0xbd0 [ 564.128410][ C0] ipv6_add_dev+0xb87/0x1520 [ 564.128433][ C0] addrconf_notify+0x5db/0x1ba0 [ 564.128450][ C0] notifier_call_chain+0x99/0x3f0 [ 564.128473][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 564.128494][ C0] register_netdevice+0x1998/0x25a0 [ 564.128512][ C0] register_netdev+0x34/0x50 [ 564.128529][ C0] vti6_init_net+0x2ff/0x480 [ 564.128553][ C0] ops_init+0x1e2/0x5f0 [ 564.128570][ C0] page last free pid 4976 tgid 4976 ts 24204811593 stack trace: [ 564.128582][ C0] __free_frozen_pages+0x79f/0x10f0 [ 564.128602][ C0] qlist_free_all+0x47/0xf0 [ 564.128617][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 564.128637][ C0] __kasan_slab_alloc+0x69/0x90 [ 564.128655][ C0] __kmalloc_cache_noprof+0x278/0x6d0 [ 564.128679][ C0] inode_doinit_use_xattr+0x54/0x330 [ 564.128702][ C0] inode_doinit_with_dentry+0x10fc/0x1340 [ 564.128729][ C0] selinux_d_instantiate+0x26/0x40 [ 564.128754][ C0] security_d_instantiate+0x14c/0x1b0 [ 564.128774][ C0] d_splice_alias_ops+0xd7/0x15b0 [ 564.128790][ C0] kernfs_iop_lookup+0x23f/0x2d0 [ 564.128813][ C0] lookup_open+0xa79/0x1990 [ 564.128837][ C0] path_openat+0xa2c/0x2440 [ 564.128856][ C0] do_file_open+0x20e/0x430 [ 564.128874][ C0] do_sys_openat2+0x10f/0x1e0 [ 564.128895][ C0] __x64_sys_openat+0x12d/0x210 [ 564.128917][ C0] [ 564.128921][ C0] Memory state around the buggy address: [ 564.128931][ C0] ffff88807d718b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.128943][ C0] ffff88807d718c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.128957][ C0] >ffff88807d718c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.128966][ C0] ^ [ 564.128977][ C0] ffff88807d718d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.128990][ C0] ffff88807d718d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.129000][ C0] ================================================================== [ 564.129010][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 565.500213][ C0] CPU: 0 UID: 0 PID: 12421 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.511228][ C0] Tainted: [L]=SOFTLOCKUP [ 565.515541][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 565.525595][ C0] Workqueue: usb_hub_wq hub_event [ 565.530637][ C0] Call Trace: [ 565.533932][ C0] [ 565.536766][ C0] dump_stack_lvl+0x100/0x190 [ 565.541616][ C0] vpanic+0x553/0x970 [ 565.545605][ C0] ? __pfx_vpanic+0x10/0x10 [ 565.550104][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 565.555119][ C0] ? find_endpoint+0x2a3/0x2c0 [ 565.559866][ C0] panic+0xd1/0xe0 [ 565.563606][ C0] ? __pfx_panic+0x10/0x10 [ 565.568010][ C0] ? end_report.part.0+0x23/0x90 [ 565.572927][ C0] ? rcu_is_watching+0x13/0xc0 [ 565.577670][ C0] ? end_report.part.0+0x23/0x90 [ 565.582606][ C0] check_panic_on_warn.cold+0x19/0x34 [ 565.587952][ C0] end_report.part.0+0x3a/0x90 [ 565.592707][ C0] kasan_report.cold+0xe/0x18 [ 565.597391][ C0] ? find_endpoint+0x2a3/0x2c0 [ 565.602159][ C0] find_endpoint+0x2a3/0x2c0 [ 565.606744][ C0] dummy_timer+0x500/0x3700 [ 565.611246][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 565.617054][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 565.622689][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 565.627630][ C0] ? mark_held_locks+0x40/0x70 [ 565.632398][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 565.638215][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 565.643151][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 565.648333][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 565.653422][ C0] handle_softirqs+0x1e6/0x9d0 [ 565.658170][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 565.663436][ C0] ? _raw_spin_unlock+0x28/0x50 [ 565.668264][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 565.673884][ C0] __irq_exit_rcu+0x194/0x210 [ 565.678546][ C0] irq_exit_rcu+0x9/0x30 [ 565.682769][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 565.688385][ C0] [ 565.691299][ C0] [ 565.694205][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 565.700160][ C0] RIP: 0010:lock_is_held_type+0xf5/0x140 [ 565.705768][ C0] Code: ff ff ff ff 65 0f c1 15 f1 e6 bc 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 4c 46 03 00 e9 47 46 03 00 31 c0 [ 565.725355][ C0] RSP: 0018:ffffc900038beaf0 EFLAGS: 00000296 [ 565.731422][ C0] RAX: 0000000000000001 RBX: ffffffff8edec060 RCX: 0000000000000001 [ 565.739397][ C0] RDX: 0000000000000046 RSI: ffffffff8e3c4c52 RDI: ffffffff8c620e80 [ 565.747352][ C0] RBP: ffff888029e90000 R08: 0000000000000005 R09: 0000000000000000 [ 565.755325][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 565.763291][ C0] R13: 0000000000000246 R14: ffff888029e90ca0 R15: 0000000000000006 [ 565.771246][ C0] kernfs_root+0x20e/0x2a0 [ 565.775642][ C0] kernfs_add_one+0x623/0xaa0 [ 565.780307][ C0] kernfs_create_dir_ns+0x157/0x2b0 [ 565.785493][ C0] sysfs_create_dir_ns+0x13a/0x2b0 [ 565.790585][ C0] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 565.796204][ C0] ? find_held_lock+0x2b/0x80 [ 565.800867][ C0] ? kobject_add_internal+0x25f/0x930 [ 565.806236][ C0] ? kobject_add_internal+0x25f/0x930 [ 565.811603][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 565.816777][ C0] kobject_add_internal+0x2c8/0x930 [ 565.821963][ C0] kobject_add+0x16a/0x1e0 [ 565.826353][ C0] ? __pfx_kobject_add+0x10/0x10 [ 565.831274][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 565.836007][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 565.841438][ C0] ? class_to_subsys+0x114/0x150 [ 565.846356][ C0] device_add+0x294/0x1970 [ 565.850746][ C0] ? __pfx_dev_set_name+0x10/0x10 [ 565.855743][ C0] ? __pfx_device_add+0x10/0x10 [ 565.860574][ C0] ? idr_alloc+0xdd/0x130 [ 565.864915][ C0] ? __pfx_idr_alloc+0x10/0x10 [ 565.869656][ C0] usb_serial_probe.cold+0x257e/0x29f8 [ 565.875193][ C0] ? __pfx_usb_serial_generic_read_bulk_callback+0x10/0x10 [ 565.882378][ C0] usb_probe_interface+0x386/0x9b0 [ 565.887466][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 565.893078][ C0] ? kernfs_put+0x3f/0x60 [ 565.897382][ C0] ? sysfs_create_link+0x68/0xc0 [ 565.902292][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 565.907898][ C0] really_probe+0x241/0xa60 [ 565.912373][ C0] __driver_probe_device+0x210/0x460 [ 565.917654][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 565.923464][ C0] driver_probe_device+0x4a/0x140 [ 565.928474][ C0] __device_attach_driver+0x1df/0x320 [ 565.933839][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 565.939719][ C0] bus_for_each_drv+0x159/0x1e0 [ 565.944634][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 565.949996][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 565.955174][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 565.960953][ C0] __device_attach+0x1e4/0x4d0 [ 565.965701][ C0] ? __pfx___device_attach+0x10/0x10 [ 565.970977][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 565.976160][ C0] device_initial_probe+0xaf/0xd0 [ 565.981164][ C0] bus_probe_device+0x64/0x160 [ 565.985919][ C0] device_add+0x121d/0x1970 [ 565.990395][ C0] ? __pfx_device_add+0x10/0x10 [ 565.995222][ C0] ? mark_held_locks+0x40/0x70 [ 565.999959][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 566.005739][ C0] usb_set_configuration+0xd97/0x1c60 [ 566.011091][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 566.017134][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 566.022483][ C0] usb_probe_device+0xef/0x400 [ 566.027231][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 566.032599][ C0] really_probe+0x241/0xa60 [ 566.037103][ C0] __driver_probe_device+0x210/0x460 [ 566.042377][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 566.048165][ C0] driver_probe_device+0x4a/0x140 [ 566.053170][ C0] __device_attach_driver+0x1df/0x320 [ 566.058524][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 566.064397][ C0] bus_for_each_drv+0x159/0x1e0 [ 566.069235][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 566.074670][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 566.079844][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 566.085632][ C0] __device_attach+0x1e4/0x4d0 [ 566.090395][ C0] ? __pfx___device_attach+0x10/0x10 [ 566.095670][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 566.100933][ C0] device_initial_probe+0xaf/0xd0 [ 566.105939][ C0] bus_probe_device+0x64/0x160 [ 566.110690][ C0] device_add+0x121d/0x1970 [ 566.115174][ C0] ? __pfx_device_add+0x10/0x10 [ 566.119997][ C0] ? add_device_randomness+0xc9/0x110 [ 566.125362][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 566.130723][ C0] ? do_raw_spin_lock+0x128/0x260 [ 566.135743][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 566.141559][ C0] ? mark_held_locks+0x40/0x70 [ 566.146321][ C0] hub_event.cold+0x1e3/0xe90 [ 566.150991][ C0] ? __pfx_hub_event+0x10/0x10 [ 566.155732][ C0] ? mark_lock+0xea0/0x1020 [ 566.160207][ C0] ? lock_acquire+0x1d1/0x380 [ 566.164867][ C0] ? process_one_work+0xa2c/0x1b10 [ 566.169956][ C0] ? process_one_work+0x906/0x1b10 [ 566.175045][ C0] ? process_one_work+0x906/0x1b10 [ 566.180137][ C0] process_one_work+0xac7/0x1b10 [ 566.185064][ C0] ? __pfx_process_one_work+0x10/0x10 [ 566.190423][ C0] ? lock_acquire+0x1d1/0x380 [ 566.195074][ C0] ? __pfx_hub_event+0x10/0x10 [ 566.199812][ C0] worker_thread+0x5ef/0xe50 [ 566.204394][ C0] ? __pfx_worker_thread+0x10/0x10 [ 566.209484][ C0] ? kthread+0x13a/0x450 [ 566.213703][ C0] ? __pfx_worker_thread+0x10/0x10 [ 566.218792][ C0] kthread+0x373/0x450 [ 566.222851][ C0] ? __pfx_kthread+0x10/0x10 [ 566.227417][ C0] ret_from_fork+0x730/0xd60 [ 566.231982][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 566.237076][ C0] ? __switch_to+0x800/0x10f0 [ 566.241741][ C0] ? __pfx_kthread+0x10/0x10 [ 566.246307][ C0] ret_from_fork_asm+0x1a/0x30 [ 566.251055][ C0] [ 567.310974][ C0] Shutting down cpus with NMI [ 567.315883][ C0] Kernel Offset: disabled [ 567.320195][ C0] Rebooting in 86400 seconds..