last executing test programs: 7m24.992673841s ago: executing program 3 (id=205): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="cada1dcb", @ANYRES16=r2, @ANYBLOB="00082dbd7000fcdbdf2504000000080001000100000008000100030000000800010001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) lseek(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1a, 0x4, 0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r4, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000001c0)={0x18, r4}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80, 0x6) readv(r6, &(0x7f0000000840)=[{&(0x7f0000000300)=""/150, 0x96}], 0x1) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000080)={0x8000001, 0xf, &(0x7f00000000c0)=[0x138d, 0x5, 0x7d, 0xffff32eb, 0x2, 0x8, 0x2d7b, 0x41f, 0x0, 0x3, 0x0, 0x7, 0xfe09, 0xd2, 0x80000002], 0x0, 0x4400003}) 7m22.402658695s ago: executing program 3 (id=208): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)="ffdd", 0x2) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x7}}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x1a, 0x0, 0x33, 0x2}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x8}]}, {0x0, [0x30, 0x2e, 0x30, 0x5f, 0x2e, 0x5f, 0x61]}}, &(0x7f00000006c0)=""/200, 0x75, 0xc8, 0x1, 0x3}, 0x28) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x1e, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x9, 0xb1, &(0x7f0000000500)=""/177, 0x41100, 0x4, '\x00', r6, @fallback=0x33, r7, 0x8, &(0x7f0000000800)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xc, 0x3da, 0xe}, 0x10, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000980)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xb, "ca96b9", "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"}}, 0x110) r10 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r10, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x6, 0x2, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) 7m21.251720538s ago: executing program 3 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a0104000000c643b74d8c7de52e0008000a4000000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000010900020073797a31000000000900010073797a3000000000300003802c000080080003400000000220000b801c0001800a0001006c696d69740000000c0002800800044000000001140000001000010000000000000000000084000a63ccdb879e1106"], 0xe0}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setns(0xc9, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x10000123) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000770714000480080002400000000008000140000000030900010073797a300000000054000000060a01040000000000000000010000002c0004802800018008000100666962001c0002800800024000000003080003400000000d080001400000000908000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_getanyicast={0x14, 0x3e, 0x103, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) r6 = syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) readlinkat(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=""/198, 0xc6) getdents(r6, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb, '\x00', r4, r6, 0x1, 0x1, 0x5}, 0x50) 7m19.459239311s ago: executing program 3 (id=214): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x40, 0x64, 0x72, 0x8, 0x1164, 0x1edc, 0x32e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x42, 0xa0, 0x9, "", [{{0x9, 0x4, 0xd3, 0xc0, 0x0, 0xa5, 0x8c, 0x83, 0x5}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x9, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x26, 0x0, 0x6}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 7m14.93431107s ago: executing program 3 (id=218): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x400, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffffffc, &(0x7f0000000280)="b3"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) 7m14.095395352s ago: executing program 3 (id=221): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000080), 0x90800) sendmsg$unix(r0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) shutdown(r6, 0x1) 6m58.489545791s ago: executing program 32 (id=221): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000080), 0x90800) sendmsg$unix(r0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) shutdown(r6, 0x1) 10.507095862s ago: executing program 0 (id=1547): r0 = epoll_create1(0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 10.108164547s ago: executing program 0 (id=1548): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x44080}, 0x0) io_setup(0x3, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x102080, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) 9.507560485s ago: executing program 0 (id=1552): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x8041, 0x4, 0xa8df, 0x6, 0x8001, 0x7, 0x41, 0xdfe, 0x0, 0xeba7, 0x200, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) 5.842004435s ago: executing program 0 (id=1578): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x2, 0x0) 3.214867241s ago: executing program 0 (id=1590): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x1}, {0x10000002, 0x10}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.027521997s ago: executing program 1 (id=1592): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x3ff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000280)=ANY=[@ANYBLOB="72726f6f742cde00af571d903b0adfdb11601cb5119295fd1cb8b57b72e958f94f29ce6f08f122b32f10450cf4e8397c5ca2a68eb07c45c9828f2bc0cc37ed99df8f39b43a24030d261a0b8d22a69d19390285a97b96a7aab44f458ff633b38a9cfa71cbd9e549097aba0fd96373f895c196b56274"]) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x6, 0xfe) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400}, 0x48) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r4]) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffff7f7}}], 0x18}, 0x4c040) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0x3, 0x3, 0x1, 0xffffffff, 0xfffffffc, 0x2, 0xffffffff], [0x0, 0x2, 0xfffffffd, 0x9, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0x3, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x1, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x5, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x1ff, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x3}) r7 = syz_usb_connect$hid(0x6, 0x4a, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 2.779838923s ago: executing program 0 (id=1594): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @local, 0x4e23, 0x2, 'sh\x00', 0x3c, 0x7f, 0x1}, 0x2c) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) 2.764559123s ago: executing program 2 (id=1595): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4800f) r2 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1cc) write(r3, &(0x7f00000000c0)='7', 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x2, 0x134, 0x48, 0x2}, 0x9c) 2.51194862s ago: executing program 4 (id=1598): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 2.465166797s ago: executing program 5 (id=1599): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x3, 0x0, 0x0, 0xfffffff8, 0xfe, 0xff, 0xff, 0x0, '\x00', 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.459734284s ago: executing program 2 (id=1600): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "2eca37409e3e26049848c35f8a6b2c1b1463755eaa206d68", "79e1cfd4311cfdb33b917a40aff5662907ee7f4f3f81ba3c245dfccfc9f1e3ee"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.200735461s ago: executing program 1 (id=1601): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x80000, 0x0, 0x1f, 0x1, 0x31}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.002652702s ago: executing program 1 (id=1602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r2}, 0x38) 1.978029565s ago: executing program 4 (id=1603): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x3ff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000280)=ANY=[@ANYBLOB="72726f6f742cde00af571d903b0adfdb11601cb5119295fd1cb8b57b72e958f94f29ce6f08f122b32f10450cf4e8397c5ca2a68eb07c45c9828f2bc0cc37ed99df8f39b43a24030d261a0b8d22a69d19390285a97b96a7aab44f458ff633b38a9cfa71cbd9e549097aba0fd96373f895c196b56274"]) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x6, 0xfe) capset(&(0x7f0000000500)={0x20080522}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400}, 0x48) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r4]) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffff7f7}}], 0x18}, 0x4c040) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0x3, 0x3, 0x1, 0xffffffff, 0xfffffffc, 0x2, 0xffffffff], [0x0, 0x2, 0xfffffffd, 0x9, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0x3, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x1, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x5, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x1ff, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x3}) r7 = syz_usb_connect$hid(0x6, 0x4a, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.263699704s ago: executing program 5 (id=1604): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 1.232630614s ago: executing program 2 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0xffffff7d, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x4) 1.156113149s ago: executing program 1 (id=1606): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0xeeee0000, 0x8, 0xffffffffffffffff, 0x1}) mmap(&(0x7f000079c000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) 1.153771202s ago: executing program 5 (id=1607): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0) close(r2) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) 927.692941ms ago: executing program 5 (id=1608): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 883.341257ms ago: executing program 4 (id=1609): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/39, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001740)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) 747.804735ms ago: executing program 2 (id=1610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0x8, 0x10}, {0xfff2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 721.650708ms ago: executing program 1 (id=1611): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x3ff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000280)=ANY=[@ANYBLOB="72726f6f742cde00af571d903b0adfdb11601cb5119295fd1cb8b57b72e958f94f29ce6f08f122b32f10450cf4e8397c5ca2a68eb07c45c9828f2bc0cc37ed99df8f39b43a24030d261a0b8d22a69d19390285a97b96a7aab44f458ff633b38a9cfa71cbd9e549097aba0fd96373f895c196b56274"]) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x6, 0xfe) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000040)={0x200002, 0x200003, 0x6, 0x4, 0x7, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400}, 0x48) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r4]) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffff7f7}}], 0x18}, 0x4c040) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0x3, 0x3, 0x1, 0xffffffff, 0xfffffffc, 0x2, 0xffffffff], [0x0, 0x2, 0xfffffffd, 0x9, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0x3, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x1, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x5, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x1ff, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x3}) r7 = syz_usb_connect$hid(0x6, 0x4a, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 620.978162ms ago: executing program 4 (id=1612): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020600) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) 575.161082ms ago: executing program 5 (id=1613): syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfd94, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea4, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 331.888942ms ago: executing program 5 (id=1614): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x4000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 324.732383ms ago: executing program 2 (id=1615): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) 278.247895ms ago: executing program 4 (id=1616): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x704c3, 0xc4a48b7f26bf140b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) 75.592259ms ago: executing program 4 (id=1617): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd5000fadbdf2555000000080001004f001e0208000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x200440c1}, 0x24008000) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 74.566563ms ago: executing program 2 (id=1618): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x30) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 0s ago: executing program 1 (id=1619): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x3ff) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f0000000280)=ANY=[@ANYBLOB="72726f6f742cde00af571d903b0adfdb11601cb5119295fd1cb8b57b72e958f94f29ce6f08f122b32f10450cf4e8397c5ca2a68eb07c45c9828f2bc0cc37ed99df8f39b43a24030d261a0b8d22a69d19390285a97b96a7aab44f458ff633b38a9cfa71cbd9e549097aba0fd96373f895c196b56274"]) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x6, 0xfe) capset(&(0x7f0000000500)={0x20080522}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400}, 0x48) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r4]) r5 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0xfffff7f7}}], 0x18}, 0x4c040) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0x3, 0x3, 0x1, 0xffffffff, 0xfffffffc, 0x2, 0xffffffff], [0x0, 0x2, 0xfffffffd, 0x9, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0x3, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0x1, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x5, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x1ff, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x3}) r7 = syz_usb_connect$hid(0x6, 0x4a, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f0000000040)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) kernel console output (not intermixed with test programs): j=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152914 res=0 errno=0 [ 562.658675][ T31] audit: type=1800 audit(1789257939.151:3032): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=152946 res=0 errno=0 [ 562.660061][ T31] audit: type=1800 audit(1789257939.151:3033): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=152921 res=0 errno=0 [ 562.661120][ T31] audit: type=1800 audit(1789257939.151:3034): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=152922 res=0 errno=0 [ 562.719020][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 562.981411][ C0] usblp0: nonzero write bulk status received: -71 [ 562.984993][ T10] usb 6-1: USB disconnect, device number 34 [ 562.989219][T10173] usblp0: removed [ 563.055548][ T5768] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 563.133930][T10188] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 563.186002][ T5768] usb 5-1: USB disconnect, device number 29 [ 563.311396][T10190] batman_adv: batadv0: Adding interface: syzkaller0 [ 563.311414][T10190] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.311458][T10190] batman_adv: batadv0: Interface activated: syzkaller0 [ 563.314429][T10189] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 563.363904][T10189] batman_adv: batadv0: Removing interface: syzkaller0 [ 563.475723][ T10] usb 1-1: USB disconnect, device number 25 [ 563.569125][T10195] tmpfs: Unknown parameter 'rroot' [ 563.938708][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 564.090963][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 564.092402][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 564.093424][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 564.093466][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 564.093488][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 564.093512][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 564.093534][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.094296][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.175833][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 564.200490][T10207] tmpfs: Unknown parameter 'rroot' [ 564.286244][T10209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'. [ 564.324373][ T10] usb 6-1: usb_control_msg returned -32 [ 564.324413][ T10] usbtmc 6-1:16.0: can't read capabilities [ 564.342554][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 564.343088][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 564.344380][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 564.344404][ T9] usb 3-1: config 0 has no interface number 0 [ 564.344439][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 564.347674][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.347698][ T9] usb 3-1: Product: syz [ 564.347712][ T9] usb 3-1: Manufacturer: syz [ 564.347726][ T9] usb 3-1: SerialNumber: syz [ 564.410320][ T9] usb 3-1: config 0 descriptor?? [ 564.534169][ T10] usb 6-1: USB disconnect, device number 35 [ 564.871242][T10216] FAULT_INJECTION: forcing a failure. [ 564.871242][T10216] name failslab, interval 1, probability 0, space 0, times 0 [ 564.871264][T10216] CPU: 0 UID: 0 PID: 10216 Comm: syz.0.1242 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.871280][T10216] Tainted: [L]=SOFTLOCKUP [ 564.871285][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 564.871295][T10216] Call Trace: [ 564.871300][T10216] [ 564.871305][T10216] dump_stack_lvl+0x100/0x190 [ 564.871327][T10216] should_fail_ex.cold+0x5/0xa [ 564.871343][T10216] should_failslab+0xc2/0x120 [ 564.871359][T10216] __kmalloc_cache_noprof+0x91/0x6d0 [ 564.871377][T10216] ? __lock_acquire+0x5c0/0x1f40 [ 564.871389][T10216] ? snd_timer_instance_new+0x47/0x350 [ 564.871407][T10216] snd_timer_instance_new+0x47/0x350 [ 564.871422][T10216] snd_seq_timer_open+0x1d4/0x5c0 [ 564.871436][T10216] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 564.871449][T10216] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 564.871468][T10216] ? mark_held_locks+0x40/0x70 [ 564.871481][T10216] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 564.871497][T10216] queue_use+0xdc/0x1f0 [ 564.871513][T10216] snd_seq_queue_alloc+0x2e5/0x540 [ 564.871532][T10216] snd_seq_ioctl_create_queue+0xa9/0x370 [ 564.871546][T10216] call_seq_client_ctl+0xa3/0x130 [ 564.871561][T10216] snd_seq_kernel_client_ctl+0x35/0x50 [ 564.871575][T10216] alloc_seq_queue+0xdb/0x180 [ 564.871591][T10216] ? __pfx_alloc_seq_queue+0x10/0x10 [ 564.871613][T10216] ? find_held_lock+0x2b/0x80 [ 564.871638][T10216] ? mark_held_locks+0x40/0x70 [ 564.871654][T10216] snd_seq_oss_open+0x2b2/0xa10 [ 564.871672][T10216] odev_open+0x6f/0x90 [ 564.871685][T10216] ? __pfx_odev_open+0x10/0x10 [ 564.871698][T10216] soundcore_open+0x2e3/0x5a0 [ 564.871714][T10216] ? __pfx_soundcore_open+0x10/0x10 [ 564.871729][T10216] chrdev_open+0x234/0x6a0 [ 564.871745][T10216] ? __pfx_chrdev_open+0x10/0x10 [ 564.871760][T10216] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 564.871781][T10216] do_dentry_open+0x6ab/0x14d0 [ 564.871793][T10216] ? __pfx_chrdev_open+0x10/0x10 [ 564.871809][T10216] vfs_open+0x82/0x3f0 [ 564.871825][T10216] path_openat+0x19fa/0x2440 [ 564.871841][T10216] ? __pfx_path_openat+0x10/0x10 [ 564.871859][T10216] do_file_open+0x20e/0x430 [ 564.871874][T10216] ? __pfx_do_file_open+0x10/0x10 [ 564.871898][T10216] ? _raw_spin_unlock+0x28/0x50 [ 564.871910][T10216] ? alloc_fd+0x471/0x7a0 [ 564.871928][T10216] do_sys_openat2+0x10f/0x1e0 [ 564.871944][T10216] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.871965][T10216] __x64_sys_openat+0x12d/0x210 [ 564.871981][T10216] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.872002][T10216] do_syscall_64+0x123/0x790 [ 564.872018][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.872030][T10216] RIP: 0033:0x7f2e5879e159 [ 564.872041][T10216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.872051][T10216] RSP: 002b:00007f2e595f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 564.872064][T10216] RAX: ffffffffffffffda RBX: 00007f2e58a25fa0 RCX: 00007f2e5879e159 [ 564.872071][T10216] RDX: 0000000000008002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 564.872078][T10216] RBP: 00007f2e5883503b R08: 0000000000000000 R09: 0000000000000000 [ 564.872085][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.872092][T10216] R13: 00007f2e58a26038 R14: 00007f2e58a25fa0 R15: 00007ffc79de6088 [ 564.872106][T10216] [ 565.008526][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 565.038967][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 565.038989][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 565.218273][ T5704] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 565.258212][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 565.258851][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 565.259709][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.259730][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.259748][ T10] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 565.259770][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 565.259812][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.265302][ T10] usb 5-1: config 0 descriptor?? [ 565.408857][ T5704] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 565.412629][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.412655][ T5704] usb 1-1: Product: syz [ 565.412670][ T5704] usb 1-1: Manufacturer: syz [ 565.412685][ T5704] usb 1-1: SerialNumber: syz [ 565.658839][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 565.658892][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 565.658912][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 565.659113][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 565.745298][ T5704] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 565.770511][ T5704] usb 1-1: USB disconnect, device number 26 [ 565.912397][T10230] tmpfs: Unknown parameter 'rroot' [ 565.928653][ T30] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 566.078874][ T30] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 566.079879][ T30] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 566.079902][ T30] usb 6-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 566.081926][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.081947][ T30] usb 6-1: Product: syz [ 566.081967][ T30] usb 6-1: Manufacturer: syz [ 566.081980][ T30] usb 6-1: SerialNumber: syz [ 566.298202][ T5704] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 566.343817][ T9] usb 3-1: USB disconnect, device number 33 [ 566.450825][ T5704] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 566.476749][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.476775][ T5704] usb 1-1: Product: syz [ 566.476790][ T5704] usb 1-1: Manufacturer: syz [ 566.476805][ T5704] usb 1-1: SerialNumber: syz [ 566.532955][ T10] hid (null): nested delimiters [ 566.681141][T10237] tmpfs: Unknown parameter 'rroot' [ 566.939676][ T10] usb 5-1: USB disconnect, device number 30 [ 566.992023][ T30] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 566.992391][ T30] dvb_usb_af9015 6-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 566.993036][ T30] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 566.993073][ T30] dvb_usb_af9035 6-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 567.034095][ T30] usb 6-1: USB disconnect, device number 36 [ 567.107909][ T31] kauditd_printk_skb: 83 callbacks suppressed [ 567.107927][ T31] audit: type=1800 audit(1789257943.591:3118): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 567.262243][ T31] audit: type=1400 audit(1789257943.751:3119): avc: denied { shutdown } for pid=10242 comm="syz.4.1253" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 567.291436][ T31] audit: type=1800 audit(1789257943.751:3120): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 567.344294][ T5704] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 567.360810][ T31] audit: type=1800 audit(1789257943.851:3121): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=153905 res=0 errno=0 [ 567.391013][ T31] audit: type=1800 audit(1789257943.871:3122): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=153906 res=0 errno=0 [ 567.391060][ T31] audit: type=1800 audit(1789257943.871:3123): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=153885 res=0 errno=0 [ 567.391096][ T31] audit: type=1800 audit(1789257943.871:3124): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=153907 res=0 errno=0 [ 567.409752][ T31] audit: type=1800 audit(1789257943.881:3125): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 567.409793][ T31] audit: type=1800 audit(1789257943.891:3126): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153928 res=0 errno=0 [ 567.409836][ T31] audit: type=1800 audit(1789257943.901:3127): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154047 res=0 errno=0 [ 567.601532][T10250] aoe: unknown AoE command type 0x67 [ 567.658264][ T30] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 567.729982][T10254] FAULT_INJECTION: forcing a failure. [ 567.729982][T10254] name failslab, interval 1, probability 0, space 0, times 0 [ 567.730015][T10254] CPU: 0 UID: 0 PID: 10254 Comm: syz.5.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.730035][T10254] Tainted: [L]=SOFTLOCKUP [ 567.730040][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 567.730050][T10254] Call Trace: [ 567.730055][T10254] [ 567.730060][T10254] dump_stack_lvl+0x100/0x190 [ 567.730081][T10254] should_fail_ex.cold+0x5/0xa [ 567.730108][T10254] should_failslab+0xc2/0x120 [ 567.730135][T10254] __kmalloc_cache_noprof+0x91/0x6d0 [ 567.730164][T10254] ? blkcg_css_alloc+0x6b/0x8c0 [ 567.730180][T10254] blkcg_css_alloc+0x6b/0x8c0 [ 567.730192][T10254] cgroup_apply_control_enable+0x602/0xdd0 [ 567.730214][T10254] ? css_populate_dir+0x233/0x590 [ 567.730229][T10254] cgroup_mkdir+0x57f/0x1330 [ 567.730255][T10254] ? __pfx_cgroup_mkdir+0x10/0x10 [ 567.730278][T10254] kernfs_iop_mkdir+0x111/0x190 [ 567.730304][T10254] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 567.730323][T10254] vfs_mkdir+0x364/0x850 [ 567.730343][T10254] filename_mkdirat+0x48b/0x5e0 [ 567.730359][T10254] ? __pfx_filename_mkdirat+0x10/0x10 [ 567.730373][T10254] ? strncpy_from_user+0x19d/0x2d0 [ 567.730394][T10254] ? do_getname+0x191/0x390 [ 567.730424][T10254] __x64_sys_mkdirat+0x89/0xc0 [ 567.730455][T10254] do_syscall_64+0x123/0x790 [ 567.730477][T10254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.730490][T10254] RIP: 0033:0x7f8a1a79e159 [ 567.730502][T10254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.730514][T10254] RSP: 002b:00007f8a1b6c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 567.730526][T10254] RAX: ffffffffffffffda RBX: 00007f8a1aa25fa0 RCX: 00007f8a1a79e159 [ 567.730538][T10254] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 567.730552][T10254] RBP: 00007f8a1a83503b R08: 0000000000000000 R09: 0000000000000000 [ 567.730564][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.730574][T10254] R13: 00007f8a1aa26038 R14: 00007f8a1aa25fa0 R15: 00007fff4dba2e88 [ 567.730600][T10254] [ 567.811766][ T10] usb 1-1: USB disconnect, device number 27 [ 567.859727][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 567.870816][ T30] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 567.891702][ T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.891735][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 567.928209][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 567.990282][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.990298][ T30] usb 2-1: Product: syz [ 567.990307][ T30] usb 2-1: Manufacturer: syz [ 567.990315][ T30] usb 2-1: SerialNumber: syz [ 568.043274][ T30] usb 2-1: config 0 descriptor?? [ 568.078370][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 568.078876][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 568.079759][ T9] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 568.079780][ T9] usb 5-1: config 0 has no interface number 0 [ 568.079811][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 568.079832][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 568.081582][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.081594][ T9] usb 5-1: Product: syz [ 568.081602][ T9] usb 5-1: Manufacturer: syz [ 568.081611][ T9] usb 5-1: SerialNumber: syz [ 568.084060][ T9] usb 5-1: config 0 descriptor?? [ 568.085155][T10252] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 568.085223][T10252] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 568.128251][ T8901] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 568.266149][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 568.279784][ T30] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input28 [ 568.280492][ T8901] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 568.281918][ T8901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.281945][ T8901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.281983][ T8901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.289722][ T8901] usb 6-1: config 0 descriptor?? [ 568.313106][T10252] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 568.313212][T10252] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 568.380721][ T30] imon:send_packet: packet tx failed (-71) [ 568.398345][ T30] imon 2-1:0.0: panel buttons/knobs setup failed [ 568.478272][ T30] rc_core: IR keymap rc-imon-pad not found [ 568.478289][ T30] Registered IR keymap rc-empty [ 568.478349][ T30] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 568.478366][ T30] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 568.479981][ T30] imon:send_packet: packet tx failed (-71) [ 568.509467][ T30] imon 2-1:0.0: remote input dev register failed [ 568.509589][ T30] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 568.510326][T10262] tmpfs: Unknown parameter 'rroot' [ 568.514922][ T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 568.583334][ T30] imon 2-1:0.0: unable to initialize intf0, err 0 [ 568.583354][ T30] imon:imon_probe: failed to initialize context! [ 568.583366][ T30] imon 2-1:0.0: unable to register, err -19 [ 568.585745][ T30] usb 2-1: USB disconnect, device number 38 [ 568.709268][ T8901] hid_parser_main: 3354 callbacks suppressed [ 568.709291][ T8901] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 568.709315][ T8901] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 568.709355][ T8901] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 568.709376][ T8901] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 568.709394][ T8901] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 568.712260][ T8901] playstation 0003:054C:0DF2.0012: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 568.910100][T10256] playstation 0003:054C:0DF2.0012: pid 10256 passed too large report [ 568.910753][ T8901] playstation 0003:054C:0DF2.0012: Failed to retrieve feature with reportID 9: -71 [ 568.910802][ T8901] playstation 0003:054C:0DF2.0012: Failed to retrieve DualSense pairing info: -71 [ 568.910841][ T8901] playstation 0003:054C:0DF2.0012: Failed to get MAC address from DualSense [ 568.910855][ T8901] playstation 0003:054C:0DF2.0012: Failed to create dualsense. [ 568.915919][ T8901] playstation 0003:054C:0DF2.0012: probe with driver playstation failed with error -71 [ 568.922022][ T8901] usb 6-1: USB disconnect, device number 37 [ 568.936342][ T30] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 569.071158][T10265] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 569.119045][ T30] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 569.120123][ T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 569.120153][ T30] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 569.120178][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 569.121903][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.121924][ T30] usb 2-1: Product: syz [ 569.121937][ T30] usb 2-1: Manufacturer: syz [ 569.121956][ T30] usb 2-1: SerialNumber: syz [ 569.125071][ T30] usb 2-1: config 0 descriptor?? [ 569.127126][T10246] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 569.355118][ T5594] svc: failed to register nfsdv3 RPC service (errno 111). [ 569.356994][ T5594] svc: failed to register nfsaclv3 RPC service (errno 111). [ 569.357029][ T5594] failed to unregister udp with rpcbind [ 569.357685][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 569.360833][ T5594] svc: failed to register nfsdv3 RPC service (errno 97). [ 569.360849][ T5594] svc: failed to register nfsaclv3 RPC service (errno 97). [ 569.360858][ T5594] failed to unregister udp with rpcbind [ 569.426215][ T30] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input30 [ 569.527356][T10270] tmpfs: Unknown parameter 'rroot' [ 569.608673][T10275] tipc: Enabled bearer , priority 1 [ 569.612541][T10274] tipc: Resetting bearer [ 569.638220][ T30] rc_core: IR keymap rc-imon-pad not found [ 569.638236][ T30] Registered IR keymap rc-empty [ 569.638293][ T30] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 569.638310][ T30] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 569.647953][T10274] tipc: Disabling bearer [ 569.726760][ T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 569.726791][ T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 569.726956][ T9] asix 5-1:0.34: probe with driver asix failed with error -71 [ 569.740602][ T9] usb 5-1: USB disconnect, device number 31 [ 569.779415][ T30] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 569.783068][ T30] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 569.812802][ T30] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:39> initialized [ 569.990505][T10280] KVM: debugfs: duplicate directory 10280-4 [ 570.061736][ T10] usb 2-1: USB disconnect, device number 39 [ 570.498629][ T5686] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 570.654615][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 570.655199][ T5686] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 570.656208][ T5686] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 570.656230][ T5686] usb 1-1: config 0 has no interface number 0 [ 570.656263][ T5686] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 570.656287][ T5686] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 570.717053][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 570.717080][ T5686] usb 1-1: Product: syz [ 570.717094][ T5686] usb 1-1: SerialNumber: syz [ 570.737077][ T5686] usb 1-1: config 0 descriptor?? [ 570.739043][ T5686] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 570.751923][ T5686] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input32 [ 571.000201][T10309] kvm: apic: phys broadcast and lowest prio [ 571.229064][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 571.283755][T10319] tmpfs: Unknown parameter 'rroot' [ 571.495619][ C1] cm109_urb_ctl_callback: 3 callbacks suppressed [ 571.495647][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 571.495878][ T30] usb 1-1: USB disconnect, device number 28 [ 571.496200][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 571.496221][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 571.988725][T10324] FAULT_INJECTION: forcing a failure. [ 571.988725][T10324] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 571.988761][T10324] CPU: 1 UID: 0 PID: 10324 Comm: syz.1.1285 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.988789][T10324] Tainted: [L]=SOFTLOCKUP [ 571.988796][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 571.988808][T10324] Call Trace: [ 571.988819][T10324] [ 571.988827][T10324] dump_stack_lvl+0x100/0x190 [ 571.988861][T10324] should_fail_ex.cold+0x5/0xa [ 571.988885][T10324] ? prepare_alloc_pages+0x16d/0x5b0 [ 571.988912][T10324] should_fail_alloc_page+0xeb/0x140 [ 571.988939][T10324] prepare_alloc_pages+0x1f0/0x5b0 [ 571.988969][T10324] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 571.989004][T10324] ? __pfx_get_page_from_freelist+0x10/0x10 [ 571.989035][T10324] ? prepare_alloc_pages+0x1f0/0x5b0 [ 571.989060][T10324] ? rcu_is_watching+0x13/0xc0 [ 571.989086][T10324] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 571.989128][T10324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 571.989161][T10324] ? find_held_lock+0x2b/0x80 [ 571.989190][T10324] ? is_bpf_text_address+0x8a/0x1a0 [ 571.989218][T10324] ? is_bpf_text_address+0x8a/0x1a0 [ 571.989244][T10324] ? bpf_ksym_find+0x128/0x1c0 [ 571.989272][T10324] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 571.989305][T10324] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 571.989335][T10324] ? is_bpf_text_address+0x94/0x1a0 [ 571.989362][T10324] ? __kernel_text_address+0xd/0x30 [ 571.989410][T10324] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 571.989436][T10324] ? policy_nodemask+0xed/0x4f0 [ 571.989464][T10324] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 571.989487][T10324] ? do_syscall_64+0x123/0x790 [ 571.989525][T10324] __kasan_populate_vmalloc+0xf0/0x210 [ 571.989552][T10324] alloc_vmap_area+0x95d/0x2bb0 [ 571.989583][T10324] ? kasan_save_track+0x14/0x30 [ 571.989605][T10324] ? __kasan_kmalloc+0xaa/0xb0 [ 571.989625][T10324] ? __pfx_alloc_vmap_area+0x10/0x10 [ 571.989650][T10324] ? __get_vm_area_node+0x124/0x350 [ 571.989677][T10324] __get_vm_area_node+0x1ed/0x350 [ 571.989705][T10324] __vmalloc_node_range_noprof+0x268/0x1420 [ 571.989732][T10324] ? xt_counters_alloc+0x4c/0x70 [ 571.989757][T10324] ? find_check_entry.isra.0+0x576/0xa00 [ 571.989786][T10324] ? xt_counters_alloc+0x4c/0x70 [ 571.989816][T10324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 571.989843][T10324] ? kasan_quarantine_put+0x104/0x240 [ 571.989871][T10324] ? xt_counters_alloc+0x4c/0x70 [ 571.989894][T10324] __vmalloc_node_noprof+0xad/0xf0 [ 571.989920][T10324] ? xt_counters_alloc+0x4c/0x70 [ 571.989947][T10324] xt_counters_alloc+0x4c/0x70 [ 571.989970][T10324] __do_replace+0x97/0x990 [ 571.989998][T10324] ? __pfx___do_replace+0x10/0x10 [ 571.990026][T10324] do_ip6t_set_ctl+0xa5f/0xd00 [ 571.990048][T10324] ? nf_sockopt_find.isra.0+0x222/0x290 [ 571.990073][T10324] ? nf_sockopt_find.isra.0+0x222/0x290 [ 571.990101][T10324] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 571.990129][T10324] ? __mutex_unlock_slowpath+0x35d/0x930 [ 571.990158][T10324] ? futex_wait+0x11e/0x370 [ 571.990178][T10324] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 571.990217][T10324] ? nf_sockopt_find.isra.0+0x222/0x290 [ 571.990246][T10324] nf_setsockopt+0x8d/0xf0 [ 571.990274][T10324] ipv6_setsockopt+0x135/0x170 [ 571.990301][T10324] udpv6_setsockopt+0x64/0xb0 [ 571.990327][T10324] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 571.990358][T10324] do_sock_setsockopt+0xf3/0x1d0 [ 571.990388][T10324] __sys_setsockopt+0x195/0x220 [ 571.990417][T10324] __x64_sys_setsockopt+0xbd/0x160 [ 571.990439][T10324] ? do_syscall_64+0xae/0x790 [ 571.990463][T10324] ? lockdep_hardirqs_on+0x7d/0x110 [ 571.990489][T10324] do_syscall_64+0x123/0x790 [ 571.990517][T10324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.990537][T10324] RIP: 0033:0x7f2d9579e159 [ 571.990554][T10324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.990572][T10324] RSP: 002b:00007f2d965f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 571.990592][T10324] RAX: ffffffffffffffda RBX: 00007f2d95a25fa0 RCX: 00007f2d9579e159 [ 571.990605][T10324] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 571.990616][T10324] RBP: 00007f2d9583503b R08: 00000000000003a0 R09: 0000000000000000 [ 571.990627][T10324] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.990639][T10324] R13: 00007f2d95a26038 R14: 00007f2d95a25fa0 R15: 00007fff16424098 [ 571.990666][T10324] [ 571.990858][T10324] syz.1.1285: vmalloc error: size 64, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 571.990923][T10324] CPU: 1 UID: 0 PID: 10324 Comm: syz.1.1285 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.990950][T10324] Tainted: [L]=SOFTLOCKUP [ 571.990957][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 571.990968][T10324] Call Trace: [ 571.990974][T10324] [ 571.990983][T10324] dump_stack_lvl+0x100/0x190 [ 571.991014][T10324] warn_alloc.cold+0x9e/0xb2 [ 571.991037][T10324] ? __pfx_warn_alloc+0x10/0x10 [ 571.991066][T10324] ? lockdep_hardirqs_on+0x7d/0x110 [ 571.991094][T10324] ? __get_vm_area_node+0x2f0/0x350 [ 571.991130][T10324] ? __get_vm_area_node+0x22b/0x350 [ 571.991159][T10324] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 571.991186][T10324] ? find_check_entry.isra.0+0x576/0xa00 [ 571.991217][T10324] ? xt_counters_alloc+0x4c/0x70 [ 571.991248][T10324] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 571.991274][T10324] ? kasan_quarantine_put+0x104/0x240 [ 571.991303][T10324] ? xt_counters_alloc+0x4c/0x70 [ 571.991325][T10324] __vmalloc_node_noprof+0xad/0xf0 [ 571.991350][T10324] ? xt_counters_alloc+0x4c/0x70 [ 571.991377][T10324] xt_counters_alloc+0x4c/0x70 [ 571.991400][T10324] __do_replace+0x97/0x990 [ 571.991428][T10324] ? __pfx___do_replace+0x10/0x10 [ 571.991457][T10324] do_ip6t_set_ctl+0xa5f/0xd00 [ 571.991479][T10324] ? nf_sockopt_find.isra.0+0x222/0x290 [ 571.991503][T10324] ? nf_sockopt_find.isra.0+0x222/0x290 [ 571.991530][T10324] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 571.991552][T10324] ? __mutex_unlock_slowpath+0x35d/0x930 [ 571.991581][T10324] ? futex_wait+0x11e/0x370 [ 571.991599][T10324] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 571.991635][T10324] ? nf_sockopt_find.isra.0+0x222/0x290 [ 571.991663][T10324] nf_setsockopt+0x8d/0xf0 [ 571.991690][T10324] ipv6_setsockopt+0x135/0x170 [ 571.991715][T10324] udpv6_setsockopt+0x64/0xb0 [ 571.991741][T10324] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 571.991771][T10324] do_sock_setsockopt+0xf3/0x1d0 [ 571.991800][T10324] __sys_setsockopt+0x195/0x220 [ 571.991831][T10324] __x64_sys_setsockopt+0xbd/0x160 [ 571.991852][T10324] ? do_syscall_64+0xae/0x790 [ 571.991877][T10324] ? lockdep_hardirqs_on+0x7d/0x110 [ 571.991902][T10324] do_syscall_64+0x123/0x790 [ 571.991930][T10324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.991950][T10324] RIP: 0033:0x7f2d9579e159 [ 571.991966][T10324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.991985][T10324] RSP: 002b:00007f2d965f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 571.992002][T10324] RAX: ffffffffffffffda RBX: 00007f2d95a25fa0 RCX: 00007f2d9579e159 [ 571.992015][T10324] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 571.992026][T10324] RBP: 00007f2d9583503b R08: 00000000000003a0 R09: 0000000000000000 [ 571.992038][T10324] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.992049][T10324] R13: 00007f2d95a26038 R14: 00007f2d95a25fa0 R15: 00007fff16424098 [ 571.992076][T10324] [ 571.996422][T10324] Mem-Info: [ 571.996436][T10324] active_anon:32887 inactive_anon:3 isolated_anon:0 [ 571.996436][T10324] active_file:278 inactive_file:62275 isolated_file:0 [ 571.996436][T10324] unevictable:0 dirty:512 writeback:0 [ 571.996436][T10324] slab_reclaimable:9123 slab_unreclaimable:102709 [ 571.996436][T10324] mapped:32034 shmem:19410 pagetables:1654 [ 571.996436][T10324] sec_pagetables:0 bounce:0 [ 571.996436][T10324] kernel_misc_reclaimable:0 [ 571.996436][T10324] free:1261093 free_pcp:15416 free_cma:0 [ 571.996486][T10324] Node 0 active_anon:129500kB inactive_anon:12kB active_file:1112kB inactive_file:248900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128136kB dirty:2048kB writeback:0kB shmem:75592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13184kB pagetables:6496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 571.996536][T10324] Node 1 active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 571.996582][T10324] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.996632][T10324] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 571.996665][T10324] Node 0 DMA32 free:1090880kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:129500kB inactive_anon:12kB active_file:1112kB inactive_file:248900kB unevictable:0kB writepending:2048kB zspages:0kB present:3129332kB managed:2530140kB mlocked:0kB bounce:0kB free_pcp:61664kB local_pcp:19996kB free_cma:0kB [ 571.996716][T10324] lowmem_reserve[]: 0 0 0 0 0 [ 571.996746][T10324] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.996794][T10324] lowmem_reserve[]: 0 0 0 0 0 [ 571.996827][T10324] Node 1 Normal free:3938132kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.996880][T10324] lowmem_reserve[]: 0 0 0 0 0 [ 571.996912][T10324] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 571.997017][T10324] Node 0 DMA32: 1911*4kB (UME) 1800*8kB (UME) 1267*16kB (UME) 619*32kB (UME) 703*64kB (UME) 308*128kB (UME) 119*256kB (UME) 65*512kB (UME) 26*1024kB (UME) 9*2048kB (UME) 204*4096kB (UM) = 1090924kB [ 571.997168][T10324] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 571.997263][T10324] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 6*16kB (U) 10*32kB (UM) 8*64kB (U) 5*128kB (UM) 5*256kB (U) 2*512kB (UM) 0*1024kB 1*2048kB (U) 960*4096kB (UM) = 3938132kB [ 571.997403][T10324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.997876][T10324] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 571.997893][T10324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.997909][T10324] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 571.997924][T10324] 81877 total pagecache pages [ 571.997932][T10324] 3 pages in swap cache [ 571.997940][T10324] Free swap = 124984kB [ 571.997947][T10324] Total swap = 124996kB [ 571.997956][T10324] 2097051 pages RAM [ 571.997963][T10324] 0 pages HighMem/MovableOnly [ 571.997970][T10324] 432882 pages reserved [ 571.997978][T10324] 0 pages cma reserved [ 572.244947][ T31] kauditd_printk_skb: 131 callbacks suppressed [ 572.244964][ T31] audit: type=1400 audit(1789257948.731:3259): avc: denied { write } for pid=10325 comm="syz.5.1284" name="ipv6_route" dev="proc" ino=4026534011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 572.317038][ T30] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 572.552640][ T31] audit: type=1800 audit(1789257949.041:3260): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 572.568549][ T31] audit: type=1800 audit(1789257949.051:3261): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 572.575135][ T31] audit: type=1800 audit(1789257949.061:3262): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 573.869353][ T5701] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 573.904256][ T31] audit: type=1800 audit(1789257950.391:3263): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 574.031692][ T5701] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 574.047739][ T5701] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 574.047755][ T5701] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 574.070562][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.070586][ T5701] usb 2-1: Product: syz [ 574.070600][ T5701] usb 2-1: Manufacturer: syz [ 574.070613][ T5701] usb 2-1: SerialNumber: syz [ 574.086710][ T31] audit: type=1800 audit(1789257950.571:3264): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155331 res=0 errno=0 [ 574.091081][ T31] audit: type=1800 audit(1789257950.581:3265): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=155363 res=0 errno=0 [ 574.101678][ T31] audit: type=1800 audit(1789257950.591:3266): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=155338 res=0 errno=0 [ 574.101725][ T31] audit: type=1800 audit(1789257950.591:3267): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=155339 res=0 errno=0 [ 574.167611][ T31] audit: type=1800 audit(1789257950.631:3268): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 574.368394][ T5701] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 574.368947][ T5701] dvb_usb_af9015 2-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 574.372289][ T5701] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 574.372345][ T5701] dvb_usb_af9035 2-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 574.417118][ T5701] usb 2-1: USB disconnect, device number 40 [ 574.493290][T10351] FAULT_INJECTION: forcing a failure. [ 574.493290][T10351] name failslab, interval 1, probability 0, space 0, times 0 [ 574.493323][T10351] CPU: 1 UID: 0 PID: 10351 Comm: syz.4.1292 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.493351][T10351] Tainted: [L]=SOFTLOCKUP [ 574.493358][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 574.493371][T10351] Call Trace: [ 574.493378][T10351] [ 574.493394][T10351] dump_stack_lvl+0x100/0x190 [ 574.493429][T10351] should_fail_ex.cold+0x5/0xa [ 574.493456][T10351] should_failslab+0xc2/0x120 [ 574.493482][T10351] __kmalloc_cache_noprof+0x91/0x6d0 [ 574.493511][T10351] ? find_held_lock+0x2b/0x80 [ 574.493537][T10351] ? alloc_fs_context+0x57/0xf40 [ 574.493572][T10351] alloc_fs_context+0x57/0xf40 [ 574.493604][T10351] ? __get_fs_type+0xe3/0x200 [ 574.493635][T10351] path_mount+0xdbd/0x24c0 [ 574.493666][T10351] ? __pfx_path_mount+0x10/0x10 [ 574.493693][T10351] ? lockdep_hardirqs_on+0x7d/0x110 [ 574.493720][T10351] ? putname+0xb1/0x110 [ 574.493743][T10351] ? kmem_cache_free+0x127/0x6c0 [ 574.493776][T10351] ? __x64_sys_mount+0x293/0x310 [ 574.493802][T10351] __x64_sys_mount+0x293/0x310 [ 574.493829][T10351] ? __pfx___x64_sys_mount+0x10/0x10 [ 574.493860][T10351] do_syscall_64+0x123/0x790 [ 574.493884][T10351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.493902][T10351] RIP: 0033:0x7fd6c119e159 [ 574.493916][T10351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.493932][T10351] RSP: 002b:00007fd6c2114028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 574.493951][T10351] RAX: ffffffffffffffda RBX: 00007fd6c1425fa0 RCX: 00007fd6c119e159 [ 574.493964][T10351] RDX: 0000200000000380 RSI: 0000200000000300 RDI: 0000000000000000 [ 574.493977][T10351] RBP: 00007fd6c123503b R08: 0000000000000000 R09: 0000000000000000 [ 574.493988][T10351] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 574.493998][T10351] R13: 00007fd6c1426038 R14: 00007fd6c1425fa0 R15: 00007ffd102c0c38 [ 574.494021][T10351] [ 574.707740][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 574.824420][T10359] tmpfs: Unknown parameter 'rroot' [ 574.857043][T10363] FAULT_INJECTION: forcing a failure. [ 574.857043][T10363] name failslab, interval 1, probability 0, space 0, times 0 [ 574.857074][T10363] CPU: 1 UID: 0 PID: 10363 Comm: syz.5.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.857102][T10363] Tainted: [L]=SOFTLOCKUP [ 574.857109][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 574.857121][T10363] Call Trace: [ 574.857128][T10363] [ 574.857137][T10363] dump_stack_lvl+0x100/0x190 [ 574.857172][T10363] should_fail_ex.cold+0x5/0xa [ 574.857201][T10363] should_failslab+0xc2/0x120 [ 574.857229][T10363] __kmalloc_cache_noprof+0x91/0x6d0 [ 574.857259][T10363] ? raw_ioctl_init+0x1c0/0x850 [ 574.857292][T10363] raw_ioctl_init+0x1c0/0x850 [ 574.857324][T10363] ? __pfx_raw_ioctl_init+0x10/0x10 [ 574.857354][T10363] ? tomoyo_path_number_perm+0x188/0x580 [ 574.857389][T10363] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 574.857408][T10363] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 574.857434][T10363] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 574.857463][T10363] raw_ioctl+0x138a/0x2b80 [ 574.857487][T10363] ? __pfx_raw_ioctl+0x10/0x10 [ 574.857503][T10363] ? selinux_file_ioctl+0x13b/0x290 [ 574.857519][T10363] ? selinux_file_ioctl+0xb6/0x290 [ 574.857540][T10363] ? __pfx_raw_ioctl+0x10/0x10 [ 574.857560][T10363] __x64_sys_ioctl+0x18e/0x210 [ 574.857581][T10363] do_syscall_64+0x123/0x790 [ 574.857609][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.857630][T10363] RIP: 0033:0x7f8a1a79ddeb [ 574.857648][T10363] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 574.857668][T10363] RSP: 002b:00007f8a1b6c2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.857689][T10363] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f8a1a79ddeb [ 574.857701][T10363] RDX: 00007f8a1b6c3fd0 RSI: 0000000041015500 RDI: 0000000000000004 [ 574.857712][T10363] RBP: 00007f8a1b6c3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 574.857723][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8a1b6c2fa0 [ 574.857734][T10363] R13: 00002000000000c0 R14: 0000000000000000 R15: 0000000000000000 [ 574.857757][T10363] [ 575.338177][ T8901] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 575.490353][ T8901] usb 3-1: Using ep0 maxpacket: 32 [ 575.490920][ T8901] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 575.491802][ T8901] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 575.492045][ T8901] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 575.492064][ T8901] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 575.492170][ T8901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 575.492184][ T8901] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 575.492197][ T8901] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 575.492217][ T8901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.497208][ T8901] usb 3-1: config 0 descriptor?? [ 575.701445][T10379] FAULT_INJECTION: forcing a failure. [ 575.701445][T10379] name failslab, interval 1, probability 0, space 0, times 0 [ 575.701467][T10379] CPU: 1 UID: 0 PID: 10379 Comm: syz.5.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.701484][T10379] Tainted: [L]=SOFTLOCKUP [ 575.701491][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 575.701502][T10379] Call Trace: [ 575.701509][T10379] [ 575.701517][T10379] dump_stack_lvl+0x100/0x190 [ 575.701549][T10379] should_fail_ex.cold+0x5/0xa [ 575.701573][T10379] should_failslab+0xc2/0x120 [ 575.701589][T10379] __kmalloc_cache_noprof+0x91/0x6d0 [ 575.701606][T10379] ? ima_d_path+0xc9/0x260 [ 575.701621][T10379] ima_d_path+0xc9/0x260 [ 575.701637][T10379] ? __pfx_ima_d_path+0x10/0x10 [ 575.701663][T10379] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 575.701688][T10379] process_measurement+0x1b25/0x2350 [ 575.701715][T10379] ? __pfx_process_measurement+0x10/0x10 [ 575.701735][T10379] ? __memcg_slab_post_alloc_hook+0x78b/0x1270 [ 575.701770][T10379] ? rcu_is_watching+0x13/0xc0 [ 575.701794][T10379] ? trace_kmem_cache_alloc+0xdd/0x100 [ 575.701838][T10379] ? __pfx_mounts_open_common+0x10/0x10 [ 575.701864][T10379] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 575.701902][T10379] ima_file_check+0xc3/0x110 [ 575.701924][T10379] ? __pfx_ima_file_check+0x10/0x10 [ 575.701952][T10379] security_file_post_open+0xc4/0x210 [ 575.701976][T10379] path_openat+0x5cd/0x2440 [ 575.702003][T10379] ? __pfx_path_openat+0x10/0x10 [ 575.702033][T10379] do_file_open+0x20e/0x430 [ 575.702057][T10379] ? __pfx_do_file_open+0x10/0x10 [ 575.702088][T10379] ? __pfx_kfree_link+0x10/0x10 [ 575.702115][T10379] ? _raw_spin_unlock+0x28/0x50 [ 575.702138][T10379] ? alloc_fd+0x471/0x7a0 [ 575.702168][T10379] do_sys_openat2+0x10f/0x1e0 [ 575.702192][T10379] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.702221][T10379] ? irqentry_exit+0x24d/0xa10 [ 575.702245][T10379] ? lockdep_hardirqs_on+0x7d/0x110 [ 575.702271][T10379] __x64_sys_openat+0x12d/0x210 [ 575.702297][T10379] ? __pfx___x64_sys_openat+0x10/0x10 [ 575.702331][T10379] do_syscall_64+0x123/0x790 [ 575.702357][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.702376][T10379] RIP: 0033:0x7f8a1a75e98e [ 575.702391][T10379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 575.702408][T10379] RSP: 002b:00007f8a1b6c4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.702425][T10379] RAX: ffffffffffffffda RBX: 00007f8a1b6c56c0 RCX: 00007f8a1a75e98e [ 575.702437][T10379] RDX: 0000000000000002 RSI: 00007f8a1b6c4f90 RDI: ffffffffffffff9c [ 575.702448][T10379] RBP: 00007f8a1a83503b R08: 0000000000000000 R09: 0000000000000000 [ 575.702459][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.702470][T10379] R13: 00007f8a1aa26038 R14: 00007f8a1aa25fa0 R15: 00007fff4dba2e88 [ 575.702494][T10379] [ 575.769573][ T8901] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 575.964603][T10386] FAULT_INJECTION: forcing a failure. [ 575.964603][T10386] name failslab, interval 1, probability 0, space 0, times 0 [ 575.964631][T10386] CPU: 1 UID: 0 PID: 10386 Comm: syz.1.1306 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.964656][T10386] Tainted: [L]=SOFTLOCKUP [ 575.964663][T10386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 575.964674][T10386] Call Trace: [ 575.964681][T10386] [ 575.964689][T10386] dump_stack_lvl+0x100/0x190 [ 575.964719][T10386] should_fail_ex.cold+0x5/0xa [ 575.964743][T10386] should_failslab+0xc2/0x120 [ 575.964767][T10386] __kmalloc_cache_noprof+0x91/0x6d0 [ 575.964793][T10386] ? snd_hrtimer_open+0x43/0xf0 [ 575.964820][T10386] ? __pfx_snd_hrtimer_open+0x10/0x10 [ 575.964844][T10386] snd_hrtimer_open+0x43/0xf0 [ 575.964868][T10386] snd_timer_open+0xbc3/0x1190 [ 575.964895][T10386] ? __pfx_snd_timer_open+0x10/0x10 [ 575.964920][T10386] ? kstrdup+0xb3/0xe0 [ 575.964947][T10386] snd_seq_timer_open+0x289/0x5c0 [ 575.964967][T10386] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 575.964986][T10386] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 575.965013][T10386] ? mark_held_locks+0x40/0x70 [ 575.965030][T10386] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 575.965057][T10386] queue_use+0xdc/0x1f0 [ 575.965080][T10386] snd_seq_queue_alloc+0x2e5/0x540 [ 575.965108][T10386] snd_seq_ioctl_create_queue+0xa9/0x370 [ 575.965128][T10386] call_seq_client_ctl+0xa3/0x130 [ 575.965149][T10386] snd_seq_kernel_client_ctl+0x35/0x50 [ 575.965170][T10386] alloc_seq_queue+0xdb/0x180 [ 575.965191][T10386] ? __pfx_alloc_seq_queue+0x10/0x10 [ 575.965224][T10386] ? find_held_lock+0x2b/0x80 [ 575.965253][T10386] ? mark_held_locks+0x40/0x70 [ 575.965274][T10386] snd_seq_oss_open+0x2b2/0xa10 [ 575.965299][T10386] odev_open+0x6f/0x90 [ 575.965317][T10386] ? __pfx_odev_open+0x10/0x10 [ 575.965336][T10386] soundcore_open+0x2e3/0x5a0 [ 575.965358][T10386] ? __pfx_soundcore_open+0x10/0x10 [ 575.965377][T10386] chrdev_open+0x234/0x6a0 [ 575.965398][T10386] ? __pfx_chrdev_open+0x10/0x10 [ 575.965419][T10386] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 575.965448][T10386] do_dentry_open+0x6ab/0x14d0 [ 575.965471][T10386] ? __pfx_chrdev_open+0x10/0x10 [ 575.965496][T10386] vfs_open+0x82/0x3f0 [ 575.965520][T10386] path_openat+0x19fa/0x2440 [ 575.965546][T10386] ? __pfx_path_openat+0x10/0x10 [ 575.965574][T10386] do_file_open+0x20e/0x430 [ 575.965596][T10386] ? __pfx_do_file_open+0x10/0x10 [ 575.965633][T10386] ? _raw_spin_unlock+0x28/0x50 [ 575.965651][T10386] ? alloc_fd+0x471/0x7a0 [ 575.965679][T10386] do_sys_openat2+0x10f/0x1e0 [ 575.965701][T10386] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.965733][T10386] __x64_sys_openat+0x12d/0x210 [ 575.965756][T10386] ? __pfx___x64_sys_openat+0x10/0x10 [ 575.965787][T10386] do_syscall_64+0x123/0x790 [ 575.965812][T10386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.965829][T10386] RIP: 0033:0x7f2d9579e159 [ 575.965844][T10386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.965860][T10386] RSP: 002b:00007f2d965f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.965876][T10386] RAX: ffffffffffffffda RBX: 00007f2d95a25fa0 RCX: 00007f2d9579e159 [ 575.965888][T10386] RDX: 00000000000c0342 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 575.965899][T10386] RBP: 00007f2d9583503b R08: 0000000000000000 R09: 0000000000000000 [ 575.965909][T10386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.965920][T10386] R13: 00007f2d95a26038 R14: 00007f2d95a25fa0 R15: 00007fff16424098 [ 575.965943][T10386] [ 576.402927][ T8901] usb 3-1: USB disconnect, device number 34 [ 576.696997][ T8901] usblp0: removed [ 576.739506][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 576.914130][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 576.939564][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 576.940624][ T9] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 577.008927][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.008988][ T9] usb 2-1: Product: syz [ 577.009055][ T9] usb 2-1: Manufacturer: syz [ 577.009121][ T9] usb 2-1: SerialNumber: syz [ 577.252852][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 577.252870][ T31] audit: type=1800 audit(1789257953.741:3303): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155670 res=0 errno=0 [ 577.417660][ T31] audit: type=1800 audit(1789257953.901:3304): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=155702 res=0 errno=0 [ 577.480788][ T31] audit: type=1800 audit(1789257953.971:3305): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=155677 res=0 errno=0 [ 577.556377][ T31] audit: type=1800 audit(1789257954.041:3306): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=155678 res=0 errno=0 [ 577.925694][ T31] audit: type=1800 audit(1789257954.411:3307): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 578.221177][ T31] audit: type=1800 audit(1789257954.711:3308): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 578.300729][ T31] audit: type=1800 audit(1789257954.761:3309): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 578.335383][ T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 578.335943][ T9] dvb_usb_af9015 2-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 578.336261][T10398] tmpfs: Unknown parameter 'rroot' [ 578.345974][ T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 578.346045][ T9] dvb_usb_af9035 2-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 578.346468][T10399] tmpfs: Unknown parameter 'rroot' [ 578.361558][ T31] audit: type=1800 audit(1789257954.851:3310): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=155699 res=0 errno=0 [ 578.362148][ T31] audit: type=1800 audit(1789257954.851:3311): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=155700 res=0 errno=0 [ 578.362623][ T31] audit: type=1800 audit(1789257954.851:3312): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=155679 res=0 errno=0 [ 578.455296][ T9] usb 2-1: USB disconnect, device number 41 [ 580.198890][T10416] netlink: 'syz.0.1316': attribute type 1 has an invalid length. [ 580.472492][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 580.863021][T10416] bond2: entered promiscuous mode [ 580.863354][T10416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 580.936621][T10417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 580.946430][T10417] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 580.946446][T10417] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 580.979918][T10417] bond2: (slave gre1): making interface the new active one [ 580.979940][T10417] gre1: entered promiscuous mode [ 581.052689][T10417] bond2: (slave gre1): Enslaving as an active interface with an up link [ 581.160415][T10418] bond2 (unregistering): (slave gre1): Releasing backup interface [ 581.160439][T10418] gre1: left promiscuous mode [ 581.172661][T10418] bond2 (unregistering): Released all slaves [ 581.449948][ T8901] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 581.599053][ T8901] usb 5-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 581.601943][ T8901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.601968][ T8901] usb 5-1: Product: syz [ 581.601982][ T8901] usb 5-1: Manufacturer: syz [ 581.601996][ T8901] usb 5-1: SerialNumber: syz [ 581.798279][ T30] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 581.859288][ T8901] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 581.891152][ T8901] usb 5-1: USB disconnect, device number 32 [ 581.950305][ T30] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 581.951664][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.951693][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.951727][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.957910][ T30] usb 1-1: config 0 descriptor?? [ 583.331088][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 583.331107][ T31] audit: type=1800 audit(1789257959.821:3347): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156608 res=0 errno=0 [ 583.334465][ T30] playstation 0003:054C:0BA0.0013: unknown main item tag 0x0 [ 583.384506][ T31] audit: type=1800 audit(1789257959.871:3348): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156630 res=0 errno=0 [ 583.392799][ T30] playstation 0003:054C:0BA0.0013: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 583.428245][ T8901] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 583.539637][ T30] playstation 0003:054C:0BA0.0013: Failed to retrieve feature with reportID 18: -71 [ 583.539667][ T30] playstation 0003:054C:0BA0.0013: Failed to retrieve DualShock4 pairing info: -71 [ 583.539709][ T30] playstation 0003:054C:0BA0.0013: Failed to get MAC address from DualShock4 [ 583.539724][ T30] playstation 0003:054C:0BA0.0013: Failed to create dualshock4. [ 583.552755][ T30] playstation 0003:054C:0BA0.0013: probe with driver playstation failed with error -71 [ 583.565552][ T30] usb 1-1: USB disconnect, device number 29 [ 583.602101][ T8901] usb 5-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 583.605519][ T8901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.605544][ T8901] usb 5-1: Product: syz [ 583.605558][ T8901] usb 5-1: Manufacturer: syz [ 583.605573][ T8901] usb 5-1: SerialNumber: syz [ 583.622583][T10442] fido_id[10442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 583.641411][ T31] audit: type=1800 audit(1789257960.121:3349): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 583.682588][ T31] audit: type=1800 audit(1789257960.171:3350): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156678 res=0 errno=0 [ 583.699844][ T31] audit: type=1800 audit(1789257960.181:3351): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=156710 res=0 errno=0 [ 583.706456][ T31] audit: type=1800 audit(1789257960.181:3352): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=156685 res=0 errno=0 [ 583.706495][ T31] audit: type=1800 audit(1789257960.181:3353): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=156686 res=0 errno=0 [ 583.791198][ T31] audit: type=1800 audit(1789257960.281:3354): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156747 res=0 errno=0 [ 584.096627][ T8901] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 584.110317][ T31] audit: type=1800 audit(1789257960.601:3355): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=156707 res=0 errno=0 [ 584.112529][ T31] audit: type=1800 audit(1789257960.601:3356): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=156708 res=0 errno=0 [ 584.526033][ T8901] usb 5-1: USB disconnect, device number 33 [ 584.551688][T10453] tmpfs: Unknown parameter 'rroot' [ 584.859798][ T5701] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 585.018991][ T5701] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 585.019860][ T5701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.019897][ T5701] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.019933][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.027020][ T5701] usb 1-1: config 0 descriptor?? [ 585.035809][ T5701] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 586.700012][T10477] retu-mfd 0-0001: could not read Retu revision: -5 [ 586.710475][T10477] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 586.710887][T10477] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 586.816862][T10480] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 586.817476][T10480] retu-mfd 0-0002: probe with driver retu-mfd failed with error -5 [ 586.849345][T10480] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 587.416337][ T8901] usb 1-1: USB disconnect, device number 30 [ 587.438369][T10496] tmpfs: Unknown parameter 'rroot' [ 588.198505][ T8901] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 588.328186][ T8901] usb 5-1: device descriptor read/64, error -71 [ 588.419980][ T31] kauditd_printk_skb: 51 callbacks suppressed [ 588.419992][ T31] audit: type=1800 audit(1789257964.911:3408): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 588.467632][T10523] FAULT_INJECTION: forcing a failure. [ 588.467632][T10523] name failslab, interval 1, probability 0, space 0, times 0 [ 588.467669][T10523] CPU: 1 UID: 0 PID: 10523 Comm: syz.5.1351 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.467696][T10523] Tainted: [L]=SOFTLOCKUP [ 588.467703][T10523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 588.467716][T10523] Call Trace: [ 588.467723][T10523] [ 588.467732][T10523] dump_stack_lvl+0x100/0x190 [ 588.467772][T10523] should_fail_ex.cold+0x5/0xa [ 588.467803][T10523] should_failslab+0xc2/0x120 [ 588.467829][T10523] __kmalloc_cache_noprof+0x91/0x6d0 [ 588.467860][T10523] ? ceph_alloc_options+0x43/0x310 [ 588.467885][T10523] ceph_alloc_options+0x43/0x310 [ 588.467904][T10523] ceph_init_fs_context+0x61/0x530 [ 588.467935][T10523] alloc_fs_context+0x60c/0xf40 [ 588.467983][T10523] __x64_sys_fsopen+0xed/0x220 [ 588.468005][T10523] do_syscall_64+0x123/0x790 [ 588.468032][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.468052][T10523] RIP: 0033:0x7f8a1a79e159 [ 588.468068][T10523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.468088][T10523] RSP: 002b:00007f8a1b6c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 588.468106][T10523] RAX: ffffffffffffffda RBX: 00007f8a1aa25fa0 RCX: 00007f8a1a79e159 [ 588.468117][T10523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 588.468128][T10523] RBP: 00007f8a1a83503b R08: 0000000000000000 R09: 0000000000000000 [ 588.468138][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.468149][T10523] R13: 00007f8a1aa26038 R14: 00007f8a1aa25fa0 R15: 00007fff4dba2e88 [ 588.468172][T10523] [ 588.526575][ T31] audit: type=1800 audit(1789257965.011:3409): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 588.597447][ T8901] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 588.610817][ T31] audit: type=1800 audit(1789257965.101:3410): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155912 res=0 errno=0 [ 588.687224][ T31] audit: type=1800 audit(1789257965.181:3411): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 588.728519][ T8901] usb 5-1: device descriptor read/64, error -71 [ 588.731376][ T31] audit: type=1800 audit(1789257965.221:3412): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1353" name="file1" dev="tmpfs" ino=1562 res=0 errno=0 [ 588.734368][ T31] audit: type=1400 audit(1789257965.221:3413): avc: denied { create } for pid=10527 comm="syz.5.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 588.759426][ T31] audit: type=1400 audit(1789257965.231:3414): avc: denied { sys_admin } for pid=10527 comm="syz.5.1354" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 588.839299][ T8901] usb usb5-port1: attempt power cycle [ 589.036305][ T31] audit: type=1800 audit(1789257965.521:3415): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 589.064490][ T31] audit: type=1800 audit(1789257965.551:3416): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 589.121667][ T31] audit: type=1800 audit(1789257965.611:3417): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1355" name="file1" dev="tmpfs" ino=1117 res=0 errno=0 [ 589.178383][ T8901] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 589.198849][ T8901] usb 5-1: device descriptor read/8, error -71 [ 589.228619][ T5686] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 589.395166][ T5686] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 589.396604][ T5686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.396642][ T5686] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.396678][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.441210][ T8901] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 589.446785][ T5686] usb 1-1: config 0 descriptor?? [ 589.461038][ T8901] usb 5-1: device descriptor read/8, error -71 [ 589.463811][ T5686] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 589.497172][T10544] tmpfs: Unknown parameter 'rroot' [ 589.568542][ T8901] usb usb5-port1: unable to enumerate USB device [ 589.638172][ T30] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 589.788789][ T30] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 589.790238][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.790269][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.793008][ T30] usb 6-1: config 0 descriptor?? [ 589.836613][ T30] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 590.649759][ T30] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 590.798172][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 590.798937][ T30] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 590.799939][ T30] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 590.799962][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.799980][ T30] usb 2-1: config 0 has no interface number 0 [ 590.800011][ T30] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 590.801965][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.801987][ T30] usb 2-1: Product: syz [ 590.802002][ T30] usb 2-1: Manufacturer: syz [ 590.802017][ T30] usb 2-1: SerialNumber: syz [ 590.805178][ T30] usb 2-1: config 0 descriptor?? [ 590.879334][ T30] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 590.883554][ T30] nokiaca42v2 ttyUSB0: required endpoint is missing [ 591.095076][ T30] usb 2-1: USB disconnect, device number 42 [ 591.103646][ T30] cypress_m8 2-1:0.35: device disconnected [ 591.735065][ T5686] usb 1-1: USB disconnect, device number 31 [ 591.990405][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 592.156619][ T5768] usb 6-1: USB disconnect, device number 38 [ 592.971585][T10622] tmpfs: Unknown parameter 'rroot' [ 593.304672][ T5768] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 593.466674][ T5768] usb 3-1: device descriptor read/64, error -71 [ 593.505631][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 593.505649][ T31] audit: type=1800 audit(1789257969.991:3472): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 593.576060][ T31] audit: type=1800 audit(1789257970.061:3473): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 593.700222][ T5768] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 593.728172][ T31] audit: type=1800 audit(1789257970.211:3474): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 593.783760][ T31] audit: type=1800 audit(1789257970.271:3475): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157564 res=0 errno=0 [ 593.813139][ T31] audit: type=1800 audit(1789257970.301:3476): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155912 res=0 errno=0 [ 593.829787][ T5768] usb 3-1: device descriptor read/64, error -71 [ 593.874675][ T31] audit: type=1800 audit(1789257970.361:3477): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15500 res=0 errno=0 [ 593.898163][ T5701] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 593.935709][ T31] audit: type=1400 audit(1789257970.421:3478): avc: denied { write } for pid=10639 comm="syz.5.1388" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 593.938464][ T5768] usb usb3-port1: attempt power cycle [ 594.017403][ T31] audit: type=1800 audit(1789257970.501:3479): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155912 res=0 errno=0 [ 594.059671][ T5701] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 594.060572][ T5701] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 594.062066][ T5701] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 594.063733][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.063755][ T5701] usb 2-1: Product: syz [ 594.063770][ T5701] usb 2-1: Manufacturer: syz [ 594.063784][ T5701] usb 2-1: SerialNumber: syz [ 594.082077][ T31] audit: type=1800 audit(1789257970.571:3480): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157583 res=0 errno=0 [ 594.090915][ T31] audit: type=1800 audit(1789257970.581:3481): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=157615 res=0 errno=0 [ 594.099816][ T5701] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 594.184776][ T5701] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 594.201760][ T5701] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 594.234721][T10647] tmpfs: Unknown parameter 'rroot' [ 594.278505][ T5768] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 594.304270][ T5768] usb 3-1: device descriptor read/8, error -71 [ 594.538233][ T5768] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 594.561027][ T5768] usb 3-1: device descriptor read/8, error -71 [ 594.612975][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 594.613415][T10654] FAULT_INJECTION: forcing a failure. [ 594.613415][T10654] name failslab, interval 1, probability 0, space 0, times 0 [ 594.613444][T10654] CPU: 1 UID: 0 PID: 10654 Comm: syz.0.1393 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.613472][T10654] Tainted: [L]=SOFTLOCKUP [ 594.613480][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 594.613493][T10654] Call Trace: [ 594.613500][T10654] [ 594.613510][T10654] dump_stack_lvl+0x100/0x190 [ 594.613543][T10654] should_fail_ex.cold+0x5/0xa [ 594.613572][T10654] should_failslab+0xc2/0x120 [ 594.613599][T10654] __kmalloc_cache_node_noprof+0x94/0x720 [ 594.613626][T10654] ? __alloc_workqueue+0x6f2/0x1950 [ 594.613656][T10654] __alloc_workqueue+0x6f2/0x1950 [ 594.613688][T10654] alloc_workqueue_noprof+0xc7/0x130 [ 594.613714][T10654] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 594.613742][T10654] ? bond_init+0xc0/0xb80 [ 594.613771][T10654] ? find_held_lock+0x2b/0x80 [ 594.613799][T10654] ? bond_init+0x187/0xb80 [ 594.613824][T10654] ? bond_init+0x187/0xb80 [ 594.613856][T10654] bond_init+0x1b8/0xb80 [ 594.613884][T10654] ? kasan_save_track+0x14/0x30 [ 594.613906][T10654] ? __kasan_kmalloc+0xaa/0xb0 [ 594.613926][T10654] ? __pfx_bond_init+0x10/0x10 [ 594.613948][T10654] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 594.613978][T10654] ? register_netdevice+0x50c/0x25a0 [ 594.614008][T10654] ? __pfx_bond_init+0x10/0x10 [ 594.614034][T10654] register_netdevice+0x685/0x25a0 [ 594.614063][T10654] ? __pfx_validate_linkmsg+0x10/0x10 [ 594.614087][T10654] ? __pfx_register_netdevice+0x10/0x10 [ 594.614120][T10654] bond_newlink+0x6a/0x100 [ 594.614143][T10654] ? __pfx_bond_newlink+0x10/0x10 [ 594.614165][T10654] rtnl_newlink+0x1697/0x2620 [ 594.614207][T10654] ? __pfx_rtnl_newlink+0x10/0x10 [ 594.614234][T10654] ? avc_has_perm_noaudit+0x56/0x3b0 [ 594.614264][T10654] ? find_held_lock+0x2b/0x80 [ 594.614292][T10654] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 594.614320][T10654] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 594.614374][T10654] ? lock_acquire+0x1d1/0x380 [ 594.614393][T10654] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 594.614415][T10654] ? find_held_lock+0x2b/0x80 [ 594.614441][T10654] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 594.614465][T10654] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 594.614492][T10654] ? __pfx_rtnl_newlink+0x10/0x10 [ 594.614517][T10654] rtnetlink_rcv_msg+0x95e/0xe90 [ 594.614546][T10654] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.614579][T10654] ? ref_tracker_free+0x37e/0x6c0 [ 594.614609][T10654] netlink_rcv_skb+0x159/0x420 [ 594.614631][T10654] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.614657][T10654] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 594.614687][T10654] ? netlink_deliver_tap+0x1ae/0xcc0 [ 594.614714][T10654] netlink_unicast+0x585/0x850 [ 594.614739][T10654] ? __pfx_netlink_unicast+0x10/0x10 [ 594.614768][T10654] netlink_sendmsg+0x8b0/0xda0 [ 594.614794][T10654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.614819][T10654] ? selinux_socket_sendmsg+0x198/0x2f0 [ 594.614844][T10654] ____sys_sendmsg+0xa4d/0xbe0 [ 594.614872][T10654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.614896][T10654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.614936][T10654] ___sys_sendmsg+0x190/0x1e0 [ 594.614968][T10654] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.614998][T10654] ? futex_wait+0x11e/0x370 [ 594.615026][T10654] ? find_held_lock+0x2b/0x80 [ 594.615068][T10654] __sys_sendmsg+0x160/0x210 [ 594.615092][T10654] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.615129][T10654] do_syscall_64+0x123/0x790 [ 594.615158][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.615184][T10654] RIP: 0033:0x7f2e5879e159 [ 594.615202][T10654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.615222][T10654] RSP: 002b:00007f2e595f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.615243][T10654] RAX: ffffffffffffffda RBX: 00007f2e58a25fa0 RCX: 00007f2e5879e159 [ 594.615257][T10654] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 594.615269][T10654] RBP: 00007f2e5883503b R08: 0000000000000000 R09: 0000000000000000 [ 594.615281][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.615293][T10654] R13: 00007f2e58a26038 R14: 00007f2e58a25fa0 R15: 00007ffc79de6088 [ 594.615320][T10654] [ 594.673357][ T5768] usb usb3-port1: unable to enumerate USB device [ 594.818843][T10659] tmpfs: Unknown parameter 'rroot' [ 594.956867][T10661] FAULT_INJECTION: forcing a failure. [ 594.956867][T10661] name failslab, interval 1, probability 0, space 0, times 0 [ 594.956899][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.5.1396 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.956926][T10661] Tainted: [L]=SOFTLOCKUP [ 594.956944][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 594.956955][T10661] Call Trace: [ 594.956962][T10661] [ 594.956969][T10661] dump_stack_lvl+0x100/0x190 [ 594.956999][T10661] should_fail_ex.cold+0x5/0xa [ 594.957026][T10661] should_failslab+0xc2/0x120 [ 594.957051][T10661] kmem_cache_alloc_noprof+0x92/0x6a0 [ 594.957070][T10661] ? sk_skb_reason_drop+0x114/0x1b0 [ 594.957092][T10661] ? skb_clone+0x190/0x400 [ 594.957120][T10661] skb_clone+0x190/0x400 [ 594.957140][T10661] bpf_clone_redirect+0x166/0x500 [ 594.957163][T10661] ? __pfx___cant_migrate+0x10/0x10 [ 594.957190][T10661] bpf_prog_26e1271c592147e7+0x22/0x2a [ 594.957206][T10661] bpf_test_run+0x4e2/0xa40 [ 594.957231][T10661] ? bpf_test_run+0x1c6/0xa40 [ 594.957259][T10661] ? __pfx_bpf_test_run+0x10/0x10 [ 594.957306][T10661] ? eth_type_trans+0x2e3/0x720 [ 594.957328][T10661] bpf_prog_test_run_skb+0x15b3/0x3530 [ 594.957349][T10661] ? lock_acquire+0x1d1/0x380 [ 594.957371][T10661] ? __fget_files+0x161/0x3d0 [ 594.957396][T10661] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 594.957418][T10661] ? fput+0x7c/0x100 [ 594.957444][T10661] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 594.957462][T10661] __sys_bpf+0x2265/0x4a30 [ 594.957485][T10661] ? __pfx___sys_bpf+0x10/0x10 [ 594.957500][T10661] ? find_held_lock+0x2b/0x80 [ 594.957522][T10661] ? futex_wake+0x4ea/0x5e0 [ 594.957563][T10661] ? putname+0xb1/0x110 [ 594.957582][T10661] ? kmem_cache_free+0x127/0x6c0 [ 594.957623][T10661] ? __x64_sys_futex+0x34f/0x4d0 [ 594.957644][T10661] ? __x64_sys_futex+0x358/0x4d0 [ 594.957666][T10661] ? __x64_sys_openat+0x12d/0x210 [ 594.957689][T10661] ? xfd_validate_state+0x129/0x190 [ 594.957711][T10661] ? __x64_sys_bpf+0xce/0x140 [ 594.957733][T10661] __x64_sys_bpf+0xce/0x140 [ 594.957750][T10661] ? do_syscall_64+0xae/0x790 [ 594.957773][T10661] do_syscall_64+0x123/0x790 [ 594.957797][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.957817][T10661] RIP: 0033:0x7f8a1a79e159 [ 594.957833][T10661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.957849][T10661] RSP: 002b:00007f8a1b6c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 594.957867][T10661] RAX: ffffffffffffffda RBX: 00007f8a1aa25fa0 RCX: 00007f8a1a79e159 [ 594.957878][T10661] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 594.957889][T10661] RBP: 00007f8a1a83503b R08: 0000000000000000 R09: 0000000000000000 [ 594.957899][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.957910][T10661] R13: 00007f8a1aa26038 R14: 00007f8a1aa25fa0 R15: 00007fff4dba2e88 [ 594.957934][T10661] [ 595.049375][ T5768] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 595.269163][ T5768] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 595.286172][ T5768] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 595.286203][ T5768] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 595.289111][ T5768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.289148][ T5768] usb 5-1: Product: syz [ 595.289161][ T5768] usb 5-1: Manufacturer: syz [ 595.289174][ T5768] usb 5-1: SerialNumber: syz [ 595.711112][T10664] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 595.844589][ T5768] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 595.845259][ T5768] dvb_usb_af9015 5-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 595.853632][ T5768] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 595.853706][ T5768] dvb_usb_af9035 5-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 595.860755][ T5768] usb 5-1: USB disconnect, device number 38 [ 596.251617][T10633] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 596.253417][ T30] usb 2-1: USB disconnect, device number 43 [ 596.276399][ T30] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 596.299661][ T30] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 596.300543][ T30] ti_usb_3410_5052 2-1:2.0: device disconnected [ 596.458911][T10691] tmpfs: Unknown parameter 'rroot' [ 596.749264][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 596.878259][ T5768] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 596.901829][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 596.902770][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 596.902811][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.907897][ T10] usb 6-1: config 0 descriptor?? [ 596.943501][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 597.019972][ T5768] usb 3-1: device descriptor read/64, error -71 [ 597.185534][T10710] vlan2: entered promiscuous mode [ 597.185554][T10710] hsr0: entered promiscuous mode [ 597.185972][T10710] vlan2: entered allmulticast mode [ 597.185983][T10710] hsr0: entered allmulticast mode [ 597.185994][T10710] hsr_slave_1: entered allmulticast mode [ 597.220897][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 597.221654][T10710] hsr_slave_0: left promiscuous mode [ 597.223161][T10710] hsr_slave_1: left promiscuous mode [ 597.268185][ T5768] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 597.398996][ T5768] usb 3-1: device descriptor read/64, error -71 [ 597.508550][ T5768] usb usb3-port1: attempt power cycle [ 597.588231][ T8901] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 597.768665][ T8901] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 597.769510][ T8901] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 597.769524][ T8901] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 597.771093][ T8901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.771127][ T8901] usb 1-1: Product: syz [ 597.771140][ T8901] usb 1-1: Manufacturer: syz [ 597.771154][ T8901] usb 1-1: SerialNumber: syz [ 597.878206][ T5768] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 597.898556][ T5768] usb 3-1: device descriptor read/8, error -71 [ 598.041337][ T8901] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 598.041912][ T8901] dvb_usb_af9015 1-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 598.046909][ T8901] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 598.046972][ T8901] dvb_usb_af9035 1-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 598.086409][ T8901] usb 1-1: USB disconnect, device number 32 [ 598.140083][ T5768] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 598.161287][ T5768] usb 3-1: device descriptor read/8, error -71 [ 598.268644][ T5768] usb usb3-port1: unable to enumerate USB device [ 598.410367][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 598.558161][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 598.558870][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 598.559970][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.559996][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.560028][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.564336][ T9] usb 2-1: config 0 descriptor?? [ 598.621055][ T31] kauditd_printk_skb: 75 callbacks suppressed [ 598.621071][ T31] audit: type=1800 audit(1789257975.111:3557): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158373 res=0 errno=0 [ 598.622053][ T31] audit: type=1800 audit(1789257975.111:3558): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=158402 res=0 errno=0 [ 598.622954][ T31] audit: type=1800 audit(1789257975.111:3559): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=158380 res=0 errno=0 [ 598.623837][ T31] audit: type=1800 audit(1789257975.111:3560): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=158381 res=0 errno=0 [ 598.625866][ T31] audit: type=1800 audit(1789257975.111:3561): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=158382 res=0 errno=0 [ 598.711173][ T31] audit: type=1800 audit(1789257975.201:3562): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158422 res=0 errno=0 [ 598.740119][ T31] audit: type=1800 audit(1789257975.231:3563): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155912 res=0 errno=0 [ 598.783218][ T31] audit: type=1800 audit(1789257975.271:3564): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 598.856253][ T31] audit: type=1800 audit(1789257975.341:3565): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 598.886055][ T31] audit: type=1326 audit(1789257975.371:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10732 comm="syz.4.1424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6c119e159 code=0x0 [ 599.017676][ T9] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 599.017708][ T9] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 599.215357][ T9] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 599.250673][ T5768] usb 6-1: USB disconnect, device number 39 [ 599.416118][ T9] ft260 0003:0403:6030.0014: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 599.441122][T10740] binder: 10738:10740 unknown command 0 [ 599.441143][T10740] binder: 10738:10740 ioctl c0306201 2000000004c0 returned -22 [ 599.600069][T10745] binder: 10744:10745 ioctl c0306201 0 returned -14 [ 599.619268][ T9] ft260 0003:0403:6030.0014: failed to retrieve status: -32, no wakeup [ 599.656959][T10748] FAULT_INJECTION: forcing a failure. [ 599.656959][T10748] name failslab, interval 1, probability 0, space 0, times 0 [ 599.656992][T10748] CPU: 1 UID: 0 PID: 10748 Comm: syz.2.1429 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.657019][T10748] Tainted: [L]=SOFTLOCKUP [ 599.657026][T10748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 599.657038][T10748] Call Trace: [ 599.657045][T10748] [ 599.657053][T10748] dump_stack_lvl+0x100/0x190 [ 599.657082][T10748] should_fail_ex.cold+0x5/0xa [ 599.657109][T10748] should_failslab+0xc2/0x120 [ 599.657134][T10748] kmem_cache_alloc_noprof+0x92/0x6a0 [ 599.657157][T10748] ? do_epoll_ctl_file+0x237d/0x36e0 [ 599.657191][T10748] do_epoll_ctl_file+0x237d/0x36e0 [ 599.657225][T10748] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 599.657249][T10748] ? lock_acquire+0x1d1/0x380 [ 599.657268][T10748] ? __fget_files+0x34/0x3d0 [ 599.657291][T10748] ? find_held_lock+0x2b/0x80 [ 599.657316][T10748] ? __fget_files+0x215/0x3d0 [ 599.657345][T10748] ? __fget_files+0x21f/0x3d0 [ 599.657372][T10748] ? do_epoll_ctl+0xfd/0x1a0 [ 599.657396][T10748] do_epoll_ctl+0xfd/0x1a0 [ 599.657422][T10748] ? __pfx_do_epoll_ctl+0x10/0x10 [ 599.657454][T10748] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 599.657486][T10748] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 599.657520][T10748] do_syscall_64+0x123/0x790 [ 599.657547][T10748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.657565][T10748] RIP: 0033:0x7f3176b9e159 [ 599.657581][T10748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.657599][T10748] RSP: 002b:00007f3177abe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 599.657618][T10748] RAX: ffffffffffffffda RBX: 00007f3176e25fa0 RCX: 00007f3176b9e159 [ 599.657631][T10748] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000004 [ 599.657641][T10748] RBP: 00007f3176c3503b R08: 0000000000000000 R09: 0000000000000000 [ 599.657651][T10748] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 599.657662][T10748] R13: 00007f3176e26038 R14: 00007f3176e25fa0 R15: 00007ffe87f1c898 [ 599.657686][T10748] [ 599.912219][ T9] usb 2-1: USB disconnect, device number 44 [ 601.053282][T10763] netlink: 'syz.5.1433': attribute type 1 has an invalid length. [ 601.338361][T10774] tmpfs: Unknown parameter 'rroot' [ 601.428245][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 601.585327][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 601.586161][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 601.586181][ T9] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 601.587853][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.587874][ T9] usb 5-1: Product: syz [ 601.587883][ T9] usb 5-1: Manufacturer: syz [ 601.587892][ T9] usb 5-1: SerialNumber: syz [ 601.668746][ T5768] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 601.820138][ T5768] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 601.821088][ T5768] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.821127][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.823793][ T5768] usb 3-1: config 0 descriptor?? [ 601.829249][ T5768] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 601.874422][ T5701] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 601.917393][ T9] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 601.924486][ T9] dvb_usb_af9015 5-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 601.926581][ T9] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 601.926635][ T9] dvb_usb_af9035 5-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 601.934669][ T9] usb 5-1: USB disconnect, device number 39 [ 602.051659][ T5701] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 602.052553][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.052576][ T5701] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 602.052609][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.057050][ T5701] usb 2-1: config 0 descriptor?? [ 602.192641][T10786] input: syz0 as /devices/virtual/input/input33 [ 602.461570][ T5701] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 602.659176][ T5701] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 602.682155][ T5701] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 602.682184][ T5701] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 602.732058][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.732112][ T5701] usb 1-1: Product: syz [ 602.732150][ T5701] usb 1-1: Manufacturer: syz [ 602.732225][ T5701] usb 1-1: SerialNumber: syz [ 603.642845][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 603.642887][ T31] audit: type=1800 audit(1789257980.121:3620): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=158853 res=0 errno=0 [ 603.859527][ T31] audit: type=1800 audit(1789257980.341:3621): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=158854 res=0 errno=0 [ 604.251805][ T31] audit: type=1400 audit(1789257980.741:3622): avc: denied { search } for pid=4951 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 604.397557][ T8453] usb 3-1: USB disconnect, device number 43 [ 604.432444][ T5701] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 604.447933][ T5701] dvb_usb_af9015 1-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 604.466499][ T5701] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 604.466564][ T5701] dvb_usb_af9035 1-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 604.488711][ T31] audit: type=1800 audit(1789257980.971:3623): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=158875 res=0 errno=0 [ 604.488763][ T31] audit: type=1800 audit(1789257980.981:3624): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=158876 res=0 errno=0 [ 604.491976][ T5701] usb 1-1: USB disconnect, device number 33 [ 604.498249][ T31] audit: type=1800 audit(1789257980.981:3625): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=158855 res=0 errno=0 [ 604.498294][ T31] audit: type=1800 audit(1789257980.981:3626): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=158877 res=0 errno=0 [ 604.557166][ T5768] usb 2-1: USB disconnect, device number 45 [ 604.696350][ T31] audit: type=1400 audit(1789257981.181:3627): avc: denied { read } for pid=10796 comm="syz.5.1447" lport=47018 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 604.826484][ T31] audit: type=1800 audit(1789257981.311:3628): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 604.895442][ T31] audit: type=1800 audit(1789257981.381:3629): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 605.117543][T10808] tmpfs: Unknown parameter 'rroot' [ 605.123772][ T5701] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 605.208681][ T8453] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 605.270073][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 605.270786][ T5701] usb 3-1: not running at top speed; connect to a high speed hub [ 605.270810][ T5701] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 605.271661][ T5701] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 605.271682][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.274371][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 605.274395][ T5701] usb 3-1: Product: syz [ 605.274410][ T5701] usb 3-1: Manufacturer: syz [ 605.350458][ T5701] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 605.366177][ T8453] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 605.367218][ T8453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.367257][ T8453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.397972][ T8453] usb 6-1: config 0 descriptor?? [ 605.611645][ T8453] usbhid 6-1:0.0: can't add hid device: -71 [ 605.611745][ T8453] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 605.622677][ T8453] usb 6-1: USB disconnect, device number 40 [ 605.755994][ T5701] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 605.756336][ T5701] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 605.756375][ T5701] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 605.771742][ T5701] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 605.783826][ T5701] usb 3-1: USB disconnect, device number 44 [ 605.997031][T10829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.118304][ T8453] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 606.278780][ T8453] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 606.279656][ T8453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 606.279696][ T8453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.281896][ T8453] usb 6-1: config 0 descriptor?? [ 606.380210][T10832] ceph: No mds server is up or the cluster is laggy [ 606.483931][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 606.483954][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 606.717434][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.717465][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.717487][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.717508][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.717528][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.717549][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.717599][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.717619][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.717639][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.717659][ T8453] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 606.805366][ T8453] logitech-djreceiver 0003:046D:C71F.0015: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 607.172977][ T8901] usb 6-1: USB disconnect, device number 41 [ 607.221927][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 608.564492][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 608.564516][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 608.694543][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 608.694560][ T31] audit: type=1800 audit(1789257985.181:3684): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=155912 res=0 errno=0 [ 608.731450][ T31] audit: type=1400 audit(1789257985.221:3685): avc: denied { append } for pid=10882 comm="syz.5.1479" name="sda" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 608.736146][ T31] audit: type=1400 audit(1789257985.221:3686): avc: denied { create } for pid=10882 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 608.785538][ T31] audit: type=1400 audit(1789257985.271:3687): avc: denied { write } for pid=10882 comm="syz.5.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 608.815732][ T31] audit: type=1800 audit(1789257985.301:3688): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 608.846911][ T31] audit: type=1800 audit(1789257985.331:3689): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 608.869026][ T31] audit: type=1800 audit(1789257985.351:3690): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34925 res=0 errno=0 [ 608.921294][ T31] audit: type=1800 audit(1789257985.411:3691): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=36141 res=0 errno=0 [ 608.957858][ T31] audit: type=1800 audit(1789257985.441:3692): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34925 res=0 errno=0 [ 608.960085][ T31] audit: type=1800 audit(1789257985.451:3693): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159444 res=0 errno=0 [ 609.177350][T10902] tmpfs: Unknown parameter 'rroot' [ 609.185794][T10904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1486'. [ 609.507058][T10918] loop0: detected capacity change from 0 to 3904 [ 609.562215][T10918] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 609.569997][T10918] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 609.570016][T10918] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 609.570054][T10918] loop0: [ 609.698310][ T8901] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 609.848754][ T8901] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 609.849748][ T8901] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 609.849771][ T8901] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 609.851640][ T8901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.851662][ T8901] usb 3-1: Product: syz [ 609.851677][ T8901] usb 3-1: Manufacturer: syz [ 609.851691][ T8901] usb 3-1: SerialNumber: syz [ 610.095200][T10939] netlink: 'syz.0.1499': attribute type 2 has an invalid length. [ 610.152086][T10939] : entered promiscuous mode [ 610.241439][ T8901] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 610.242012][ T8901] dvb_usb_af9015 3-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 610.256299][ T8901] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 610.256362][ T8901] dvb_usb_af9035 3-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 610.266417][ T8901] usb 3-1: USB disconnect, device number 45 [ 610.373844][T10943] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 610.938491][ T8453] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 610.959397][T10954] tmpfs: Unknown parameter 'rroot' [ 611.098797][ T8453] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 611.099647][ T8453] usb 1-1: config index 0 descriptor too short (expected 86, got 68) [ 611.099669][ T8453] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.104413][ T8453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.104434][ T8453] usb 1-1: Product: syz [ 611.104448][ T8453] usb 1-1: Manufacturer: syz [ 611.104461][ T8453] usb 1-1: SerialNumber: syz [ 611.160688][ T8453] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 611.321101][ T8453] usb 1-1: USB disconnect, device number 34 [ 612.217607][T11007] tmpfs: Unknown parameter 'rroot' [ 612.607413][T11022] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 612.623161][T11022] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 612.625548][T11022] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 612.625751][T11022] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 612.656058][T11022] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 612.656337][T11022] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 612.677374][T11025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 613.761616][ T31] kauditd_printk_skb: 77 callbacks suppressed [ 613.761634][ T31] audit: type=1326 audit(1789258246.250:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11017 comm="syz.5.1531" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1a79e159 code=0x7fc00000 [ 614.133557][ T31] audit: type=1400 audit(1789258246.620:3772): avc: denied { map } for pid=11051 comm="syz.1.1542" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 614.137433][ T31] audit: type=1400 audit(1789258246.620:3773): avc: denied { call } for pid=11051 comm="syz.1.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 614.845128][T11063] tmpfs: Unknown parameter 'rroot' [ 614.920381][ T31] audit: type=1400 audit(1789258247.410:3774): avc: denied { execute } for pid=11060 comm="syz.1.1545" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 615.276208][T11071] FAULT_INJECTION: forcing a failure. [ 615.276208][T11071] name failslab, interval 1, probability 0, space 0, times 0 [ 615.276242][T11071] CPU: 0 UID: 0 PID: 11071 Comm: syz.0.1548 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.276270][T11071] Tainted: [L]=SOFTLOCKUP [ 615.276277][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 615.276289][T11071] Call Trace: [ 615.276297][T11071] [ 615.276306][T11071] dump_stack_lvl+0x100/0x190 [ 615.276339][T11071] should_fail_ex.cold+0x5/0xa [ 615.276367][T11071] should_failslab+0xc2/0x120 [ 615.276394][T11071] __kmalloc_noprof+0xfc/0x840 [ 615.276417][T11071] ? group_cpus_evenly+0x195/0x660 [ 615.276442][T11071] group_cpus_evenly+0x195/0x660 [ 615.276473][T11071] ? __pfx_group_cpus_evenly+0x10/0x10 [ 615.276502][T11071] blk_mq_map_queues+0x9d/0x430 [ 615.276524][T11071] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 615.276542][T11071] ? trace_kmalloc+0xeb/0x110 [ 615.276564][T11071] ? __kasan_kmalloc+0xaa/0xb0 [ 615.276587][T11071] ? __kmalloc_node_noprof+0x360/0x880 [ 615.276611][T11071] blk_mq_update_queue_map+0x305/0x3a0 [ 615.276643][T11071] blk_mq_alloc_tag_set+0x660/0x1330 [ 615.276667][T11071] ? idr_alloc+0x77/0x130 [ 615.276703][T11071] loop_add+0x3b7/0xb60 [ 615.276734][T11071] ? __pfx_loop_add+0x10/0x10 [ 615.276775][T11071] ? __fget_files+0x34/0x3d0 [ 615.276805][T11071] loop_control_ioctl+0xae/0x620 [ 615.276825][T11071] ? __pfx_loop_control_ioctl+0x10/0x10 [ 615.276844][T11071] ? selinux_file_ioctl+0x13b/0x290 [ 615.276865][T11071] ? selinux_file_ioctl+0xb6/0x290 [ 615.276887][T11071] ? __pfx_loop_control_ioctl+0x10/0x10 [ 615.276908][T11071] __x64_sys_ioctl+0x18e/0x210 [ 615.276930][T11071] do_syscall_64+0x123/0x790 [ 615.276957][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.276976][T11071] RIP: 0033:0x7f2e5879e159 [ 615.276993][T11071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.277011][T11071] RSP: 002b:00007f2e595f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.277030][T11071] RAX: ffffffffffffffda RBX: 00007f2e58a25fa0 RCX: 00007f2e5879e159 [ 615.277042][T11071] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 615.277054][T11071] RBP: 00007f2e5883503b R08: 0000000000000000 R09: 0000000000000000 [ 615.277066][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.277078][T11071] R13: 00007f2e58a26038 R14: 00007f2e58a25fa0 R15: 00007ffc79de6088 [ 615.277103][T11071] [ 615.332423][T11073] tmpfs: Unknown parameter 'rroot' [ 616.078298][ T8901] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 616.240588][ T8901] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.242930][ T8901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.242968][ T8901] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 616.247073][ T8901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.247096][ T8901] usb 1-1: Product: syz [ 616.247111][ T8901] usb 1-1: Manufacturer: syz [ 616.247125][ T8901] usb 1-1: SerialNumber: syz [ 616.271419][T11103] tmpfs: Unknown parameter 'rroot' [ 616.327719][ T8901] cdc_mbim 1-1:1.0: skipping garbage [ 616.348532][ T5686] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 616.508923][ T5686] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 616.510087][ T5686] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 616.510106][ T5686] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 616.511848][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.511866][ T5686] usb 3-1: Product: syz [ 616.511879][ T5686] usb 3-1: Manufacturer: syz [ 616.511887][ T5686] usb 3-1: SerialNumber: syz [ 616.528222][T11082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 616.664739][T11110] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1562'. [ 616.790983][ T5686] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 616.792997][ T5686] dvb_usb_af9015 3-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 616.795117][ T5686] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 616.795171][ T5686] dvb_usb_af9035 3-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 616.800304][ T5686] usb 3-1: USB disconnect, device number 46 [ 616.923035][T11117] tmpfs: Unknown parameter 'rroot' [ 617.133075][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058586400: rx timeout, send abort [ 617.137030][T11082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 617.137276][ T8901] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 617.154503][ T31] audit: type=1400 audit(1789258249.640:3775): avc: denied { read } for pid=4948 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 617.154684][ T31] audit: type=1400 audit(1789258249.640:3776): avc: denied { search } for pid=4948 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.155013][ T31] audit: type=1400 audit(1789258249.640:3777): avc: denied { write search } for pid=4948 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.155123][ T31] audit: type=1400 audit(1789258249.640:3778): avc: denied { add_name } for pid=4948 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.155313][ T31] audit: type=1400 audit(1789258249.640:3779): avc: denied { create } for pid=4948 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 617.250045][ T31] audit: type=1400 audit(1789258249.740:3780): avc: denied { append open } for pid=4948 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 617.343697][ T8901] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 617.379586][T11121] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 617.382969][ T8901] wwan wwan0: port wwan0mbim0 attached [ 617.405726][ T8901] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 46:c5:a0:15:7c:3a [ 617.556430][T11126] team0: No ports can be present during mode change [ 617.633186][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058586800: rx timeout, send abort [ 617.634914][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058586400: abort rx timeout. Force session deactivation [ 618.128053][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058586000: rx timeout, send abort [ 618.133259][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058586000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 618.134535][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058586800: abort rx timeout. Force session deactivation [ 618.811991][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.812044][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.819451][T11142] tmpfs: Unknown parameter 'rroot' [ 618.934017][ T8901] usb 1-1: USB disconnect, device number 35 [ 618.937276][ T8901] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 619.048667][ T8901] wwan wwan0: port wwan0mbim0 disconnected [ 619.261291][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 619.261308][ T31] audit: type=1400 audit(1789258251.750:3789): avc: denied { connect } for pid=11148 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 619.366118][ T31] audit: type=1400 audit(1789258251.850:3790): avc: denied { shutdown } for pid=11148 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 619.396428][T11155] tmpfs: Unknown parameter 'rroot' [ 620.894527][T11169] binder: 11168:11169 ioctl c0306201 200000000080 returned -14 [ 620.915985][T11169] binder: 11168:11169 ioctl c0306201 2000000003c0 returned -14 [ 621.288150][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 621.754001][T11184] tmpfs: Unknown parameter 'rroot' [ 621.897447][ T31] audit: type=1400 audit(1789258254.380:3791): avc: denied { read } for pid=11189 comm="syz.2.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 622.533348][T11206] tmpfs: Unknown parameter 'rroot' [ 622.706076][ T31] audit: type=1400 audit(1789258255.190:3792): avc: denied { write } for pid=11208 comm="syz.5.1596" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 622.709511][ T31] audit: type=1400 audit(1789258255.200:3793): avc: denied { cmd } for pid=11211 comm="syz.4.1597" path="socket:[33758]" dev="sockfs" ino=33758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 622.918330][ T5686] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 623.068553][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 623.069247][ T5686] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 623.078423][ T5686] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 623.078450][ T5686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 623.090048][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.090072][ T5686] usb 1-1: Product: syz [ 623.090091][ T5686] usb 1-1: Manufacturer: syz [ 623.090104][ T5686] usb 1-1: SerialNumber: syz [ 623.094476][ T5686] usb 1-1: config 0 descriptor?? [ 623.251105][ T31] audit: type=1400 audit(1789258255.740:3794): avc: denied { transfer } for pid=11227 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 623.378188][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 623.411721][ T5686] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 623.412811][ T31] audit: type=1400 audit(1789258255.900:3795): avc: denied { search } for pid=4951 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 623.462581][T11231] tmpfs: Unknown parameter 'rroot' [ 623.914713][ T31] audit: type=1400 audit(1789258256.400:3796): avc: denied { search } for pid=4951 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 624.008916][ T31] audit: type=1400 audit(1789258256.500:3797): avc: denied { search } for pid=4951 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 624.008951][ T31] audit: type=1400 audit(1789258256.500:3798): avc: denied { search } for pid=4951 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 624.097597][T11237] syz_tun: entered allmulticast mode [ 624.190298][ T5686] rc_core: IR keymap rc-imon-pad not found [ 624.190311][ T5686] Registered IR keymap rc-empty [ 624.190435][ T5686] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 624.190445][ T5686] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 624.209284][ T5686] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 624.223529][ T5686] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input35 [ 624.246610][ T5686] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:36> initialized [ 624.292741][T11243] FAULT_INJECTION: forcing a failure. [ 624.292741][T11243] name failslab, interval 1, probability 0, space 0, times 0 [ 624.292764][T11243] CPU: 1 UID: 0 PID: 11243 Comm: syz.1.1606 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.292781][T11243] Tainted: [L]=SOFTLOCKUP [ 624.292785][T11243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 624.292792][T11243] Call Trace: [ 624.292797][T11243] [ 624.292803][T11243] dump_stack_lvl+0x100/0x190 [ 624.292824][T11243] should_fail_ex.cold+0x5/0xa [ 624.292840][T11243] should_failslab+0xc2/0x120 [ 624.292859][T11243] __kmalloc_cache_noprof+0x91/0x6d0 [ 624.292876][T11243] ? kvm_dev_ioctl+0x13ee/0x1b50 [ 624.292892][T11243] kvm_dev_ioctl+0x13ee/0x1b50 [ 624.292912][T11243] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 624.292927][T11243] ? selinux_file_ioctl+0x13b/0x290 [ 624.292940][T11243] ? selinux_file_ioctl+0xb6/0x290 [ 624.292954][T11243] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 624.292968][T11243] __x64_sys_ioctl+0x18e/0x210 [ 624.292987][T11243] do_syscall_64+0x123/0x790 [ 624.293004][T11243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.293017][T11243] RIP: 0033:0x7f2d9579e159 [ 624.293028][T11243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.293040][T11243] RSP: 002b:00007f2d965f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.293052][T11243] RAX: ffffffffffffffda RBX: 00007f2d95a25fa0 RCX: 00007f2d9579e159 [ 624.293060][T11243] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 624.293067][T11243] RBP: 00007f2d9583503b R08: 0000000000000000 R09: 0000000000000000 [ 624.293075][T11243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.293083][T11243] R13: 00007f2d95a26038 R14: 00007f2d95a25fa0 R15: 00007fff16424098 [ 624.293098][T11243] [ 624.522122][T11248] tipc: Resetting bearer [ 624.546842][T11248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 624.606431][T11248] team0: No ports can be present during mode change [ 624.612780][T11248] vlan0: entered promiscuous mode [ 624.657918][T11248] team0: Port device vlan0 added [ 624.716246][T11254] tmpfs: Unknown parameter 'rroot' [ 624.717183][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 624.724115][ T5686] usb 1-1: USB disconnect, device number 36 [ 624.771877][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 624.771892][ T31] audit: type=1400 audit(1789258257.260:3800): avc: denied { search } for pid=4951 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 625.292195][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1617'. [ 625.298449][T11268] [ 625.309754][T11268] ====================================================== [ 625.316771][T11268] WARNING: possible circular locking dependency detected [ 625.323791][T11268] syzkaller #0 Tainted: G L [ 625.329771][T11268] ------------------------------------------------------ [ 625.336790][T11268] syz.4.1617/11268 is trying to acquire lock: [ 625.342850][T11268] ffffffff90d81aa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 625.350610][T11268] [ 625.350610][T11268] but task is already holding lock: [ 625.354381][T11272] tmpfs: Unknown parameter 'rroot' [ 625.363064][T11268] ffff888058644c60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 625.371345][T11268] [ 625.371345][T11268] which lock already depends on the new lock. [ 625.371345][T11268] [ 625.381726][T11268] [ 625.381726][T11268] the existing dependency chain (in reverse order) is: [ 625.390718][T11268] [ 625.390718][T11268] -> #5 (&pipe->mutex){+.+.}-{4:4}: [ 625.398084][T11268] lock_acquire+0x1d1/0x380 [ 625.403108][T11268] __mutex_lock+0x1a4/0x1bd0 [ 625.408568][T11268] anon_pipe_prefill_and_lock+0x16c/0x580 [ 625.414797][T11268] anon_pipe_write+0x164/0x1b50 [ 625.420145][T11268] __kernel_write_iter+0x6bb/0x930 [ 625.425752][T11268] __kernel_write+0xf6/0x140 [ 625.430836][T11268] autofs_notify_daemon+0x50d/0xd90 [ 625.436566][T11268] autofs_wait+0x10fd/0x1b50 [ 625.441673][T11268] autofs_mount_wait+0x132/0x3b0 [ 625.447120][T11268] autofs_d_automount+0x490/0x950 [ 625.452644][T11268] __traverse_mounts+0x1b9/0x8a0 [ 625.458086][T11268] step_into_slowpath+0xb7e/0xf90 [ 625.463615][T11268] path_lookupat+0x58b/0xc40 [ 625.468699][T11268] filename_lookup+0x202/0x590 [ 625.473957][T11268] kern_path+0x37/0x50 [ 625.478532][T11268] lookup_bdev+0xd8/0x2a0 [ 625.483363][T11268] resume_store+0x1d6/0x460 [ 625.488390][T11268] kobj_attr_store+0x58/0x80 [ 625.493497][T11268] sysfs_kf_write+0xf2/0x150 [ 625.498606][T11268] kernfs_fop_write_iter+0x3e0/0x5f0 [ 625.504384][T11268] vfs_write+0x6af/0x1050 [ 625.509207][T11268] ksys_write+0x12a/0x250 [ 625.514030][T11268] do_syscall_64+0x123/0x790 [ 625.519124][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.525520][T11268] [ 625.525520][T11268] -> #4 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 625.533229][T11268] lock_acquire+0x1d1/0x380 [ 625.538233][T11268] __mutex_lock+0x1a4/0x1bd0 [ 625.543333][T11268] autofs_notify_daemon+0x4f8/0xd90 [ 625.549034][T11268] autofs_wait+0x10fd/0x1b50 [ 625.554120][T11268] autofs_mount_wait+0x132/0x3b0 [ 625.559573][T11268] autofs_d_automount+0x490/0x950 [ 625.565113][T11268] __traverse_mounts+0x1b9/0x8a0 [ 625.570826][T11268] step_into_slowpath+0xb7e/0xf90 [ 625.576346][T11268] path_lookupat+0x58b/0xc40 [ 625.581435][T11268] filename_lookup+0x202/0x590 [ 625.586705][T11268] kern_path+0x37/0x50 [ 625.591267][T11268] lookup_bdev+0xd8/0x2a0 [ 625.596109][T11268] resume_store+0x1d6/0x460 [ 625.601109][T11268] kobj_attr_store+0x58/0x80 [ 625.606213][T11268] sysfs_kf_write+0xf2/0x150 [ 625.611299][T11268] kernfs_fop_write_iter+0x3e0/0x5f0 [ 625.617090][T11268] vfs_write+0x6af/0x1050 [ 625.621929][T11268] ksys_write+0x12a/0x250 [ 625.626759][T11268] do_syscall_64+0x123/0x790 [ 625.631858][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.638259][T11268] [ 625.638259][T11268] -> #3 (&of->mutex){+.+.}-{4:4}: [ 625.645451][T11268] lock_acquire+0x1d1/0x380 [ 625.650454][T11268] __mutex_lock+0x1a4/0x1bd0 [ 625.655543][T11268] kernfs_seq_start+0x4f/0x2a0 [ 625.660800][T11268] traverse.part.0.constprop.0+0xaf/0x650 [ 625.667015][T11268] seq_read_iter+0x93f/0x1270 [ 625.672194][T11268] kernfs_fop_read_iter+0x46c/0x610 [ 625.677889][T11268] vfs_read+0x82e/0xb40 [ 625.682542][T11268] ksys_read+0x12a/0x250 [ 625.687278][T11268] do_syscall_64+0x123/0x790 [ 625.692363][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.698752][T11268] [ 625.698752][T11268] -> #2 (&p->lock){+.+.}-{4:4}: [ 625.705758][T11268] lock_acquire+0x1d1/0x380 [ 625.710774][T11268] __mutex_lock+0x1a4/0x1bd0 [ 625.715866][T11268] seq_read_iter+0xe1/0x1270 [ 625.720960][T11268] kernfs_fop_read_iter+0x46c/0x610 [ 625.726680][T11268] __kernel_read+0x397/0xad0 [ 625.731768][T11268] integrity_kernel_read+0x7e/0xb0 [ 625.737376][T11268] ima_calc_file_hash_tfm+0x25e/0x350 [ 625.743257][T11268] ima_calc_file_hash+0x1e3/0x380 [ 625.748776][T11268] ima_collect_measurement+0x94f/0xb30 [ 625.754731][T11268] process_measurement+0xdfe/0x2350 [ 625.760438][T11268] ima_file_check+0xc3/0x110 [ 625.765525][T11268] security_file_post_open+0xc4/0x210 [ 625.771391][T11268] path_openat+0x5cd/0x2440 [ 625.776390][T11268] do_file_open+0x20e/0x430 [ 625.781391][T11268] do_sys_openat2+0x10f/0x1e0 [ 625.786564][T11268] __x64_sys_openat+0x12d/0x210 [ 625.791909][T11268] do_syscall_64+0x123/0x790 [ 625.797012][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.803400][T11268] [ 625.803400][T11268] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 625.811970][T11268] lock_acquire+0x1d1/0x380 [ 625.816977][T11268] __mutex_lock+0x1a4/0x1bd0 [ 625.822086][T11268] process_measurement+0x5ab/0x2350 [ 625.827787][T11268] ima_file_check+0xc3/0x110 [ 625.832892][T11268] security_file_post_open+0xc4/0x210 [ 625.838770][T11268] path_openat+0x5cd/0x2440 [ 625.843775][T11268] do_file_open+0x20e/0x430 [ 625.848772][T11268] file_open_name+0x1c3/0x3e0 [ 625.853947][T11268] filp_open+0x2e/0x50 [ 625.858518][T11268] kernel_read_file_from_path_initns+0xec/0x240 [ 625.865258][T11268] _request_firmware+0x733/0x13c0 [ 625.870776][T11268] request_firmware+0x35/0x50 [ 625.875954][T11268] reg_reload_regdb+0x85/0x460 [ 625.881211][T11268] genl_family_rcv_msg_doit+0x214/0x300 [ 625.887251][T11268] genl_rcv_msg+0x560/0x800 [ 625.892257][T11268] netlink_rcv_skb+0x159/0x420 [ 625.897513][T11268] genl_rcv+0x28/0x40 [ 625.901996][T11268] netlink_unicast+0x585/0x850 [ 625.907254][T11268] netlink_sendmsg+0x8b0/0xda0 [ 625.912522][T11268] ____sys_sendmsg+0xa4d/0xbe0 [ 625.917784][T11268] ___sys_sendmsg+0x190/0x1e0 [ 625.922957][T11268] __sys_sendmsg+0x160/0x210 [ 625.928043][T11268] do_syscall_64+0x123/0x790 [ 625.933140][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.939541][T11268] [ 625.939541][T11268] -> #0 (cb_lock){++++}-{4:4}: [ 625.946480][T11268] check_prev_add+0xeb/0xe60 [ 625.951648][T11268] __lock_acquire+0x1528/0x1f40 [ 625.957001][T11268] lock_acquire+0x1d1/0x380 [ 625.961996][T11268] down_read+0x99/0x4c0 [ 625.966651][T11268] genl_rcv+0x19/0x40 [ 625.971131][T11268] netlink_unicast+0x585/0x850 [ 625.976391][T11268] netlink_sendmsg+0x8b0/0xda0 [ 625.981663][T11268] sock_sendmsg+0x394/0x410 [ 625.986663][T11268] splice_to_socket+0xb3c/0x11a0 [ 625.992095][T11268] do_splice+0x109c/0x1fa0 [ 625.997007][T11268] __do_splice+0x33b/0x370 [ 626.001919][T11268] __x64_sys_splice+0x187/0x250 [ 626.007263][T11268] do_syscall_64+0x123/0x790 [ 626.012359][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.018745][T11268] [ 626.018745][T11268] other info that might help us debug this: [ 626.018745][T11268] [ 626.028956][T11268] Chain exists of: [ 626.028956][T11268] cb_lock --> &sbi->pipe_mutex --> &pipe->mutex [ 626.028956][T11268] [ 626.041085][T11268] Possible unsafe locking scenario: [ 626.041085][T11268] [ 626.048505][T11268] CPU0 CPU1 [ 626.053838][T11268] ---- ---- [ 626.059170][T11268] lock(&pipe->mutex); [ 626.063298][T11268] lock(&sbi->pipe_mutex); [ 626.070299][T11268] lock(&pipe->mutex); [ 626.076946][T11268] rlock(cb_lock); [ 626.080733][T11268] [ 626.080733][T11268] *** DEADLOCK *** [ 626.080733][T11268] [ 626.088846][T11268] locks held by syz.4.1617/11268: 1, last CPU#0: [ 626.095141][T11268] #0: ffff888058644c60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 626.103814][T11268] [ 626.103814][T11268] stack backtrace: [ 626.109677][T11268] CPU: 0 UID: 0 PID: 11268 Comm: syz.4.1617 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.120583][T11268] Tainted: [L]=SOFTLOCKUP [ 626.124892][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 626.134931][T11268] Call Trace: [ 626.138186][T11268] [ 626.141091][T11268] dump_stack_lvl+0x100/0x190 [ 626.145746][T11268] print_circular_bug.cold+0x178/0x1be [ 626.151191][T11268] check_noncircular+0x146/0x160 [ 626.156099][T11268] check_prev_add+0xeb/0xe60 [ 626.160660][T11268] __lock_acquire+0x1528/0x1f40 [ 626.165483][T11268] lock_acquire+0x1d1/0x380 [ 626.169962][T11268] ? genl_rcv+0x19/0x40 [ 626.174111][T11268] ? __pfx___might_resched+0x10/0x10 [ 626.179376][T11268] down_read+0x99/0x4c0 [ 626.183518][T11268] ? genl_rcv+0x19/0x40 [ 626.187646][T11268] ? __pfx_down_read+0x10/0x10 [ 626.192395][T11268] ? netlink_deliver_tap+0x1ae/0xcc0 [ 626.197658][T11268] genl_rcv+0x19/0x40 [ 626.201611][T11268] netlink_unicast+0x585/0x850 [ 626.206351][T11268] ? __pfx_netlink_unicast+0x10/0x10 [ 626.211606][T11268] netlink_sendmsg+0x8b0/0xda0 [ 626.216347][T11268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.221606][T11268] ? selinux_socket_sendmsg+0x198/0x2f0 [ 626.227125][T11268] sock_sendmsg+0x394/0x410 [ 626.231609][T11268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.236866][T11268] ? __pfx_sock_sendmsg+0x10/0x10 [ 626.241880][T11268] ? avc_has_perm_noaudit+0x56/0x3b0 [ 626.247148][T11268] splice_to_socket+0xb3c/0x11a0 [ 626.252075][T11268] ? __pfx_splice_to_socket+0x10/0x10 [ 626.257451][T11268] ? inode_has_perm+0x16d/0x1d0 [ 626.262282][T11268] ? bpf_lsm_file_permission+0x9/0x10 [ 626.267629][T11268] ? security_file_permission+0x76/0x210 [ 626.273292][T11268] ? __pfx_splice_to_socket+0x10/0x10 [ 626.278664][T11268] do_splice+0x109c/0x1fa0 [ 626.283071][T11268] ? __lock_acquire+0x5c0/0x1f40 [ 626.287993][T11268] ? __pfx_do_splice+0x10/0x10 [ 626.292732][T11268] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 626.298175][T11268] ? __fget_files+0x34/0x3d0 [ 626.302739][T11268] ? find_held_lock+0x2b/0x80 [ 626.307401][T11268] __do_splice+0x33b/0x370 [ 626.311801][T11268] ? __pfx___do_splice+0x10/0x10 [ 626.316722][T11268] __x64_sys_splice+0x187/0x250 [ 626.321572][T11268] do_syscall_64+0x123/0x790 [ 626.326154][T11268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.332019][T11268] RIP: 0033:0x7fd6c119e159 [ 626.336428][T11268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.356007][T11268] RSP: 002b:00007fd6c2114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 626.364401][T11268] RAX: ffffffffffffffda RBX: 00007fd6c1425fa0 RCX: 00007fd6c119e159 [ 626.372359][T11268] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 626.380301][T11268] RBP: 00007fd6c123503b R08: 0000000000003000 R09: 100000000000000d [ 626.388246][T11268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.396203][T11268] R13: 00007fd6c1426038 R14: 00007fd6c1425fa0 R15: 00007ffd102c0c38 [ 626.404151][T11268] [ 626.502379][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1617'.