last executing test programs: 6m58.278183686s ago: executing program 2 (id=215): r0 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000003140)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000003180)=0x20500001) 6m57.657744951s ago: executing program 2 (id=218): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005ec0)='/sys/power/resume', 0x141a82, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 6m57.441426323s ago: executing program 2 (id=221): r0 = fsopen(&(0x7f0000002fc0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000003000)='.\x00', 0x60000, 0x0) fcntl$notify(r2, 0x402, 0x1a) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000007040)='.\x00', 0x0, 0x11c) getdents64(r3, &(0x7f0000007080)=""/4107, 0x100b) 6m57.132745718s ago: executing program 2 (id=228): r0 = fsopen(&(0x7f0000000040)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6m56.963732389s ago: executing program 2 (id=232): r0 = openat(0xffffffffffffff9c, &(0x7f0000009f40)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000009f80)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) 6m56.748917614s ago: executing program 2 (id=237): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="273eeb", 0x3}], 0x1) 6m54.816801196s ago: executing program 3 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='sys_mnt\x00', 0x1f7) mount(0x0, &(0x7f00000001c0)='sys_mnt\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000e00)="3305c4d588", 0x5) 6m54.64748974s ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./mydev\x00', 0x1ef) mount(0x0, &(0x7f00000008c0)='./mydev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./mydev/ttyS0\x00', 0x2, 0x100) write(r0, 0x0, 0x0) 6m54.426848049s ago: executing program 3 (id=264): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x10001, 0x12) 6m53.895495668s ago: executing program 3 (id=268): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000180)='.\x00', 0x0, 0x8b7840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x3a) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000680)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bpf(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x84000, 0x0) 6m53.637572298s ago: executing program 3 (id=272): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc00, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x6000000d}) poll(&(0x7f0000000200)=[{r1}], 0x1, 0x80) 6m52.784886398s ago: executing program 3 (id=275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f0000001140)='GPL\x00', 0x4, 0x436, &(0x7f0000001180)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)="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", 0x1c8}], 0x1}}], 0x1, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001500)={r0, r1}) write(r2, &(0x7f0000000140)="e44afede", 0x4) 6m51.914124263s ago: executing program 32 (id=275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f0000001140)='GPL\x00', 0x4, 0x436, &(0x7f0000001180)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)="ee2ab887a690d3a8fa0dc3754ef592d132fbe23cb526d672da6e3413c8454052cd51a4a9ef5f0bf90a82617a61317fa95d4b7f003b76475839d8e43395d03077c7b6b15a1cd22deb539ff7ad0db68405e937073c0308782d101a01fb732dde6484d60b9e06471f6904d856df53313191d97a909c26734932e6dbcb092acbfff6aa2805f33355064dbdbd83224dcff90c75fdbc6cffeb2a8e1bc76f1c3577910b03f504b13182e7f3877b4a5dcda67ee1902359f564842535db104e0c42dc9031b8f284d0883e6c14add50042261c824d84aa406e19ea8cbbdf485d575b91599c590c12f9b1545c43713fcd328d870bb8f60186f98b1478b471de88167d2b9dc225f5074cd3145ff9e40a4919d05f72b95d4fd13a0baeef08cdecda5d1ade74d091fb834e330f2bc48c605d6490dc6f62ceec0995b2999b81814a89d36c7fc4945090d8cc711eb87a6091306ea8cd415a9d40a8d575f5ee8b6aa0a8c307a4950ebb67873d047e93b0ad9a3766db053171dd622d408e24b5b593912f5eb903825da730d4f05e42b203cb32c7e52c310723f33e5e3b9b2ba9b6c4139903c7a72aea133efba4c3bebf037ddf78a4dbd52b1e0e2fc53f2404937a61001860f0804abc37983250e6106b63", 0x1c8}], 0x1}}], 0x1, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001500)={r0, r1}) write(r2, &(0x7f0000000140)="e44afede", 0x4) 6m41.657593993s ago: executing program 33 (id=237): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="273eeb", 0x3}], 0x1) 14.728311089s ago: executing program 1 (id=1262): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3c1, 0x0, 0x14a, 0xa}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10004, 0xef86, 0x7fa, 0x4, "b767a00000000000ffffffff00000000008000", 0x100, 0x200108}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r5 = memfd_create(&(0x7f0000000e00)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) 7.741316787s ago: executing program 1 (id=1274): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000700), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000740)={0x0}) 6.184368814s ago: executing program 5 (id=1281): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff, 0x1f2}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(r2, 0x0, 0x22, &(0x7f0000000140)=0x28262df73c041336, 0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0xfffffffffffffffd}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000440)=[@increfs, @request_freeze={0x400c6313, 0x0, 0x1}], 0x100, 0x0, &(0x7f0000000640)=""/256}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000880)={0x2020}, 0x2020) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) 5.86150953s ago: executing program 5 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000400), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000440)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume', 0xa82, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x143102) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)="5813218483cbcdc39e", 0x9}, {0x0}, {&(0x7f00000001c0)="77c9e6bbf905ba9a6bed94332d7a6ee3e4d284692e4fbb0fe7dd536e2b6ffed8d63508b65295a31b8e7d86153b40a595d315a0b165ea240a178db256f652a153", 0x40}, {&(0x7f0000000200)="2f9bde2854fc57d0c9aa969db4e4aaa721a4da3f9eeb5d9cbdbb4edacb195b020fb45bc2473c00200480104760786b1e30058108bf96ef1cd1312b972fc824d2b4514506dc27d0826415ee2b683280cc74f1dc342865ecae0392437b12949ac5203d7038ed2d00ce6d3d23945e42b91331176847ae1e4d867bd79bf3122a153eaf2c722b389ecb3a3374b87bb2bf3b6dd2fde1aaf9f79def889a913245475bd9326dccacb53a", 0xa6}, {&(0x7f00000002c0)="d5dff1886b65564a41cc7ceba4504d3b995fc537e758b8bc5549a9c4103b25670786dbe26ddc220cb73b3ed13ac1b68e902be341d967acbfb2d4a7165cc6941d5a9933e32ca60e47493d6d4079518fccd9d9e23d07485121dc8a28b76d1a60cc1d86590b7db5130bb5d7400f243fab93383b4e045340c1ce9ee7d56dbdacddf3b638811da01b81ad3225b984d1620f13a58d0a520b67408ca4e0ba9103283746e37ec8c1ecd7f3bfe14ac22c10793cdbb11859deca3ac3a9f90466b940020e0996f87f1ed182f03a8c5966a368ed088b8d17a332fbdefe64903c9660f0ef4992c4aae41042842ec1e4e5900363d7ce00e8be", 0xf2}, {&(0x7f00000003c0)="3c99fd2071fc26cd01", 0x9}], 0x6) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x2000, &(0x7f0000000700)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000740)='./file0\x00') setresuid(0x0, 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r4, 0x0, 0x41000004, &(0x7f00000007c0)) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900010073797a310000000014000000020a0104000000000000000007000000540000001f0a030000000000000000000300000008000340000000000900010073797a3100000000090002"], 0xb0}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 5.675035185s ago: executing program 6 (id=1284): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000580), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000005c0)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40080, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x63) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)=""/188, 0xbc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000300)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e4", 0x1b) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000380)={0x4000000, 0x0, 0x0, 0x0, 0x2}) openat2$dir(0xffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) ioctl$SYNC_IOC_MERGE(r1, 0x40103e05, &(0x7f0000000640)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56"}) 5.615291175s ago: executing program 5 (id=1285): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./cgrp\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp/cgroup.subtree_control\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, &(0x7f0000000200)='+cpuset', 0x7) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cgrp/child\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp/child/cpuset.cpus\x00', 0x0, 0x0) write(r3, &(0x7f0000000500)='1\n\x00', 0x2) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgrp/child/cpuset.cpus.partition\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000004c0), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x800) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000640)=0x1, 0x4) connect$inet(r7, &(0x7f0000000680)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r7, &(0x7f00000006c0)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 4.272547194s ago: executing program 6 (id=1286): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900020073797a300000000104000000000000000c000300686173683a6970001400078005001500ff000000080011400000000c050005000a0000000500010006000000"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x74, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040004}, 0x4008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000005c0)={{0xeeedcffe, 0xdddd0000, 0xd, 0x33, 0x9, 0xf9, 0x58, 0x7, 0x6, 0x98, 0xe, 0x3}, {0xeeef0000, 0xf000, 0x0, 0x3, 0xc, 0x5, 0xce, 0x2, 0x9, 0xc5, 0x8c, 0xff}, {0xb000, 0x363c021c7cf6e454, 0xc, 0x2, 0x7, 0xa, 0xc1, 0x5, 0xe, 0x5, 0x0, 0x6}, {0x30000, 0x2, 0x4, 0xf, 0x7, 0x3, 0xe9, 0x9, 0x8, 0x4, 0x5, 0x80}, {0x54000, 0xdddd1000, 0x3, 0x8, 0x3, 0x18, 0xf9, 0x5, 0x6, 0xff, 0x2, 0x2}, {0x4000, 0xffff1000, 0x10, 0x7f, 0x6, 0x5, 0x4, 0x94, 0x2, 0x8, 0x8, 0x6}, {0x58000, 0xffc, 0x1f, 0x2, 0x5, 0x6, 0x7f, 0x4, 0xa, 0x9, 0x89, 0x56}, {0x5ffe, 0x58000, 0x0, 0x4, 0x3, 0xd, 0x1, 0x0, 0x0, 0x8, 0x9, 0x95}, {0xb000, 0x10}, {0xfec00000, 0x802}, 0x20, 0x0, 0x9000, 0x2008, 0x6, 0x0, 0x3000, [0x6, 0x2b9, 0x8000000000000000, 0xa]}) ioctl$TCSETSW2(r8, 0x80047456, 0xfffffffffffffffe) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x9, 0xfff1}, {0x4}, {0x3, 0x8}}, [""]}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0xff, 0x9, 0x0, 0x4}, 0x20) 4.104698954s ago: executing program 0 (id=1287): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x33, 0x0, @void}, 0x10) r3 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') prctl$PR_SET_MM(0xd, 0x0, &(0x7f0000004000/0x3000)=nil) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f00000006c0)={'wlan1\x00', @random="19ff00ff0300"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x7) ftruncate(0xffffffffffffffff, 0xf4240) mkdir(&(0x7f0000000740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config\x00', &(0x7f00000007c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000840)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r4, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000500)='./file0\x00', 0x8fff5) io_uring_setup(0x7, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r6, 0x58, &(0x7f0000000640)}, 0x10) r7 = syz_io_uring_setup(0x34d1, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x0, 0xad}, &(0x7f00000002c0)=0x0, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r1, r9, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2590}}) io_uring_enter(r7, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) 3.715636502s ago: executing program 6 (id=1288): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @multicast1}, 0x10) syz_usb_connect(0x0, 0x32, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x40) mount(0x0, &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/gnss0\x00', 0x1001, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r2, 0x0, 0x52) 3.684530174s ago: executing program 0 (id=1289): fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x1) (async) r0 = fsopen(&(0x7f0000000080)='9p\x00', 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) (async) r2 = syz_ublk_setup_io_uring(0x3c, &(0x7f0000000100)={0x0, 0xda8b, 0x8, 0x1, 0x1d8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r4 = io_uring_setup(0xb98, &(0x7f0000000240)={0x0, 0x22e8, 0x0, 0x3, 0x2dd, 0x0, r2}) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000002c0)='\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x124, 0x124, 0xa, [@volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @var={0x8, 0x0, 0x0, 0xe, 0x3}, @const, @typedef={0x5, 0x0, 0x0, 0x8, 0x4}, @ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7fffffff}}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @func={0xb, 0x0, 0x0, 0xc, 0x1}, @struct={0xf, 0x3, 0x0, 0x4, 0x0, 0xf33, [{0x7, 0x3, 0x2}, {0x5, 0x2, 0x2}, {0x9, 0x2}]}, @enum64={0xc, 0xa, 0x0, 0x13, 0x1, 0x0, [{0xb, 0x5, 0xc}, {0xe, 0x10, 0x3}, {0x6, 0x1, 0xc1d0}, {0xd, 0x7ff, 0xdf}, {0x5, 0x7, 0x7}, {0x5, 0xd900, 0x81}, {0x1, 0x3, 0x4}, {0xc, 0x3, 0x800}, {0x9, 0x40, 0x2}, {0xe, 0x1000, 0xb8b6}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x61, 0x0, 0x4f, 0x30, 0x2e]}}, &(0x7f00000004c0)=""/143, 0x146, 0x8f, 0x1, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r5, 0x20, &(0x7f0000000780)={&(0x7f00000005c0)=""/201, 0xc9, 0x0, &(0x7f00000006c0)=""/143, 0x8f}}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000009, 0x4010, r5, 0x84006000) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000800)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) (rerun: 64) r8 = fsmount(r7, 0x1, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000840)={0x0, 0xa6, "a273b32a1a1046417bf17dc47528c683047c7bfa9903aaadaf835ca25d2368bdff09be8cf4fe58b9bca59167fc9b605ddabaddd72d120b6a0c0b1b3f2211aaf967180010d5311a8b3fd945132e2c6df5a2869b7f123a6e57809bb95ffbd57997d71f04a19ea48b550205b7cc9ff438f4161a0daa45f97bda0b71940976774536ddc113ee8786616fd41ddc5dafeee03fe77f3941aafc86569a0877df26c2abd5f0c98da14dba"}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x810c5701, &(0x7f0000000900)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a40)=0x0) fstat(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r7, &(0x7f0000000b00)={0x6d, 0x7d, 0x2, {{0x0, 0x57, 0x3d, 0xfffffff7, {0x8, 0x3, 0x3}, 0x100000, 0x4, 0x5, 0x5, 0x1, '\x00', 0x23, 'system_u:object_r:qemu_device_t:s0\x00'}, 0x1, '\x00', r9, 0xffffffffffffffff, r10}}, 0x6d) (async, rerun: 64) ioctl$PIO_UNISCRNMAP(r7, 0x4b6a, &(0x7f0000000b80)="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") (async, rerun: 64) chdir(&(0x7f0000001b80)='./file0\x00') (async) read$FUSE(r7, &(0x7f0000001bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r8, &(0x7f0000003c00)={0x118, 0x0, r11, [{0x1, 0x9, 0x23, 0x7f, 'system_u:object_r:qemu_device_t:s0\x00'}, {0x2, 0x1, 0x1, 0x2, '('}, {0x6, 0x4c0, 0x11, 0x4, 'security.selinux\x00'}, {0x6, 0x9, 0x3, 0x6, '9p\x00'}, {0x3, 0x0, 0x1, 0x4, '\x00'}, {0x2, 0x7, 0x0, 0x6}, {0x5, 0x3, 0x1, 0x10, '-'}]}, 0x118) (async, rerun: 32) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003d40), 0x401, 0x0) (rerun: 32) ioctl$UI_SET_SNDBIT(r12, 0x4004556a, 0x2) (async) r13 = syz_io_uring_complete(r3, 0x0) file_setattr(r13, &(0x7f0000003d80)='./file0\x00', &(0x7f0000003dc0)={0x108, 0x1, 0x4, 0x9, 0x5}, 0x18, 0x800) (async) keyctl$session_to_parent(0x12) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000003e00)=r13, 0x4) (async) chdir(&(0x7f0000003e40)='./file1\x00') (async) pwrite64(0xffffffffffffffff, &(0x7f0000003ec0)="6d80641114762fe145e83434a389cbcb70b438426df9850e2360ed65d53827567272036e9d1a6d0e6c", 0x29, 0x3) 3.453433839s ago: executing program 4 (id=1290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) 3.390327121s ago: executing program 0 (id=1291): syz_emit_ethernet(0x23a, &(0x7f0000000780)={@empty, @empty, @val={@void}, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x7, 0x228, 0x68, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, {[@timestamp_addr={0x44, 0xc, 0x71, 0x1, 0x5, [{@multicast1, 0x10}]}, @rr={0x7, 0x3, 0xa6}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x3d, 0x3, [0x5], "6dd64083f31ecb5eeb6165e3632592f948e3b70e9529ea01a4d3f9ea4276f9aba1a3aa49eab5f90929df9fb5cd6404dcc05773e063d8af504e80ff005d"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7, 0xfffc, 0x7], "a48bbb5d62810a12cf9ddefdf14521b965b0d42fd3fe6ed4a659d910964df7a574566cb4a8ca66b863ccab4828ae5a005f8c6560598a1072ada9d5d67cfb5efd1b00dd6e121c54937e13b74a8d9ed75c812c35bdde65ac249b134485c89ea002af806717a5a3ca5d5cd1cd6d38c987afd64e482446946f43dccd03d145ca"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "11ab0064268e9945a3e0eb2ffa55cc63e64cd1476e495a7547e41e14490bdfe8a9230a3bb00309687eea2d45d44f287431ff79dd92dba88dc632a7c4c592bc224b8a690a241f71c492fb8d2d7a5e9787a22f05ad07aa7b9a915488d70b7ed44e8ad1f1a35457235cbec632b6c69dad2b5234b3e8567946a2d8eb68490b168b6be159566e345848f26cb5e36c90666b8f22f4699910de34a6c18b4d32b8bf39f7dc75bcee2409d5adef8b7a1c97a4cfa7"}, {0x8, 0x88be, 0x0, {{0x4, 0x1, 0xd, 0x3, 0x1, 0x0, 0x2, 0x9}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x0, 0x2, 0x1, 0x1, 0x1, 0x9}, 0x2, {0x0, 0xfd5, 0x3, 0x9, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x1, "c0762cb57526c73e89ae1878d2d3bc21c02e45206f0ffa4679b966147bcdb85b3bc6f37adbaa1b441851db1448a7a26a6935b46e3417364d9f0613cc5c5ca0c74281253c7629e1011aea4c22d6"}}}}}}, 0x0) r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff00070581024000000705010240"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff3a, &(0x7f0000000480)="04000000") 3.389262373s ago: executing program 1 (id=1292): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 3.378018411s ago: executing program 5 (id=1293): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040c41090ea8000000000010902240001000000000904000001030000000921000000012207000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f00000001c0)={0x40, 0x22, 0x2, {0x2, 0x7}}, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00221200000047fb7c5e082788d4a3121bcfdeb33c46732ca9b2e6090c5da3edf72d0340d29056fb034fc051c722b1c145e49619ab06c087bdfc9c09e3b74f07ccec13f24b3b6dc73c91f4d27ea4ab5d21d09344238414b0c5e1ca09768c607226582a78b4501baf76cf753572f87215b74e0907a7ae2ea26ffb09eed5413900a6"], 0x0}, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x34, "b4ddd4ef3ebe80f6827bf9eaef07600f5db8d59746ddf64b14b9d6e2d50f17ec5cf69da3f0e741138c07a8651f0f4e360186de54"}, 0x0}) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r3) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 3.243402195s ago: executing program 1 (id=1294): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03030071bd7000fedbdf253000"/26], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x400c0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi1\x00', 0x800, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000600)={0x1, 0x1, 0x0, 'queue1\x00', 0x10080005}) socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x2000400) pselect6(0x40, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000000000, 0x7e6b, 0x0, 0x2}, 0x0, &(0x7f00000001c0)={0x1f, 0x0, 0x1800, 0x0, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffa}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="bcea"]) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000200)=0x1000) r6 = syz_open_dev$evdev(&(0x7f0000000300), 0x40, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000000c0)={"2370491d", 0x0, 0x5, 0x2, 0x101, 0x8, "000064440000001503fe00", '\x00', "000600", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000f40)={0xc4, 0x0, &(0x7f00000011c0)=[@register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001100)={@ptr={0x70742a85, 0x1, &(0x7f0000001040)=""/142, 0x8e, 0x1, 0x5}, @fda={0x66646185, 0x8, 0x2, 0x2b}, @fda={0x66646185, 0x5, 0x2, 0x2d}}, &(0x7f0000001180)={0x0, 0x28, 0x48}}, 0x400}, @freeze_done={0x40086315, 0x2}, @release, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r6, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2, 0x0, 0x2}, @fd={0x66642a85, 0x0, r6, 0x0, 0x3}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x3, 0x3}], 0x86c, 0x0, &(0x7f00000006c0)=""/2156}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000340)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) 3.061776537s ago: executing program 4 (id=1295): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r1) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (fail_nth: 8) 2.893834425s ago: executing program 4 (id=1296): close(0x3) r0 = syz_open_dev$rtc(&(0x7f0000000100), 0xffffffffffffff00, 0x8800) ioctl$RTC_PIE_ON(r0, 0x40187013) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x6, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 2.37727049s ago: executing program 6 (id=1297): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x23, 0x4}, &(0x7f0000000080)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) semop(0x0, &(0x7f0000000180)=[{}], 0x1) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000280)=@ccm_128={{0x303, 0x38}, "0baee79180b6e078", "73b59657269ef929ee540a8a0a86c5d0", '\x00', "404574dd3a00"}, 0x28) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 2.344900294s ago: executing program 4 (id=1298): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14) sendmsg$can_bcm(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x1d, r3}, 0x10, &(0x7f00000005c0)={&(0x7f0000000540)={0x5, 0x18e, 0xfffff943, {0x77359400}, {0x0, 0xea60}, {0x1, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "85ed76b14aa0072e"}}, 0x48}}, 0x80) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000480)="21000000470010aaaaaaaaaa0000000000000000000000000000000000000000000000000000000000000000000300"/76, 0x4d) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0xf}, @remote}}}], 0x20}, 0x240000e0) 1.833504188s ago: executing program 1 (id=1299): ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000b80), 0x8000) (fail_nth: 8) 1.832919126s ago: executing program 6 (id=1300): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_emit_ethernet(0xfc0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/kallsyms\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) pread64(r1, &(0x7f00000038c0)=""/103, 0x67, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x130) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000080)) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) 1.831390152s ago: executing program 4 (id=1301): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000062c0)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) write$FUSE_NOTIFY_DELETE(r0, &(0x7f000000a580)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) 918.142547ms ago: executing program 6 (id=1302): ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001000000", 0x24) openat$mice(0xffffffffffffff9c, &(0x7f0000000b80), 0x8000) 765.009559ms ago: executing program 4 (id=1303): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000700), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000740)={&(0x7f0000000780)=[{0x1e, 0x8801, 0x0, 0x0}], 0x1}) 480.279347ms ago: executing program 0 (id=1304): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 281.001409ms ago: executing program 0 (id=1305): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000028c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002980)=ANY=[@ANYBLOB="54000000100001000000", @ANYRES32=r2, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e001000000010"], 0x54}}, 0x0) 256.8583ms ago: executing program 5 (id=1306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4841}, 0x24000004) 116.51281ms ago: executing program 0 (id=1307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa6) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000198c0)=""/4096, 0x5}], 0x1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019500)=0x7) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f000001a8c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f000001a900)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f000001a940)='./rpc_pipe\x00', &(0x7f000001a980)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f000001a9c0)=@filename='127.0.0.1:/test\x00', &(0x7f000001aa00)='./mnt\x00', &(0x7f000001aa40)='nfs\x00', 0x0, &(0x7f000001aa80)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000001ab00)={'ip6gretap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f000001ab40)={0xa0000001}) setxattr$security_ima(0x0, &(0x7f000001ab80), &(0x7f000001abc0)=@v2={0x5, 0x3, 0xd, 0x8, 0x78, "a92c1fd1ffd2bf69fdcf69796f6a5c2c54184ac8e34d42e71c851a2a05240d77f03b138ee746c2245e3d0f2dfe70752fcd408ce566ddf3942a20590cec5ca74872eb062c41f6f03a098be5378600fa6cb1e46146669ac1c73621e1f0da6ed7c79910fbeb8ba774c0703ecc025563f8febfc88d607509de57"}, 0x81, 0x3) ppoll(&(0x7f000001ac80)=[{0xffffffffffffffff, 0x2000}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f000001acc0)={0x6, 0x3, &(0x7f000001ad80)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], 0x0, 0x5, 0xe2, &(0x7f000001adc0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f000001aec0), 0x10}, 0x94) mount(&(0x7f000001af00)=@filename='127.0.0.1:/test\x00', &(0x7f000001af40)='./mnt\x00', &(0x7f000001af80)='nfs4\x00', 0x0, &(0x7f000001afc0)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') 0s ago: executing program 5 (id=1308): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x40) mount(0x0, &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/gnss0\x00', 0x1001, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r1, 0x0, 0x52) kernel console output (not intermixed with test programs): T5791] usb 7-1: SerialNumber: syz [ 431.952570][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 432.101301][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 432.101790][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.102638][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.102655][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.102668][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.102690][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.105507][ T9] usb 2-1: config 0 descriptor?? [ 433.165827][ C0] usb 7-1: received EP1 urb->status = -71 [ 433.189431][ T9] hid_parser_main: 1 callbacks suppressed [ 433.205612][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.205916][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.205933][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.205947][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.205961][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.205975][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.205989][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.206003][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.206017][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.206031][ T9] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 433.211178][ T5725] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 433.259659][ T5791] usb 7-1: unable to init card! (ret=-19) [ 433.370078][ T5791] usb 7-1: USB disconnect, device number 16 [ 433.377602][ T5725] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 433.378392][ T5725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 433.378408][ T5725] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 433.378428][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.426883][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0018/input/input40 [ 433.507693][ T9] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 433.532767][ T9] usb 2-1: USB disconnect, device number 24 [ 433.666533][ T9463] fido_id[9463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 434.081326][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 434.231253][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 434.231871][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 434.235128][ T9] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.235160][ T9] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.235173][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 434.235191][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.279334][ T9] usb 7-1: config 0 descriptor?? [ 434.287901][ T9474] jffs2: notice: (9474) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 435.303539][ T9474] lo speed is unknown, defaulting to 1000 [ 435.513226][ T5725] usb 1-1: USB disconnect, device number 22 [ 437.069894][ T31] audit: type=1400 audit(1791741300.438:697): avc: denied { ioctl } for pid=9486 comm="syz.4.1009" path="socket:[28233]" dev="sockfs" ino=28233 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 437.867293][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.867579][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.997165][ T9468] ovs0: entered promiscuous mode [ 438.007411][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.007670][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.104354][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 438.104416][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 438.140619][ T9] usb 7-1: USB disconnect, device number 17 [ 439.754166][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.754203][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.840911][ T9502] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.759102][ T5725] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 441.880221][ T9502] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.912837][ T5725] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 441.913609][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.913644][ T5725] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 441.915242][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.915257][ T5725] usb 1-1: Product: syz [ 441.915265][ T5725] usb 1-1: Manufacturer: syz [ 441.915273][ T5725] usb 1-1: SerialNumber: syz [ 442.168084][ T9502] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.266736][ T9517] jffs2: notice: (9517) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 443.286717][ T9502] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.340875][ T9520] lo speed is unknown, defaulting to 1000 [ 443.776314][ C0] usb 1-1: received EP1 urb->status = -71 [ 444.588482][ T5725] usb 1-1: unable to init card! (ret=-19) [ 444.597636][ T5725] usb 1-1: USB disconnect, device number 23 [ 444.866974][ T6003] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.951458][ T6003] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.035823][ T252] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.111565][ T252] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.670169][ T9538] FAULT_INJECTION: forcing a failure. [ 446.670169][ T9538] name failslab, interval 1, probability 0, space 0, times 0 [ 446.670199][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.6.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.670215][ T9538] Tainted: [L]=SOFTLOCKUP [ 446.670219][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 446.670227][ T9538] Call Trace: [ 446.670231][ T9538] [ 446.670236][ T9538] dump_stack_lvl+0x100/0x190 [ 446.670260][ T9538] should_fail_ex.cold+0x5/0xa [ 446.670277][ T9538] should_failslab+0xc2/0x120 [ 446.670295][ T9538] __kmalloc_cache_node_noprof+0x94/0x720 [ 446.670312][ T9538] ? __get_vm_area_node+0x124/0x350 [ 446.670331][ T9538] __get_vm_area_node+0x124/0x350 [ 446.670350][ T9538] __vmalloc_node_range_noprof+0x268/0x1420 [ 446.670368][ T9538] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 446.670387][ T9538] ? up_write+0x2dc/0x5b0 [ 446.670404][ T9538] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 446.670419][ T9538] ? lock_acquire+0x1d1/0x380 [ 446.670433][ T9538] ? find_held_lock+0x2b/0x80 [ 446.670450][ T9538] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 446.670466][ T9538] ? avc_has_perm_noaudit+0x11e/0x470 [ 446.670482][ T9538] ? avc_has_perm_noaudit+0x145/0x470 [ 446.670495][ T9538] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 446.670510][ T9538] __vmalloc_node_noprof+0xad/0xf0 [ 446.670527][ T9538] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 446.670544][ T9538] __vmalloc_noprof+0xa3/0x120 [ 446.670561][ T9538] ? __pfx___vmalloc_noprof+0x10/0x10 [ 446.670579][ T9538] ? rcu_is_watching+0x13/0xc0 [ 446.670596][ T9538] ? cap_capable+0x107/0x430 [ 446.670610][ T9538] bpf_prog_alloc_no_stats+0x59/0x690 [ 446.670625][ T9538] ? security_capable+0x80/0x260 [ 446.670640][ T9538] bpf_prog_alloc+0x3b/0x200 [ 446.670654][ T9538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.670670][ T9538] bpf_prog_load+0x49e/0x2ab0 [ 446.670691][ T9538] ? __pfx_bpf_prog_load+0x10/0x10 [ 446.670721][ T9538] __sys_bpf+0x1f46/0x4a30 [ 446.670738][ T9538] ? __pfx___sys_bpf+0x10/0x10 [ 446.670750][ T9538] ? find_held_lock+0x2b/0x80 [ 446.670766][ T9538] ? get_pid_task+0xfc/0x250 [ 446.670781][ T9538] ? get_pid_task+0xfc/0x250 [ 446.670801][ T9538] ? find_held_lock+0x2b/0x80 [ 446.670821][ T9538] ? rcu_read_lock_any_held+0x6a/0x90 [ 446.670831][ T9538] ? find_held_lock+0x2b/0x80 [ 446.670847][ T9538] ? ksys_write+0x190/0x250 [ 446.670861][ T9538] ? ksys_write+0x190/0x250 [ 446.670874][ T9538] ? lock_acquire+0x1d1/0x380 [ 446.670897][ T9538] ? fput+0x7c/0x100 [ 446.670913][ T9538] ? ksys_write+0x1ac/0x250 [ 446.670928][ T9538] ? __x64_sys_bpf+0xce/0x140 [ 446.670940][ T9538] __x64_sys_bpf+0xce/0x140 [ 446.670953][ T9538] ? do_syscall_64+0xae/0x790 [ 446.670971][ T9538] do_syscall_64+0x123/0x790 [ 446.670988][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.671000][ T9538] RIP: 0033:0x7f5d3cd9e1d9 [ 446.671010][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.671020][ T9538] RSP: 002b:00007f5d3dc18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.671032][ T9538] RAX: ffffffffffffffda RBX: 00007f5d3d025fa0 RCX: 00007f5d3cd9e1d9 [ 446.671040][ T9538] RDX: 0000000000000048 RSI: 0000200000019500 RDI: 0000000000000005 [ 446.671046][ T9538] RBP: 00007f5d3dc18090 R08: 0000000000000000 R09: 0000000000000000 [ 446.671053][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.671062][ T9538] R13: 00007f5d3d026038 R14: 00007f5d3d025fa0 R15: 00007ffd78280e08 [ 446.671078][ T9538] [ 446.671156][ T9538] syz.6.1025: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 446.671198][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.6.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.671214][ T9538] Tainted: [L]=SOFTLOCKUP [ 446.671218][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 446.671224][ T9538] Call Trace: [ 446.671228][ T9538] [ 446.671232][ T9538] dump_stack_lvl+0x100/0x190 [ 446.671250][ T9538] warn_alloc.cold+0x9e/0xb2 [ 446.671263][ T9538] ? __pfx_warn_alloc+0x10/0x10 [ 446.671275][ T9538] ? __kasan_kmalloc+0x8a/0xb0 [ 446.671297][ T9538] ? __get_vm_area_node+0x22b/0x350 [ 446.671316][ T9538] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 446.671336][ T9538] ? up_write+0x2dc/0x5b0 [ 446.671353][ T9538] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 446.671368][ T9538] ? lock_acquire+0x1d1/0x380 [ 446.671382][ T9538] ? find_held_lock+0x2b/0x80 [ 446.671398][ T9538] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 446.671415][ T9538] ? avc_has_perm_noaudit+0x11e/0x470 [ 446.671430][ T9538] ? avc_has_perm_noaudit+0x145/0x470 [ 446.671443][ T9538] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 446.671458][ T9538] __vmalloc_node_noprof+0xad/0xf0 [ 446.671475][ T9538] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 446.671492][ T9538] __vmalloc_noprof+0xa3/0x120 [ 446.671509][ T9538] ? __pfx___vmalloc_noprof+0x10/0x10 [ 446.671528][ T9538] ? rcu_is_watching+0x13/0xc0 [ 446.671544][ T9538] ? cap_capable+0x107/0x430 [ 446.671558][ T9538] bpf_prog_alloc_no_stats+0x59/0x690 [ 446.671573][ T9538] ? security_capable+0x80/0x260 [ 446.671588][ T9538] bpf_prog_alloc+0x3b/0x200 [ 446.671602][ T9538] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.671617][ T9538] bpf_prog_load+0x49e/0x2ab0 [ 446.671637][ T9538] ? __pfx_bpf_prog_load+0x10/0x10 [ 446.671666][ T9538] __sys_bpf+0x1f46/0x4a30 [ 446.671683][ T9538] ? __pfx___sys_bpf+0x10/0x10 [ 446.671695][ T9538] ? find_held_lock+0x2b/0x80 [ 446.671711][ T9538] ? get_pid_task+0xfc/0x250 [ 446.671725][ T9538] ? get_pid_task+0xfc/0x250 [ 446.671745][ T9538] ? find_held_lock+0x2b/0x80 [ 446.671765][ T9538] ? rcu_read_lock_any_held+0x6a/0x90 [ 446.671776][ T9538] ? find_held_lock+0x2b/0x80 [ 446.671791][ T9538] ? ksys_write+0x190/0x250 [ 446.671804][ T9538] ? ksys_write+0x190/0x250 [ 446.671817][ T9538] ? lock_acquire+0x1d1/0x380 [ 446.671841][ T9538] ? fput+0x7c/0x100 [ 446.671860][ T9538] ? ksys_write+0x1ac/0x250 [ 446.671875][ T9538] ? __x64_sys_bpf+0xce/0x140 [ 446.671887][ T9538] __x64_sys_bpf+0xce/0x140 [ 446.671900][ T9538] ? do_syscall_64+0xae/0x790 [ 446.671916][ T9538] do_syscall_64+0x123/0x790 [ 446.671933][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.671944][ T9538] RIP: 0033:0x7f5d3cd9e1d9 [ 446.671953][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.671963][ T9538] RSP: 002b:00007f5d3dc18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.671973][ T9538] RAX: ffffffffffffffda RBX: 00007f5d3d025fa0 RCX: 00007f5d3cd9e1d9 [ 446.671980][ T9538] RDX: 0000000000000048 RSI: 0000200000019500 RDI: 0000000000000005 [ 446.671986][ T9538] RBP: 00007f5d3dc18090 R08: 0000000000000000 R09: 0000000000000000 [ 446.671993][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.671999][ T9538] R13: 00007f5d3d026038 R14: 00007f5d3d025fa0 R15: 00007ffd78280e08 [ 446.672015][ T9538] [ 446.672022][ T9538] Mem-Info: [ 446.672029][ T9538] active_anon:62716 inactive_anon:0 isolated_anon:0 [ 446.672029][ T9538] active_file:12 inactive_file:62723 isolated_file:0 [ 446.672029][ T9538] unevictable:0 dirty:253 writeback:0 [ 446.672029][ T9538] slab_reclaimable:12708 slab_unreclaimable:114914 [ 446.672029][ T9538] mapped:33936 shmem:53819 pagetables:1405 [ 446.672029][ T9538] sec_pagetables:0 bounce:0 [ 446.672029][ T9538] kernel_misc_reclaimable:0 [ 446.672029][ T9538] free:1221839 free_pcp:6461 free_cma:0 [ 446.672062][ T9538] Node 0 active_anon:250864kB inactive_anon:0kB active_file:48kB inactive_file:250692kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135744kB dirty:1012kB writeback:0kB shmem:215276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12480kB pagetables:5464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.672091][ T9538] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 446.672117][ T9538] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.672147][ T9538] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 446.672165][ T9538] Node 0 DMA32 free:924248kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:250864kB inactive_anon:0kB active_file:48kB inactive_file:250692kB unevictable:0kB writepending:1012kB zspages:0kB present:3129332kB managed:2510924kB mlocked:0kB bounce:0kB free_pcp:25844kB local_pcp:25844kB free_cma:0kB [ 446.672201][ T9538] lowmem_reserve[]: 0 0 0 0 0 [ 446.672218][ T9538] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.672247][ T9538] lowmem_reserve[]: 0 0 0 0 0 [ 446.672265][ T9538] Node 1 Normal free:3947748kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.672295][ T9538] lowmem_reserve[]: 0 0 0 0 0 [ 446.672312][ T9538] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 446.672373][ T9538] Node 0 DMA32: 196*4kB (UME) 174*8kB (UE) 225*16kB (UE) 113*32kB (UME) 20*64kB (UE) 13*128kB (UME) 190*256kB (ME) 76*512kB (UM) 19*1024kB (M) 3*2048kB (UM) 195*4096kB (UM) = 924208kB [ 446.672456][ T9538] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.672507][ T9538] Node 1 Normal: 5*4kB (UM) 2*8kB (UM) 8*16kB (UM) 4*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (UM) = 3947748kB [ 446.672590][ T9538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.672599][ T9538] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.672607][ T9538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.672615][ T9538] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.672623][ T9538] 116550 total pagecache pages [ 446.672627][ T9538] 0 pages in swap cache [ 446.672631][ T9538] Free swap = 124996kB [ 446.672635][ T9538] Total swap = 124996kB [ 446.672639][ T9538] 2097051 pages RAM [ 446.672642][ T9538] 0 pages HighMem/MovableOnly [ 446.672645][ T9538] 437689 pages reserved [ 446.672649][ T9538] 0 pages cma reserved [ 448.411705][ T5725] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 449.114419][ T5725] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 449.116619][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.116652][ T5725] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 449.119504][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.119519][ T5725] usb 2-1: Product: syz [ 449.119527][ T5725] usb 2-1: Manufacturer: syz [ 449.119535][ T5725] usb 2-1: SerialNumber: syz [ 450.963627][ C0] usb 2-1: received EP1 urb->status = -71 [ 451.145723][ T9560] jffs2: notice: (9560) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 451.177722][ T31] audit: type=1400 audit(1791741314.548:698): avc: denied { write } for pid=9556 comm="syz.4.1024" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.208830][ T31] audit: type=1400 audit(1791741314.578:699): avc: denied { add_name } for pid=9556 comm="syz.4.1024" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.210771][ T31] audit: type=1400 audit(1791741314.578:700): avc: denied { create } for pid=9556 comm="syz.4.1024" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 452.117349][ T9570] lo speed is unknown, defaulting to 1000 [ 452.210829][ T5725] usb 2-1: unable to init card! (ret=-19) [ 452.316358][ T5725] usb 2-1: USB disconnect, device number 25 [ 454.138769][ T9580] xt_ecn: cannot match TCP bits for non-tcp packets [ 454.244889][ T5725] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 454.424077][ T5725] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 454.427490][ T5725] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.427524][ T5725] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 454.429990][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.430019][ T5725] usb 6-1: Product: syz [ 454.430027][ T5725] usb 6-1: Manufacturer: syz [ 454.430035][ T5725] usb 6-1: SerialNumber: syz [ 455.361455][ T9588] FAULT_INJECTION: forcing a failure. [ 455.361455][ T9588] name failslab, interval 1, probability 0, space 0, times 0 [ 455.361477][ T9588] CPU: 0 UID: 0 PID: 9588 Comm: syz.0.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.361494][ T9588] Tainted: [L]=SOFTLOCKUP [ 455.361498][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 455.361505][ T9588] Call Trace: [ 455.361509][ T9588] [ 455.361515][ T9588] dump_stack_lvl+0x100/0x190 [ 455.361538][ T9588] should_fail_ex.cold+0x5/0xa [ 455.361563][ T9588] should_failslab+0xc2/0x120 [ 455.361583][ T9588] kmem_cache_alloc_noprof+0x92/0x6a0 [ 455.361598][ T9588] ? __pfx_map_id_range_down+0x10/0x10 [ 455.361613][ T9588] ? security_inode_alloc+0x3b/0x2c0 [ 455.361632][ T9588] security_inode_alloc+0x3b/0x2c0 [ 455.361647][ T9588] inode_init_always_gfp+0xc6f/0xfb0 [ 455.361667][ T9588] alloc_inode+0x8e/0x250 [ 455.361680][ T9588] new_inode+0x22/0x1c0 [ 455.361692][ T9588] ? refcount_dec_not_one+0x136/0x1c0 [ 455.361709][ T9588] mqueue_get_inode+0x2e/0xe00 [ 455.361721][ T9588] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 455.361734][ T9588] ? __kasan_kmalloc+0xaa/0xb0 [ 455.361749][ T9588] ? __pfx_mqueue_fill_super+0x10/0x10 [ 455.361761][ T9588] mqueue_fill_super+0x145/0x250 [ 455.361774][ T9588] get_tree_nodev+0xdd/0x190 [ 455.361789][ T9588] mqueue_get_tree+0xf1/0x130 [ 455.361802][ T9588] vfs_get_tree+0x92/0x320 [ 455.361814][ T9588] fc_mount_longterm+0x1a/0x270 [ 455.361829][ T9588] mq_init_ns+0x482/0x820 [ 455.361845][ T9588] copy_ipcs+0x3dd/0x7e0 [ 455.361861][ T9588] create_new_namespaces+0x20a/0xac0 [ 455.361875][ T9588] ? security_capable+0x80/0x260 [ 455.361890][ T9588] unshare_nsproxy_namespaces+0xf2/0x220 [ 455.361906][ T9588] ksys_unshare+0x4a2/0xb30 [ 455.361920][ T9588] ? __pfx_ksys_unshare+0x10/0x10 [ 455.361940][ T9588] __x64_sys_unshare+0x31/0x40 [ 455.361954][ T9588] do_syscall_64+0x123/0x790 [ 455.361972][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.361984][ T9588] RIP: 0033:0x7fbaeef9e1d9 [ 455.361995][ T9588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.362005][ T9588] RSP: 002b:00007fbaefda2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 455.362017][ T9588] RAX: ffffffffffffffda RBX: 00007fbaef225fa0 RCX: 00007fbaeef9e1d9 [ 455.362024][ T9588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 455.362031][ T9588] RBP: 00007fbaef035888 R08: 0000000000000000 R09: 0000000000000000 [ 455.362039][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.362046][ T9588] R13: 00007fbaef226038 R14: 00007fbaef225fa0 R15: 00007fff9c650008 [ 455.362063][ T9588] [ 455.804134][ T5725] snd-usb-caiaq 6-1:1.0: can't set alt interface. [ 455.804150][ T5725] usb 6-1: unable to init card! (ret=-5) [ 455.804347][ T5725] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 455.918954][ T5725] usb 6-1: USB disconnect, device number 10 [ 457.682154][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 458.205525][ T9] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 458.206642][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 458.206657][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 458.206691][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.164255][ T9] usb 7-1: USB disconnect, device number 18 [ 460.239259][ T5791] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 460.990153][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 460.990242][ T5725] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 461.081734][ T5791] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 461.082530][ T5791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.082561][ T5791] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 461.084054][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.084069][ T5791] usb 6-1: Product: syz [ 461.084077][ T5791] usb 6-1: Manufacturer: syz [ 461.084086][ T5791] usb 6-1: SerialNumber: syz [ 461.138297][ T5725] usb 5-1: device descriptor read/64, error -71 [ 461.162545][ T9] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 461.168193][ T9] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 461.168209][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.168220][ T9] usb 7-1: config 0 has no interface number 0 [ 461.168242][ T9] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 461.168257][ T9] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 461.168270][ T9] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.218432][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.218449][ T9] usb 7-1: Product: syz [ 461.218457][ T9] usb 7-1: Manufacturer: syz [ 461.218465][ T9] usb 7-1: SerialNumber: syz [ 461.271780][ T9] usb 7-1: config 0 descriptor?? [ 461.371355][ T5725] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 461.501237][ T5725] usb 5-1: device descriptor read/64, error -71 [ 461.611447][ T5725] usb usb5-port1: attempt power cycle [ 462.599484][ T5725] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 462.613002][ T5725] usb 5-1: device descriptor read/8, error -71 [ 462.616591][ C0] usb 6-1: received EP1 urb->status = -71 [ 462.691237][ T5791] usb 6-1: unable to init card! (ret=-19) [ 462.696590][ T5791] usb 6-1: USB disconnect, device number 11 [ 462.707421][ T9628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.851262][ T5725] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 462.851623][ T9630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.892614][ T5725] usb 5-1: device descriptor read/8, error -71 [ 462.893593][ T9] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 462.922154][ T9] usb 7-1: USB disconnect, device number 19 [ 463.002085][ T5725] usb usb5-port1: unable to enumerate USB device [ 463.481299][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 463.491336][ T5791] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 463.632210][ T9] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 463.633330][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.633363][ T9] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 463.635132][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.635146][ T9] usb 6-1: Product: syz [ 463.635154][ T9] usb 6-1: Manufacturer: syz [ 463.635163][ T9] usb 6-1: SerialNumber: syz [ 463.663658][ T5791] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 463.679909][ T5791] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 463.679927][ T5791] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 463.679947][ T5791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.485898][ C0] usb 6-1: received EP1 urb->status = -71 [ 466.051612][ T9] usb 6-1: unable to init card! (ret=-19) [ 466.131474][ T9] usb 6-1: USB disconnect, device number 12 [ 467.196007][ T5711] usb 7-1: USB disconnect, device number 20 [ 467.681153][ T5711] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 468.305668][ T5711] usb 7-1: Using ep0 maxpacket: 8 [ 468.331375][ T5711] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 468.462296][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.466564][ T5711] usb 7-1: config 0 descriptor?? [ 468.504845][ T5711] usb 7-1: probing VID:PID(0424:012C) [ 468.510493][ T5711] usb 7-1: vub300 testing BULK IN EndPoint(0) 81 [ 468.510509][ T5711] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02 [ 468.510519][ T5711] usb 7-1: vub300 testing BULK IN EndPoint(2) 83 [ 468.510529][ T5711] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04 [ 468.510539][ T5711] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 468.842607][ T5725] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 468.924783][ T5711] usb 7-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 468.994736][ T5725] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 468.995525][ T5725] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 468.995540][ T5725] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 468.995561][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.126528][ T5711] vub300 7-1:0.0: probe with driver vub300 failed with error -22 [ 469.141192][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 469.214508][ T5791] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 469.369909][ T5711] usb 7-1: USB disconnect, device number 21 [ 469.371150][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 469.377434][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 469.392541][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.392574][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.392587][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.392610][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.395580][ T9] usb 1-1: config 0 descriptor?? [ 470.336602][ T9685] xt_ecn: cannot match TCP bits for non-tcp packets [ 470.354235][ T5791] usb 5-1: Using ep0 maxpacket: 16 [ 470.356217][ T5791] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 470.371810][ T5791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.371829][ T5791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.371842][ T5791] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 470.371866][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.548636][ T5791] usb 5-1: config 0 descriptor?? [ 470.662677][ T5725] usb 6-1: USB disconnect, device number 13 [ 470.745521][ T9] hid_parser_main: 1 callbacks suppressed [ 470.745537][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.745854][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.745870][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.745884][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.745899][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.745914][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.745928][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.745943][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.745958][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.745986][ T9] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 470.843094][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0019/input/input42 [ 470.909455][ T9] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 470.965095][ T9] usb 1-1: USB disconnect, device number 24 [ 471.016636][ T9696] jffs2: notice: (9696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 471.964182][ T5725] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 472.033807][ T9696] lo speed is unknown, defaulting to 1000 [ 472.201034][ T5791] usbhid 5-1:0.0: can't add hid device: -71 [ 472.208143][ T5791] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 472.217522][ T9695] fido_id[9695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 472.243328][ T5791] usb 5-1: USB disconnect, device number 41 [ 472.252152][ T5725] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 472.314131][ T5725] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.314167][ T5725] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 472.352881][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.352898][ T5725] usb 6-1: Product: syz [ 472.352907][ T5725] usb 6-1: Manufacturer: syz [ 472.352915][ T5725] usb 6-1: SerialNumber: syz [ 472.761248][ T5791] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 472.817510][ T5711] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 473.191102][ T5791] usb 5-1: Using ep0 maxpacket: 16 [ 473.194364][ T5791] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 473.253437][ T5711] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 473.336885][ T5791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.336913][ T5791] usb 5-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.336929][ T5791] usb 5-1: config 0 interface 0 has no altsetting 0 [ 473.336947][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.374634][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.374669][ T5711] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 473.648115][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.648132][ T5711] usb 1-1: Product: syz [ 473.648140][ T5711] usb 1-1: Manufacturer: syz [ 473.648149][ T5711] usb 1-1: SerialNumber: syz [ 473.954624][ T5791] usb 5-1: config 0 descriptor?? [ 474.757285][ T5791] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 474.759998][ C0] usb 6-1: received EP1 urb->status = -71 [ 474.955050][ T5725] usb 6-1: unable to init card! (ret=-19) [ 475.548002][ T5725] usb 6-1: USB disconnect, device number 14 [ 475.626104][ T5711] snd-usb-caiaq 1-1:1.0: can't set alt interface. [ 475.626119][ T5711] usb 1-1: unable to init card! (ret=-5) [ 475.626307][ T5711] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 476.889456][ T5711] usb 1-1: USB disconnect, device number 25 [ 478.486075][ T5711] usb 5-1: USB disconnect, device number 42 [ 480.483255][ T9739] xt_ecn: cannot match TCP bits for non-tcp packets [ 480.911289][ T5711] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 481.000873][ T5725] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 481.063592][ T5711] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 481.064399][ T5711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 481.064414][ T5711] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 481.064435][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.171536][ T5725] usb 7-1: Using ep0 maxpacket: 16 [ 481.172013][ T5725] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 481.174143][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.174161][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.174174][ T5725] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 481.174196][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.175732][ T5725] usb 7-1: config 0 descriptor?? [ 482.361846][ T9747] FAULT_INJECTION: forcing a failure. [ 482.361846][ T9747] name failslab, interval 1, probability 0, space 0, times 0 [ 482.361870][ T9747] CPU: 0 UID: 0 PID: 9747 Comm: syz.1.1071 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.361892][ T9747] Tainted: [L]=SOFTLOCKUP [ 482.361896][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 482.361904][ T9747] Call Trace: [ 482.361910][ T9747] [ 482.361915][ T9747] dump_stack_lvl+0x100/0x190 [ 482.361936][ T9747] should_fail_ex.cold+0x5/0xa [ 482.361954][ T9747] should_failslab+0xc2/0x120 [ 482.361972][ T9747] kmem_cache_alloc_noprof+0x92/0x6a0 [ 482.361986][ T9747] ? __pfx_map_id_range_down+0x10/0x10 [ 482.362001][ T9747] ? security_inode_alloc+0x3b/0x2c0 [ 482.362019][ T9747] security_inode_alloc+0x3b/0x2c0 [ 482.362035][ T9747] inode_init_always_gfp+0xc6f/0xfb0 [ 482.362054][ T9747] alloc_inode+0x8e/0x250 [ 482.362067][ T9747] new_inode+0x22/0x1c0 [ 482.362079][ T9747] ? refcount_dec_not_one+0x136/0x1c0 [ 482.362097][ T9747] mqueue_get_inode+0x2e/0xe00 [ 482.362109][ T9747] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 482.362121][ T9747] ? __kasan_kmalloc+0xaa/0xb0 [ 482.362136][ T9747] ? __pfx_mqueue_fill_super+0x10/0x10 [ 482.362148][ T9747] mqueue_fill_super+0x145/0x250 [ 482.362161][ T9747] get_tree_nodev+0xdd/0x190 [ 482.362176][ T9747] mqueue_get_tree+0xf1/0x130 [ 482.362189][ T9747] vfs_get_tree+0x92/0x320 [ 482.362201][ T9747] fc_mount_longterm+0x1a/0x270 [ 482.362216][ T9747] mq_init_ns+0x482/0x820 [ 482.362232][ T9747] copy_ipcs+0x3dd/0x7e0 [ 482.362248][ T9747] create_new_namespaces+0x20a/0xac0 [ 482.362262][ T9747] ? security_capable+0x80/0x260 [ 482.362277][ T9747] unshare_nsproxy_namespaces+0xf2/0x220 [ 482.362293][ T9747] ksys_unshare+0x4a2/0xb30 [ 482.362307][ T9747] ? __pfx_ksys_unshare+0x10/0x10 [ 482.362327][ T9747] __x64_sys_unshare+0x31/0x40 [ 482.362340][ T9747] do_syscall_64+0x123/0x790 [ 482.362358][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.362370][ T9747] RIP: 0033:0x7fcf5eb9e1d9 [ 482.362381][ T9747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.362391][ T9747] RSP: 002b:00007fcf5fb00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 482.362402][ T9747] RAX: ffffffffffffffda RBX: 00007fcf5ee25fa0 RCX: 00007fcf5eb9e1d9 [ 482.362410][ T9747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 482.362416][ T9747] RBP: 00007fcf5ec35888 R08: 0000000000000000 R09: 0000000000000000 [ 482.362423][ T9747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.362430][ T9747] R13: 00007fcf5ee26038 R14: 00007fcf5ee25fa0 R15: 00007fffd1ba29b8 [ 482.362446][ T9747] [ 482.719477][ T5725] hid_parser_main: 1 callbacks suppressed [ 482.719493][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.719793][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.719814][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.719830][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.719857][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.719872][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.719891][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.719906][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.719922][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.719936][ T5725] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 482.857922][ T5725] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001A/input/input43 [ 482.903509][ T5711] usb 5-1: USB disconnect, device number 43 [ 482.972087][ T5725] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 482.999400][ T5725] usb 7-1: USB disconnect, device number 22 [ 483.179379][ T9758] jffs2: notice: (9758) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 484.069967][ T9758] lo speed is unknown, defaulting to 1000 [ 484.167087][ T9753] fido_id[9753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 485.627942][ T5725] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 486.461865][ T5725] usb 5-1: Using ep0 maxpacket: 16 [ 486.464914][ T5725] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 486.476339][ T5725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.476367][ T5725] usb 5-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.476384][ T5725] usb 5-1: config 0 interface 0 has no altsetting 0 [ 486.476403][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.535066][ T5725] usb 5-1: config 0 descriptor?? [ 486.537031][ T5725] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 487.834941][ T9789] jffs2: notice: (9789) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 488.697669][ T9789] lo speed is unknown, defaulting to 1000 [ 488.814323][ T7146] usb 5-1: USB disconnect, device number 44 [ 489.185533][ T9794] bond1: entered allmulticast mode [ 490.565695][ T31] audit: type=1400 audit(1791741353.878:701): avc: denied { write } for pid=9803 comm="syz.6.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 490.565749][ T31] audit: type=1400 audit(1791741353.898:702): avc: denied { sqpoll } for pid=9803 comm="syz.6.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 490.565772][ T31] audit: type=1400 audit(1791741353.898:703): avc: denied { write } for pid=9803 comm="syz.6.1086" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 491.847694][ T50] nvme nvme0: rdma_resolve_route failed (-110). [ 491.849758][ T9796] nvme nvme0: rdma connection establishment failed (-512) [ 492.014833][ T31] audit: type=1400 audit(1791741355.388:704): avc: denied { read } for pid=9812 comm="syz.6.1091" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 492.019508][ T31] audit: type=1400 audit(1791741355.388:705): avc: denied { ioctl } for pid=9812 comm="syz.6.1091" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d1a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 492.157097][ T9816] program syz.6.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.311525][ T5711] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 493.092361][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 493.092782][ T5711] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 493.093533][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.093551][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.093563][ T5711] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 493.093585][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.095578][ T5711] usb 2-1: config 0 descriptor?? [ 494.055626][ T9830] FAULT_INJECTION: forcing a failure. [ 494.055626][ T9830] name failslab, interval 1, probability 0, space 0, times 0 [ 494.055650][ T9830] CPU: 0 UID: 0 PID: 9830 Comm: syz.0.1088 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.055666][ T9830] Tainted: [L]=SOFTLOCKUP [ 494.055670][ T9830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.055678][ T9830] Call Trace: [ 494.055682][ T9830] [ 494.055687][ T9830] dump_stack_lvl+0x100/0x190 [ 494.055712][ T9830] should_fail_ex.cold+0x5/0xa [ 494.055731][ T9830] should_failslab+0xc2/0x120 [ 494.055749][ T9830] kmem_cache_alloc_noprof+0x92/0x6a0 [ 494.055764][ T9830] ? __pfx_map_id_range_down+0x10/0x10 [ 494.055780][ T9830] ? security_inode_alloc+0x3b/0x2c0 [ 494.055799][ T9830] security_inode_alloc+0x3b/0x2c0 [ 494.055821][ T9830] inode_init_always_gfp+0xc6f/0xfb0 [ 494.055842][ T9830] alloc_inode+0x8e/0x250 [ 494.055857][ T9830] new_inode+0x22/0x1c0 [ 494.055870][ T9830] ? refcount_dec_not_one+0x136/0x1c0 [ 494.055888][ T9830] mqueue_get_inode+0x2e/0xe00 [ 494.055901][ T9830] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 494.055913][ T9830] ? __kasan_kmalloc+0xaa/0xb0 [ 494.055928][ T9830] ? __pfx_mqueue_fill_super+0x10/0x10 [ 494.055941][ T9830] mqueue_fill_super+0x145/0x250 [ 494.055953][ T9830] get_tree_nodev+0xdd/0x190 [ 494.055969][ T9830] mqueue_get_tree+0xf1/0x130 [ 494.055981][ T9830] vfs_get_tree+0x92/0x320 [ 494.055993][ T9830] fc_mount_longterm+0x1a/0x270 [ 494.056009][ T9830] mq_init_ns+0x482/0x820 [ 494.056025][ T9830] copy_ipcs+0x3dd/0x7e0 [ 494.056040][ T9830] create_new_namespaces+0x20a/0xac0 [ 494.056055][ T9830] ? security_capable+0x80/0x260 [ 494.056070][ T9830] unshare_nsproxy_namespaces+0xf2/0x220 [ 494.056086][ T9830] ksys_unshare+0x4a2/0xb30 [ 494.056100][ T9830] ? __pfx_ksys_unshare+0x10/0x10 [ 494.056121][ T9830] __x64_sys_unshare+0x31/0x40 [ 494.056134][ T9830] do_syscall_64+0x123/0x790 [ 494.056153][ T9830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.056165][ T9830] RIP: 0033:0x7fbaeef9e1d9 [ 494.056177][ T9830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.056188][ T9830] RSP: 002b:00007fbaefda2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 494.056199][ T9830] RAX: ffffffffffffffda RBX: 00007fbaef225fa0 RCX: 00007fbaeef9e1d9 [ 494.056207][ T9830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 494.056213][ T9830] RBP: 00007fbaef035888 R08: 0000000000000000 R09: 0000000000000000 [ 494.056220][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.056226][ T9830] R13: 00007fbaef226038 R14: 00007fbaef225fa0 R15: 00007fff9c650008 [ 494.056242][ T9830] [ 494.421773][ T5711] hid_parser_main: 1 callbacks suppressed [ 494.421795][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.422067][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.422082][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.422096][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.422110][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.422124][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.422138][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.422152][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.422166][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.422180][ T5711] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 494.534227][ T5711] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001B/input/input44 [ 494.665138][ T5711] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 494.849948][ T5711] usb 2-1: USB disconnect, device number 26 [ 494.974069][ T5791] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 495.066024][ T9838] fido_id[9838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 495.136405][ T5791] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 495.137451][ T5791] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 495.137467][ T5791] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 495.137487][ T5791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.448953][ T5791] usb 7-1: USB disconnect, device number 23 [ 499.351690][ T9876] FAULT_INJECTION: forcing a failure. [ 499.351690][ T9876] name failslab, interval 1, probability 0, space 0, times 0 [ 499.351713][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.0.1111 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.351729][ T9876] Tainted: [L]=SOFTLOCKUP [ 499.351733][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 499.351741][ T9876] Call Trace: [ 499.351745][ T9876] [ 499.351750][ T9876] dump_stack_lvl+0x100/0x190 [ 499.351772][ T9876] should_fail_ex.cold+0x5/0xa [ 499.351790][ T9876] should_failslab+0xc2/0x120 [ 499.351807][ T9876] kmem_cache_alloc_noprof+0x92/0x6a0 [ 499.351821][ T9876] ? __pfx_map_id_range_down+0x10/0x10 [ 499.351836][ T9876] ? security_inode_alloc+0x3b/0x2c0 [ 499.351854][ T9876] security_inode_alloc+0x3b/0x2c0 [ 499.351870][ T9876] inode_init_always_gfp+0xc6f/0xfb0 [ 499.351890][ T9876] alloc_inode+0x8e/0x250 [ 499.351903][ T9876] new_inode+0x22/0x1c0 [ 499.351915][ T9876] ? refcount_dec_not_one+0x136/0x1c0 [ 499.351932][ T9876] mqueue_get_inode+0x2e/0xe00 [ 499.351945][ T9876] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 499.351957][ T9876] ? __kasan_kmalloc+0xaa/0xb0 [ 499.351972][ T9876] ? __pfx_mqueue_fill_super+0x10/0x10 [ 499.351984][ T9876] mqueue_fill_super+0x145/0x250 [ 499.351997][ T9876] get_tree_nodev+0xdd/0x190 [ 499.352012][ T9876] mqueue_get_tree+0xf1/0x130 [ 499.352025][ T9876] vfs_get_tree+0x92/0x320 [ 499.352037][ T9876] fc_mount_longterm+0x1a/0x270 [ 499.352053][ T9876] mq_init_ns+0x482/0x820 [ 499.352069][ T9876] copy_ipcs+0x3dd/0x7e0 [ 499.352085][ T9876] create_new_namespaces+0x20a/0xac0 [ 499.352099][ T9876] ? security_capable+0x80/0x260 [ 499.352115][ T9876] unshare_nsproxy_namespaces+0xf2/0x220 [ 499.352130][ T9876] ksys_unshare+0x4a2/0xb30 [ 499.352144][ T9876] ? __pfx_ksys_unshare+0x10/0x10 [ 499.352165][ T9876] __x64_sys_unshare+0x31/0x40 [ 499.352178][ T9876] do_syscall_64+0x123/0x790 [ 499.352197][ T9876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.352209][ T9876] RIP: 0033:0x7fbaeef9e1d9 [ 499.352219][ T9876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.352230][ T9876] RSP: 002b:00007fbaefda2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 499.352241][ T9876] RAX: ffffffffffffffda RBX: 00007fbaef225fa0 RCX: 00007fbaeef9e1d9 [ 499.352249][ T9876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 499.352255][ T9876] RBP: 00007fbaef035888 R08: 0000000000000000 R09: 0000000000000000 [ 499.352262][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.352269][ T9876] R13: 00007fbaef226038 R14: 00007fbaef225fa0 R15: 00007fff9c650008 [ 499.352286][ T9876] [ 500.130651][ T9879] FAULT_INJECTION: forcing a failure. [ 500.130651][ T9879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.130677][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.5.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.130693][ T9879] Tainted: [L]=SOFTLOCKUP [ 500.130698][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 500.130705][ T9879] Call Trace: [ 500.130709][ T9879] [ 500.130714][ T9879] dump_stack_lvl+0x100/0x190 [ 500.130737][ T9879] should_fail_ex.cold+0x5/0xa [ 500.130756][ T9879] _copy_from_user+0x2e/0xd0 [ 500.130774][ T9879] copy_mount_options+0x76/0x190 [ 500.130790][ T9879] __x64_sys_mount+0x1ab/0x310 [ 500.130803][ T9879] ? __pfx___x64_sys_mount+0x10/0x10 [ 500.130820][ T9879] do_syscall_64+0x123/0x790 [ 500.130838][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.130850][ T9879] RIP: 0033:0x7f8511d9e1d9 [ 500.130860][ T9879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.130871][ T9879] RSP: 002b:00007f8512bcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 500.130882][ T9879] RAX: ffffffffffffffda RBX: 00007f8512025fa0 RCX: 00007f8511d9e1d9 [ 500.130890][ T9879] RDX: 0000200000000f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.130896][ T9879] RBP: 00007f8511e35888 R08: 0000200000000f80 R09: 0000000000000000 [ 500.130903][ T9879] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 500.130910][ T9879] R13: 00007f8512026038 R14: 00007f8512025fa0 R15: 00007ffd68378768 [ 500.130925][ T9879] [ 501.573733][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.573768][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.040274][ T9891] FAULT_INJECTION: forcing a failure. [ 502.040274][ T9891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.040298][ T9891] CPU: 0 UID: 0 PID: 9891 Comm: syz.1.1112 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.040314][ T9891] Tainted: [L]=SOFTLOCKUP [ 502.040319][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 502.040326][ T9891] Call Trace: [ 502.040330][ T9891] [ 502.040335][ T9891] dump_stack_lvl+0x100/0x190 [ 502.040356][ T9891] should_fail_ex.cold+0x5/0xa [ 502.040375][ T9891] _copy_from_user+0x2e/0xd0 [ 502.040393][ T9891] copy_mount_options+0x76/0x190 [ 502.040409][ T9891] __x64_sys_mount+0x1ab/0x310 [ 502.040423][ T9891] ? __pfx___x64_sys_mount+0x10/0x10 [ 502.040442][ T9891] do_syscall_64+0x123/0x790 [ 502.040460][ T9891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.040472][ T9891] RIP: 0033:0x7fcf5eb9e1d9 [ 502.040482][ T9891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.040493][ T9891] RSP: 002b:00007fcf5fb00028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 502.040506][ T9891] RAX: ffffffffffffffda RBX: 00007fcf5ee25fa0 RCX: 00007fcf5eb9e1d9 [ 502.040513][ T9891] RDX: 0000200000000f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.040520][ T9891] RBP: 00007fcf5ec35888 R08: 0000200000000f80 R09: 0000000000000000 [ 502.040527][ T9891] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 502.040533][ T9891] R13: 00007fcf5ee26038 R14: 00007fcf5ee25fa0 R15: 00007fffd1ba29b8 [ 502.040549][ T9891] [ 504.510549][ T9909] FAULT_INJECTION: forcing a failure. [ 504.510549][ T9909] name failslab, interval 1, probability 0, space 0, times 0 [ 504.510573][ T9909] CPU: 0 UID: 0 PID: 9909 Comm: syz.5.1124 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.510589][ T9909] Tainted: [L]=SOFTLOCKUP [ 504.510593][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 504.510600][ T9909] Call Trace: [ 504.510605][ T9909] [ 504.510610][ T9909] dump_stack_lvl+0x100/0x190 [ 504.510633][ T9909] should_fail_ex.cold+0x5/0xa [ 504.510652][ T9909] should_failslab+0xc2/0x120 [ 504.510669][ T9909] kmem_cache_alloc_noprof+0x92/0x6a0 [ 504.510684][ T9909] ? __pfx_map_id_range_down+0x10/0x10 [ 504.510699][ T9909] ? security_inode_alloc+0x3b/0x2c0 [ 504.510718][ T9909] security_inode_alloc+0x3b/0x2c0 [ 504.510733][ T9909] inode_init_always_gfp+0xc6f/0xfb0 [ 504.510752][ T9909] alloc_inode+0x8e/0x250 [ 504.510766][ T9909] new_inode+0x22/0x1c0 [ 504.510778][ T9909] ? refcount_dec_not_one+0x136/0x1c0 [ 504.510796][ T9909] mqueue_get_inode+0x2e/0xe00 [ 504.510809][ T9909] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 504.510821][ T9909] ? __kasan_kmalloc+0xaa/0xb0 [ 504.510836][ T9909] ? __pfx_mqueue_fill_super+0x10/0x10 [ 504.510848][ T9909] mqueue_fill_super+0x145/0x250 [ 504.510861][ T9909] get_tree_nodev+0xdd/0x190 [ 504.510876][ T9909] mqueue_get_tree+0xf1/0x130 [ 504.510889][ T9909] vfs_get_tree+0x92/0x320 [ 504.510901][ T9909] fc_mount_longterm+0x1a/0x270 [ 504.510917][ T9909] mq_init_ns+0x482/0x820 [ 504.510932][ T9909] copy_ipcs+0x3dd/0x7e0 [ 504.510948][ T9909] create_new_namespaces+0x20a/0xac0 [ 504.510963][ T9909] ? security_capable+0x80/0x260 [ 504.510978][ T9909] unshare_nsproxy_namespaces+0xf2/0x220 [ 504.510993][ T9909] ksys_unshare+0x4a2/0xb30 [ 504.511008][ T9909] ? __pfx_ksys_unshare+0x10/0x10 [ 504.511028][ T9909] __x64_sys_unshare+0x31/0x40 [ 504.511042][ T9909] do_syscall_64+0x123/0x790 [ 504.511064][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.511076][ T9909] RIP: 0033:0x7f8511d9e1d9 [ 504.511086][ T9909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.511098][ T9909] RSP: 002b:00007f8512bcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 504.511109][ T9909] RAX: ffffffffffffffda RBX: 00007f8512025fa0 RCX: 00007f8511d9e1d9 [ 504.511117][ T9909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 504.511123][ T9909] RBP: 00007f8511e35888 R08: 0000000000000000 R09: 0000000000000000 [ 504.511130][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.511136][ T9909] R13: 00007f8512026038 R14: 00007f8512025fa0 R15: 00007ffd68378768 [ 504.511152][ T9909] [ 504.915851][ T9912] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9912 comm=syz.0.1125 [ 507.260018][ T5615] Bluetooth: hci4: unexpected event for opcode 0x0064 [ 513.005989][ T9966] FAULT_INJECTION: forcing a failure. [ 513.005989][ T9966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.006033][ T9966] CPU: 0 UID: 0 PID: 9966 Comm: syz.0.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.006051][ T9966] Tainted: [L]=SOFTLOCKUP [ 513.006056][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 513.006063][ T9966] Call Trace: [ 513.006068][ T9966] [ 513.006073][ T9966] dump_stack_lvl+0x100/0x190 [ 513.006097][ T9966] should_fail_ex.cold+0x5/0xa [ 513.006115][ T9966] _copy_from_user+0x2e/0xd0 [ 513.006132][ T9966] copy_mount_options+0x76/0x190 [ 513.006150][ T9966] __x64_sys_mount+0x1ab/0x310 [ 513.006163][ T9966] ? __pfx___x64_sys_mount+0x10/0x10 [ 513.006180][ T9966] do_syscall_64+0x123/0x790 [ 513.006199][ T9966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.006210][ T9966] RIP: 0033:0x7fbaeef9e1d9 [ 513.006220][ T9966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.006232][ T9966] RSP: 002b:00007fbaefda2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 513.006244][ T9966] RAX: ffffffffffffffda RBX: 00007fbaef225fa0 RCX: 00007fbaeef9e1d9 [ 513.006252][ T9966] RDX: 0000200000000f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.006259][ T9966] RBP: 00007fbaef035888 R08: 0000200000000f80 R09: 0000000000000000 [ 513.006266][ T9966] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 513.006272][ T9966] R13: 00007fbaef226038 R14: 00007fbaef225fa0 R15: 00007fff9c650008 [ 513.006288][ T9966] [ 513.188419][ T7146] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 513.343880][ T7146] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 513.360735][ T7146] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 513.360753][ T7146] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 513.360774][ T7146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.433601][ T31] audit: type=1400 audit(1791741376.798:706): avc: denied { relabelfrom } for pid=9973 comm="syz.0.1144" name="L2TP/IPv6" dev="sockfs" ino=30694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.481700][ T9974] SELinux: Context system_u:object_r:update_modules_exec_t:s0 is not valid (left unmapped). [ 513.482000][ T31] audit: type=1400 audit(1791741376.858:707): avc: denied { relabelto } for pid=9973 comm="syz.0.1144" name="L2TP/IPv6" dev="sockfs" ino=30694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:update_modules_exec_t:s0" [ 513.554696][ T9974] x_tables: duplicate underflow at hook 3 [ 513.685065][ T10] usb 5-1: USB disconnect, device number 45 [ 514.031735][ T7146] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 514.171209][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 514.179477][ T9993] jffs2: notice: (9993) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 515.049199][ T9993] lo speed is unknown, defaulting to 1000 [ 515.170368][ T7146] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 515.225840][ T7146] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 515.225857][ T7146] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.225868][ T7146] usb 6-1: config 0 has no interface number 0 [ 515.225902][ T7146] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 515.225917][ T7146] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 515.225929][ T7146] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.230030][ T7146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.230046][ T7146] usb 6-1: Product: syz [ 515.230054][ T7146] usb 6-1: Manufacturer: syz [ 515.230068][ T7146] usb 6-1: SerialNumber: syz [ 515.232207][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 515.240854][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 515.259245][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.259265][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.259277][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 515.259300][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.300341][ T10] usb 1-1: config 0 descriptor?? [ 515.420214][ T7146] usb 6-1: config 0 descriptor?? [ 515.582761][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1152'. [ 517.302677][ T9980] digital: digital_start_poll: Unknown protocol [ 517.344798][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 517.344863][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 517.447744][ T10] usb 1-1: USB disconnect, device number 26 [ 517.629502][ T7146] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 517.694902][ T7146] usb 6-1: USB disconnect, device number 15 [ 517.905325][T10016] FAULT_INJECTION: forcing a failure. [ 517.905325][T10016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.905348][T10016] CPU: 0 UID: 0 PID: 10016 Comm: syz.4.1154 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.905365][T10016] Tainted: [L]=SOFTLOCKUP [ 517.905369][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 517.905376][T10016] Call Trace: [ 517.905380][T10016] [ 517.905385][T10016] dump_stack_lvl+0x100/0x190 [ 517.905411][T10016] should_fail_ex.cold+0x5/0xa [ 517.905429][T10016] _copy_from_user+0x2e/0xd0 [ 517.905447][T10016] copy_mount_options+0x76/0x190 [ 517.905464][T10016] __x64_sys_mount+0x1ab/0x310 [ 517.905477][T10016] ? __pfx___x64_sys_mount+0x10/0x10 [ 517.905494][T10016] do_syscall_64+0x123/0x790 [ 517.905512][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.905524][T10016] RIP: 0033:0x7fd8c559e1d9 [ 517.905537][T10016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.905547][T10016] RSP: 002b:00007fd8c6503028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 517.905559][T10016] RAX: ffffffffffffffda RBX: 00007fd8c5825fa0 RCX: 00007fd8c559e1d9 [ 517.905567][T10016] RDX: 0000200000000f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.905574][T10016] RBP: 00007fd8c5635888 R08: 0000200000000f80 R09: 0000000000000000 [ 517.905582][T10016] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 517.905589][T10016] R13: 00007fd8c5826038 R14: 00007fd8c5825fa0 R15: 00007ffdf18b0e18 [ 517.905605][T10016] [ 518.392128][ T7146] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 518.543080][ T7146] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 518.544519][ T7146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 518.544534][ T7146] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 518.544555][ T7146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.546526][T10031] jffs2: notice: (10031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 519.410987][T10031] lo speed is unknown, defaulting to 1000 [ 519.641444][ T5725] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 519.793427][ T5725] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 519.797003][ T5725] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.797035][ T5725] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 519.800404][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.800419][ T5725] usb 5-1: Product: syz [ 519.800427][ T5725] usb 5-1: Manufacturer: syz [ 519.800436][ T5725] usb 5-1: SerialNumber: syz [ 521.028499][ T5711] usb 1-1: USB disconnect, device number 27 [ 522.067548][T10044] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1163'. [ 522.150919][ T5725] snd-usb-caiaq 5-1:1.0: can't set alt interface. [ 522.150952][ T5725] usb 5-1: unable to init card! (ret=-5) [ 522.180518][ T5725] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 522.226290][ T5725] usb 5-1: USB disconnect, device number 46 [ 522.542770][ T7146] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 522.691703][ T7146] usb 1-1: Using ep0 maxpacket: 16 [ 522.692167][ T7146] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 522.693740][ T7146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.693758][ T7146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.693771][ T7146] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 522.693803][ T7146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.700813][ T7146] usb 1-1: config 0 descriptor?? [ 523.184523][ T7146] hid_parser_main: 1 callbacks suppressed [ 523.189218][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.189516][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.189533][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.189547][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.189562][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.189577][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.189593][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.189608][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.189623][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.189638][ T7146] microsoft 0003:045E:07DA.001C: unknown main item tag 0x0 [ 523.291859][ T7146] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001C/input/input46 [ 523.365358][ T7146] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 524.198190][ T7146] usb 1-1: USB disconnect, device number 28 [ 524.337068][T10057] fido_id[10057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 525.442080][ T7146] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 525.593281][ T7146] usb 6-1: Using ep0 maxpacket: 16 [ 525.594813][ T7146] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 525.596969][ T7146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.596987][ T7146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.597000][ T7146] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 525.597021][ T7146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.600441][ T7146] usb 6-1: config 0 descriptor?? [ 525.999393][ T31] audit: type=1400 audit(1791741389.368:708): avc: denied { append } for pid=10075 comm="syz.0.1175" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 526.117028][ T7146] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001D/input/input47 [ 526.189910][ T7146] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 526.912239][ T7146] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 526.948281][ T10] usb 6-1: USB disconnect, device number 16 [ 527.065185][ T7146] usb 1-1: unable to get BOS descriptor or descriptor too short [ 527.065580][ T7146] usb 1-1: not running at top speed; connect to a high speed hub [ 527.065596][ T7146] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=36.a1 [ 527.067676][ T7146] usb 1-1: config 4 has an invalid interface number: 84 but max is 0 [ 527.067693][ T7146] usb 1-1: config 4 has no interface number 0 [ 527.067715][ T7146] usb 1-1: config 4 interface 84 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 527.067730][ T7146] usb 1-1: config 4 interface 84 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 527.067744][ T7146] usb 1-1: config 4 interface 84 has no altsetting 0 [ 527.070948][ T7146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.070963][ T7146] usb 1-1: Product: syz [ 527.070971][ T7146] usb 1-1: Manufacturer: syz [ 527.070987][ T7146] usb 1-1: SerialNumber: syz [ 527.183755][T10078] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 527.387474][ T31] audit: type=1400 audit(1791741390.758:709): avc: denied { ioctl } for pid=10075 comm="syz.0.1175" path="socket:[31210]" dev="sockfs" ino=31210 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 527.430931][T10076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.447573][T10076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.522143][ T7146] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 527.530860][ T7146] usb 1-1: USB disconnect, device number 29 [ 527.572937][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 527.725660][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 527.730448][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.730481][ T10] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 527.743024][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.743040][ T10] usb 2-1: Product: syz [ 527.743049][ T10] usb 2-1: Manufacturer: syz [ 527.743057][ T10] usb 2-1: SerialNumber: syz [ 527.871336][ T5791] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 528.023964][ T5791] usb 6-1: Using ep0 maxpacket: 8 [ 528.026883][ T5791] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 528.027793][ T5791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.027808][ T5791] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 528.027831][ T5791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.027852][ T5791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.093196][ T5791] hub 6-1:1.0: bad descriptor, ignoring hub [ 528.093212][ T5791] hub 6-1:1.0: probe with driver hub failed with error -5 [ 528.093509][ T5791] cdc_wdm 6-1:1.0: skipping garbage [ 528.093517][ T5791] cdc_wdm 6-1:1.0: skipping garbage [ 528.126219][ T5791] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 528.126233][ T5791] cdc_wdm 6-1:1.0: Unknown control protocol [ 528.318455][ T31] audit: type=1400 audit(1791741391.688:710): avc: denied { read write } for pid=10094 comm="syz.5.1177" name="cdc-wdm0" dev="devtmpfs" ino=3334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 528.318495][ T31] audit: type=1400 audit(1791741391.688:711): avc: denied { open } for pid=10094 comm="syz.5.1177" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 528.653348][ T5791] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 528.683515][T10106] FAULT_INJECTION: forcing a failure. [ 528.683515][T10106] name failslab, interval 1, probability 0, space 0, times 0 [ 528.683539][T10106] CPU: 0 UID: 0 PID: 10106 Comm: syz.5.1177 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.683557][T10106] Tainted: [L]=SOFTLOCKUP [ 528.683562][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 528.683569][T10106] Call Trace: [ 528.683573][T10106] [ 528.683578][T10106] dump_stack_lvl+0x100/0x190 [ 528.683601][T10106] should_fail_ex.cold+0x5/0xa [ 528.683620][T10106] should_failslab+0xc2/0x120 [ 528.683641][T10106] __kmalloc_cache_noprof+0x91/0x6d0 [ 528.683655][T10106] ? apply_wqattrs_prepare+0x136/0xbb0 [ 528.683672][T10106] apply_wqattrs_prepare+0x136/0xbb0 [ 528.683685][T10106] ? __alloc_workqueue+0x8ca/0x1950 [ 528.683705][T10106] apply_workqueue_attrs_locked+0x64/0xe0 [ 528.683719][T10106] __alloc_workqueue+0x9a7/0x1950 [ 528.683739][T10106] alloc_workqueue_noprof+0xc7/0x130 [ 528.683754][T10106] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 528.683773][T10106] ? __pfx___debug_object_init+0x10/0x10 [ 528.683795][T10106] nci_register_device+0x21e/0xb80 [ 528.683810][T10106] ? __pfx_nci_register_device+0x10/0x10 [ 528.683826][T10106] ? lockdep_init_map_type+0x5c/0x250 [ 528.683844][T10106] virtual_ncidev_open+0x141/0x220 [ 528.683859][T10106] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 528.683872][T10106] misc_open+0x26d/0x450 [ 528.683888][T10106] ? __pfx_misc_open+0x10/0x10 [ 528.683902][T10106] chrdev_open+0x234/0x6a0 [ 528.683919][T10106] ? __pfx_chrdev_open+0x10/0x10 [ 528.683937][T10106] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 528.683954][T10106] do_dentry_open+0x6ab/0x14d0 [ 528.683968][T10106] ? __pfx_chrdev_open+0x10/0x10 [ 528.683987][T10106] vfs_open+0x82/0x3f0 [ 528.684007][T10106] path_openat+0x19fa/0x2440 [ 528.684026][T10106] ? __pfx_path_openat+0x10/0x10 [ 528.684047][T10106] do_file_open+0x20e/0x430 [ 528.684065][T10106] ? __pfx_do_file_open+0x10/0x10 [ 528.684093][T10106] ? _raw_spin_unlock+0x28/0x50 [ 528.684107][T10106] ? alloc_fd+0x471/0x7a0 [ 528.684129][T10106] do_sys_openat2+0x10f/0x1e0 [ 528.684141][T10106] ? __pfx_do_sys_openat2+0x10/0x10 [ 528.684158][T10106] __x64_sys_openat+0x12d/0x210 [ 528.684170][T10106] ? __pfx___x64_sys_openat+0x10/0x10 [ 528.684188][T10106] do_syscall_64+0x123/0x790 [ 528.684205][T10106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.684217][T10106] RIP: 0033:0x7f8511d9e1d9 [ 528.684228][T10106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.684239][T10106] RSP: 002b:00007f8512bab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 528.684251][T10106] RAX: ffffffffffffffda RBX: 00007f8512026090 RCX: 00007f8511d9e1d9 [ 528.684258][T10106] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c [ 528.684266][T10106] RBP: 00007f8511e35888 R08: 0000000000000000 R09: 0000000000000000 [ 528.684273][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.684288][T10106] R13: 00007f8512026128 R14: 00007f8512026090 R15: 00007ffd68378768 [ 528.684305][T10106] [ 528.797003][ T7146] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 528.802981][ T5791] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 528.811239][ T5791] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 528.811256][ T5791] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 528.811283][ T5791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.899167][ C0] usb 2-1: received EP1 urb->status = -71 [ 529.021476][ T7146] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 529.117091][ T7146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 529.117108][ T7146] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 529.117129][ T7146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.248509][ T5791] usb 7-1: USB disconnect, device number 24 [ 529.412108][ T10] usb 2-1: unable to init card! (ret=-19) [ 529.417081][ T10] usb 2-1: USB disconnect, device number 27 [ 529.491735][ T7146] usb 6-1: USB disconnect, device number 17 [ 529.634334][T10113] jffs2: notice: (10113) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 530.492821][T10113] lo speed is unknown, defaulting to 1000 [ 530.948310][ T31] audit: type=1400 audit(1791741394.318:712): avc: denied { validate_trans } for pid=10117 comm="syz.5.1182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 531.024608][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 531.344795][ T10] usb 1-1: USB disconnect, device number 30 [ 535.501283][ T5711] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 535.651687][ T5711] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 535.653464][ T5711] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 535.653479][ T5711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.653490][ T5711] usb 2-1: config 0 has no interface number 0 [ 535.653511][ T5711] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 535.653525][ T5711] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 535.653538][ T5711] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.656494][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.656508][ T5711] usb 2-1: Product: syz [ 535.656517][ T5711] usb 2-1: Manufacturer: syz [ 535.656525][ T5711] usb 2-1: SerialNumber: syz [ 535.659646][ T5711] usb 2-1: config 0 descriptor?? [ 536.532658][T10148] lo speed is unknown, defaulting to 1000 [ 538.265439][T10154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.404552][T10155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.457124][ T5711] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 538.491639][ T5711] usb 2-1: USB disconnect, device number 28 [ 538.681429][ T5725] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 538.892316][ T5725] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 538.893085][ T5725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 538.893101][ T5725] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 538.893121][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.858727][T10180] jffs2: notice: (10180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 540.883695][T10180] lo speed is unknown, defaulting to 1000 [ 541.075473][ T5725] usb 1-1: USB disconnect, device number 31 [ 543.475167][T10192] FAULT_INJECTION: forcing a failure. [ 543.475167][T10192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.475191][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.0.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.475215][T10192] Tainted: [L]=SOFTLOCKUP [ 543.475220][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.475228][T10192] Call Trace: [ 543.475232][T10192] [ 543.475237][T10192] dump_stack_lvl+0x100/0x190 [ 543.475258][T10192] should_fail_ex.cold+0x5/0xa [ 543.475275][T10192] _copy_from_user+0x2e/0xd0 [ 543.475293][T10192] copy_msghdr_from_user+0x9f/0x4c0 [ 543.475310][T10192] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 543.475328][T10192] ? lock_acquire+0x1d1/0x380 [ 543.475342][T10192] ? get_pid_task+0x2a/0x250 [ 543.475359][T10192] ___sys_sendmsg+0x106/0x1e0 [ 543.475375][T10192] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.475390][T10192] ? get_pid_task+0x106/0x250 [ 543.475411][T10192] ? find_held_lock+0x2b/0x80 [ 543.475438][T10192] __sys_sendmsg+0x160/0x210 [ 543.475450][T10192] ? __pfx___sys_sendmsg+0x10/0x10 [ 543.475470][T10192] do_syscall_64+0x123/0x790 [ 543.475488][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.475500][T10192] RIP: 0033:0x7fbaeef9e1d9 [ 543.475510][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.475521][T10192] RSP: 002b:00007fbaefda2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.475532][T10192] RAX: ffffffffffffffda RBX: 00007fbaef225fa0 RCX: 00007fbaeef9e1d9 [ 543.475539][T10192] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000009 [ 543.475546][T10192] RBP: 00007fbaefda2090 R08: 0000000000000000 R09: 0000000000000000 [ 543.475553][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.475559][T10192] R13: 00007fbaef226038 R14: 00007fbaef225fa0 R15: 00007fff9c650008 [ 543.475575][T10192] [ 543.476288][ T31] audit: type=1400 audit(1791741406.848:713): avc: denied { bind } for pid=10191 comm="syz.0.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 545.101149][ T5791] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 545.251853][ T5791] usb 1-1: Using ep0 maxpacket: 16 [ 545.252315][ T5791] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 545.253138][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.253155][ T5791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.253176][ T5791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 545.253198][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.254710][ T5791] usb 1-1: config 0 descriptor?? [ 545.317968][ T5725] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 546.248607][ T5725] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 546.261977][ T5725] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 546.262007][ T5725] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.262019][ T5725] usb 7-1: config 0 has no interface number 0 [ 546.262055][ T5725] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 546.262070][ T5725] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 546.262082][ T5725] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.263917][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.263933][ T5725] usb 7-1: Product: syz [ 546.263941][ T5725] usb 7-1: Manufacturer: syz [ 546.263950][ T5725] usb 7-1: SerialNumber: syz [ 546.265706][ T5725] usb 7-1: config 0 descriptor?? [ 546.479177][ T5791] hid_parser_main: 12 callbacks suppressed [ 546.479192][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.479488][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.479505][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.479519][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.479533][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.479560][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.479575][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.479590][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.479604][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.479618][ T5791] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 546.591987][ T5791] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001E/input/input50 [ 546.676166][ T5791] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 546.840239][ T5791] usb 1-1: USB disconnect, device number 32 [ 546.913413][ T5725] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 546.948924][ T5725] usb 7-1: USB disconnect, device number 25 [ 546.979412][T10219] fido_id[10219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 547.819298][T10221] FAULT_INJECTION: forcing a failure. [ 547.819298][T10221] name failslab, interval 1, probability 0, space 0, times 0 [ 547.819322][T10221] CPU: 0 UID: 0 PID: 10221 Comm: syz.4.1207 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.819339][T10221] Tainted: [L]=SOFTLOCKUP [ 547.819343][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 547.819350][T10221] Call Trace: [ 547.819355][T10221] [ 547.819359][T10221] dump_stack_lvl+0x100/0x190 [ 547.819382][T10221] should_fail_ex.cold+0x5/0xa [ 547.819401][T10221] should_failslab+0xc2/0x120 [ 547.819417][T10221] kmem_cache_alloc_noprof+0x92/0x6a0 [ 547.819439][T10221] ? __pfx_map_id_range_down+0x10/0x10 [ 547.819455][T10221] ? security_inode_alloc+0x3b/0x2c0 [ 547.819474][T10221] security_inode_alloc+0x3b/0x2c0 [ 547.819489][T10221] inode_init_always_gfp+0xc6f/0xfb0 [ 547.819508][T10221] alloc_inode+0x8e/0x250 [ 547.819522][T10221] new_inode+0x22/0x1c0 [ 547.819533][T10221] ? refcount_dec_not_one+0x136/0x1c0 [ 547.819551][T10221] mqueue_get_inode+0x2e/0xe00 [ 547.819563][T10221] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 547.819575][T10221] ? __kasan_kmalloc+0xaa/0xb0 [ 547.819591][T10221] ? __pfx_mqueue_fill_super+0x10/0x10 [ 547.819603][T10221] mqueue_fill_super+0x145/0x250 [ 547.819615][T10221] get_tree_nodev+0xdd/0x190 [ 547.819630][T10221] mqueue_get_tree+0xf1/0x130 [ 547.819643][T10221] vfs_get_tree+0x92/0x320 [ 547.819655][T10221] fc_mount_longterm+0x1a/0x270 [ 547.819670][T10221] mq_init_ns+0x482/0x820 [ 547.819686][T10221] copy_ipcs+0x3dd/0x7e0 [ 547.819702][T10221] create_new_namespaces+0x20a/0xac0 [ 547.819716][T10221] ? security_capable+0x80/0x260 [ 547.819731][T10221] unshare_nsproxy_namespaces+0xf2/0x220 [ 547.819747][T10221] ksys_unshare+0x4a2/0xb30 [ 547.819761][T10221] ? __pfx_ksys_unshare+0x10/0x10 [ 547.819781][T10221] __x64_sys_unshare+0x31/0x40 [ 547.819794][T10221] do_syscall_64+0x123/0x790 [ 547.819812][T10221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.819825][T10221] RIP: 0033:0x7fd8c559e1d9 [ 547.819835][T10221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.819846][T10221] RSP: 002b:00007fd8c6503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 547.819857][T10221] RAX: ffffffffffffffda RBX: 00007fd8c5825fa0 RCX: 00007fd8c559e1d9 [ 547.819865][T10221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 547.819872][T10221] RBP: 00007fd8c5635888 R08: 0000000000000000 R09: 0000000000000000 [ 547.819878][T10221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.819885][T10221] R13: 00007fd8c5826038 R14: 00007fd8c5825fa0 R15: 00007ffdf18b0e18 [ 547.819901][T10221] [ 548.762455][T10228] input: syz0 as /devices/virtual/input/input51 [ 548.873808][T10230] fuse: fd is not a fuse device [ 548.959603][T10228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1215'. [ 548.959632][T10228] openvswitch: netlink: Flow key attr not present in new flow. [ 549.273855][T10240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 549.324038][ T5725] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 549.522831][ T5725] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 549.523743][ T5725] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.523776][ T5725] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 549.529114][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.529128][ T5725] usb 6-1: Product: syz [ 549.529136][ T5725] usb 6-1: Manufacturer: syz [ 549.529144][ T5725] usb 6-1: SerialNumber: syz [ 552.250653][ C0] usb 6-1: received EP1 urb->status = -71 [ 552.295184][ T5725] usb 6-1: unable to init card! (ret=-19) [ 552.310081][ T5725] usb 6-1: USB disconnect, device number 18 [ 553.572704][ T5711] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 553.724300][ T5711] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 553.725113][ T5711] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 553.725128][ T5711] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.725138][ T5711] usb 6-1: config 0 has no interface number 0 [ 553.725160][ T5711] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 553.725175][ T5711] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 553.725187][ T5711] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.726676][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.726691][ T5711] usb 6-1: Product: syz [ 553.726699][ T5711] usb 6-1: Manufacturer: syz [ 553.726707][ T5711] usb 6-1: SerialNumber: syz [ 553.780524][ T5711] usb 6-1: config 0 descriptor?? [ 554.198284][ T5711] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 554.222934][ T5711] usb 6-1: USB disconnect, device number 19 [ 554.807053][T10273] FAULT_INJECTION: forcing a failure. [ 554.807053][T10273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.807075][T10273] CPU: 0 UID: 0 PID: 10273 Comm: syz.1.1224 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.807092][T10273] Tainted: [L]=SOFTLOCKUP [ 554.807096][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 554.807104][T10273] Call Trace: [ 554.807108][T10273] [ 554.807113][T10273] dump_stack_lvl+0x100/0x190 [ 554.807132][T10273] should_fail_ex.cold+0x5/0xa [ 554.807150][T10273] _copy_from_user+0x2e/0xd0 [ 554.807168][T10273] copy_mount_options+0x76/0x190 [ 554.807184][T10273] __x64_sys_mount+0x1ab/0x310 [ 554.807197][T10273] ? __pfx___x64_sys_mount+0x10/0x10 [ 554.807214][T10273] do_syscall_64+0x123/0x790 [ 554.807233][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.807244][T10273] RIP: 0033:0x7fcf5eb9e1d9 [ 554.807255][T10273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.807266][T10273] RSP: 002b:00007fcf5fb00028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 554.807278][T10273] RAX: ffffffffffffffda RBX: 00007fcf5ee25fa0 RCX: 00007fcf5eb9e1d9 [ 554.807286][T10273] RDX: 0000200000000f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.807293][T10273] RBP: 00007fcf5ec35888 R08: 0000200000000f80 R09: 0000000000000000 [ 554.807300][T10273] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 554.807307][T10273] R13: 00007fcf5ee26038 R14: 00007fcf5ee25fa0 R15: 00007fffd1ba29b8 [ 554.807322][T10273] [ 555.893301][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1230'. [ 555.981374][ T5711] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 556.161411][ T5711] usb 6-1: Using ep0 maxpacket: 16 [ 556.161831][ T5711] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 556.162574][ T5711] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.162591][ T5711] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.162603][ T5711] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.162618][ T5711] usb 6-1: config 0 interface 0 has no altsetting 0 [ 556.162635][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.164309][ T5711] usb 6-1: config 0 descriptor?? [ 557.311347][ T5725] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 558.089509][T10291] FAULT_INJECTION: forcing a failure. [ 558.089509][T10291] name failslab, interval 1, probability 0, space 0, times 0 [ 558.089532][T10291] CPU: 0 UID: 0 PID: 10291 Comm: syz.1.1233 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.089549][T10291] Tainted: [L]=SOFTLOCKUP [ 558.089553][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 558.089560][T10291] Call Trace: [ 558.089565][T10291] [ 558.089570][T10291] dump_stack_lvl+0x100/0x190 [ 558.089593][T10291] should_fail_ex.cold+0x5/0xa [ 558.089613][T10291] should_failslab+0xc2/0x120 [ 558.089631][T10291] kmem_cache_alloc_noprof+0x92/0x6a0 [ 558.089646][T10291] ? __pfx_map_id_range_down+0x10/0x10 [ 558.089661][T10291] ? security_inode_alloc+0x3b/0x2c0 [ 558.089683][T10291] security_inode_alloc+0x3b/0x2c0 [ 558.089698][T10291] inode_init_always_gfp+0xc6f/0xfb0 [ 558.089717][T10291] alloc_inode+0x8e/0x250 [ 558.089731][T10291] new_inode+0x22/0x1c0 [ 558.089742][T10291] ? refcount_dec_not_one+0x136/0x1c0 [ 558.089760][T10291] mqueue_get_inode+0x2e/0xe00 [ 558.089772][T10291] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 558.089784][T10291] ? __kasan_kmalloc+0xaa/0xb0 [ 558.089800][T10291] ? __pfx_mqueue_fill_super+0x10/0x10 [ 558.089811][T10291] mqueue_fill_super+0x145/0x250 [ 558.089824][T10291] get_tree_nodev+0xdd/0x190 [ 558.089839][T10291] mqueue_get_tree+0xf1/0x130 [ 558.089852][T10291] vfs_get_tree+0x92/0x320 [ 558.089864][T10291] fc_mount_longterm+0x1a/0x270 [ 558.089880][T10291] mq_init_ns+0x482/0x820 [ 558.089895][T10291] copy_ipcs+0x3dd/0x7e0 [ 558.089911][T10291] create_new_namespaces+0x20a/0xac0 [ 558.089925][T10291] ? security_capable+0x80/0x260 [ 558.089941][T10291] unshare_nsproxy_namespaces+0xf2/0x220 [ 558.089956][T10291] ksys_unshare+0x4a2/0xb30 [ 558.089971][T10291] ? __pfx_ksys_unshare+0x10/0x10 [ 558.089991][T10291] __x64_sys_unshare+0x31/0x40 [ 558.090004][T10291] do_syscall_64+0x123/0x790 [ 558.090023][T10291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.090035][T10291] RIP: 0033:0x7fcf5eb9e1d9 [ 558.090046][T10291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.090057][T10291] RSP: 002b:00007fcf5fb00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 558.090068][T10291] RAX: ffffffffffffffda RBX: 00007fcf5ee25fa0 RCX: 00007fcf5eb9e1d9 [ 558.090076][T10291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 558.090082][T10291] RBP: 00007fcf5ec35888 R08: 0000000000000000 R09: 0000000000000000 [ 558.090088][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.090095][T10291] R13: 00007fcf5ee26038 R14: 00007fcf5ee25fa0 R15: 00007fffd1ba29b8 [ 558.090111][T10291] [ 558.355305][ T5725] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 558.386748][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.386783][ T5725] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 558.482982][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.482999][ T5725] usb 1-1: Product: syz [ 558.483007][ T5725] usb 1-1: Manufacturer: syz [ 558.483016][ T5725] usb 1-1: SerialNumber: syz [ 558.677103][ T5711] hid-multitouch 0003:0EEF:72C4.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 559.624836][ T5711] usb 6-1: USB disconnect, device number 20 [ 559.841742][ C0] usb 1-1: received EP1 urb->status = -71 [ 559.970198][T10307] bond0: (slave bond_slave_1): Releasing backup interface [ 560.123367][ T31] audit: type=1326 audit(1791741423.498:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10306 comm="syz.6.1229" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d3cd9e1d9 code=0x0 [ 560.987443][ T5725] usb 1-1: unable to init card! (ret=-19) [ 561.003074][ T5725] usb 1-1: USB disconnect, device number 33 [ 561.951311][ T5725] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 562.101259][ T5725] usb 1-1: Using ep0 maxpacket: 16 [ 562.101694][ T5725] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 562.104833][ T5725] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.104859][ T5725] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.104872][ T5725] usb 1-1: config 0 interface 0 has no altsetting 0 [ 562.104890][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.108257][ T5725] usb 1-1: config 0 descriptor?? [ 562.318372][T10327] overlay: Unknown parameter ':' [ 562.613531][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.613566][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.635873][ T5725] usbhid 1-1:0.0: can't add hid device: -71 [ 562.635938][ T5725] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 563.485478][ T5725] usb 1-1: USB disconnect, device number 34 [ 566.898948][T10355] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 566.979569][T10357] fuse: Bad value for 'fd' [ 567.077391][ T5615] Bluetooth: hci2: unexpected event for opcode 0x200c [ 567.365562][T10368] overlay: Unknown parameter ':' [ 567.402236][ T5725] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 567.591653][ T5725] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 567.592409][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.592444][ T5725] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 567.596160][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.596175][ T5725] usb 2-1: Product: syz [ 567.596183][ T5725] usb 2-1: Manufacturer: syz [ 567.596192][ T5725] usb 2-1: SerialNumber: syz [ 569.733012][ T5711] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 569.882656][ T5711] usb 7-1: Using ep0 maxpacket: 16 [ 569.883116][ T5711] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 569.887040][ T5711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.887055][ T5711] usb 7-1: Product: syz [ 569.887063][ T5711] usb 7-1: Manufacturer: syz [ 569.887071][ T5711] usb 7-1: SerialNumber: syz [ 569.974246][ C0] usb 2-1: received EP1 urb->status = -2 [ 569.974386][ T5725] usb 2-1: unable to init card! (ret=-19) [ 570.029676][T10383] jffs2: notice: (10383) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 571.001597][ T10] usb 2-1: USB disconnect, device number 29 [ 571.036520][T10383] lo speed is unknown, defaulting to 1000 [ 571.168478][ T5711] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 571.336025][ T5711] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 571.336201][ T5711] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 571.336225][ T5711] usb 7-1: media controller created [ 571.492252][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1258'. [ 571.492283][T10387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1258'. [ 571.568464][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.728671][ T5711] zl10353_read_register: readreg error (reg=127, ret==-71) [ 571.863294][T10389] FAULT_INJECTION: forcing a failure. [ 571.863294][T10389] name failslab, interval 1, probability 0, space 0, times 0 [ 571.863317][T10389] CPU: 0 UID: 0 PID: 10389 Comm: syz.0.1260 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.863333][T10389] Tainted: [L]=SOFTLOCKUP [ 571.863338][T10389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 571.863345][T10389] Call Trace: [ 571.863349][T10389] [ 571.863354][T10389] dump_stack_lvl+0x100/0x190 [ 571.863377][T10389] should_fail_ex.cold+0x5/0xa [ 571.863395][T10389] should_failslab+0xc2/0x120 [ 571.863413][T10389] kmem_cache_alloc_noprof+0x92/0x6a0 [ 571.863428][T10389] ? __pfx_map_id_range_down+0x10/0x10 [ 571.863442][T10389] ? security_inode_alloc+0x3b/0x2c0 [ 571.863462][T10389] security_inode_alloc+0x3b/0x2c0 [ 571.863478][T10389] inode_init_always_gfp+0xc6f/0xfb0 [ 571.863497][T10389] alloc_inode+0x8e/0x250 [ 571.863511][T10389] new_inode+0x22/0x1c0 [ 571.863522][T10389] ? refcount_dec_not_one+0x136/0x1c0 [ 571.863540][T10389] mqueue_get_inode+0x2e/0xe00 [ 571.863552][T10389] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 571.863564][T10389] ? __kasan_kmalloc+0xaa/0xb0 [ 571.863580][T10389] ? __pfx_mqueue_fill_super+0x10/0x10 [ 571.863592][T10389] mqueue_fill_super+0x145/0x250 [ 571.863604][T10389] get_tree_nodev+0xdd/0x190 [ 571.863620][T10389] mqueue_get_tree+0xf1/0x130 [ 571.863632][T10389] vfs_get_tree+0x92/0x320 [ 571.863644][T10389] fc_mount_longterm+0x1a/0x270 [ 571.863660][T10389] mq_init_ns+0x482/0x820 [ 571.863676][T10389] copy_ipcs+0x3dd/0x7e0 [ 571.863692][T10389] create_new_namespaces+0x20a/0xac0 [ 571.863706][T10389] ? security_capable+0x80/0x260 [ 571.863721][T10389] unshare_nsproxy_namespaces+0xf2/0x220 [ 571.863736][T10389] ksys_unshare+0x4a2/0xb30 [ 571.863750][T10389] ? __pfx_ksys_unshare+0x10/0x10 [ 571.863770][T10389] __x64_sys_unshare+0x31/0x40 [ 571.863784][T10389] do_syscall_64+0x123/0x790 [ 571.863802][T10389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.863814][T10389] RIP: 0033:0x7fbaeef9e1d9 [ 571.863825][T10389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.863836][T10389] RSP: 002b:00007fbaefda2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 571.863848][T10389] RAX: ffffffffffffffda RBX: 00007fbaef225fa0 RCX: 00007fbaeef9e1d9 [ 571.863855][T10389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 571.863862][T10389] RBP: 00007fbaef035888 R08: 0000000000000000 R09: 0000000000000000 [ 571.863868][T10389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.863875][T10389] R13: 00007fbaef226038 R14: 00007fbaef225fa0 R15: 00007fff9c650008 [ 571.863891][T10389] [ 572.293651][ T5711] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 572.322874][ T5711] usb 7-1: USB disconnect, device number 26 [ 573.062501][T10392] FAULT_INJECTION: forcing a failure. [ 573.062501][T10392] name failslab, interval 1, probability 0, space 0, times 0 [ 573.062525][T10392] CPU: 0 UID: 0 PID: 10392 Comm: syz.5.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.062541][T10392] Tainted: [L]=SOFTLOCKUP [ 573.062545][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 573.062553][T10392] Call Trace: [ 573.062557][T10392] [ 573.062562][T10392] dump_stack_lvl+0x100/0x190 [ 573.062583][T10392] should_fail_ex.cold+0x5/0xa [ 573.062601][T10392] should_failslab+0xc2/0x120 [ 573.062619][T10392] kmem_cache_alloc_noprof+0x92/0x6a0 [ 573.062633][T10392] ? __pfx_map_id_range_down+0x10/0x10 [ 573.062648][T10392] ? security_inode_alloc+0x3b/0x2c0 [ 573.062666][T10392] security_inode_alloc+0x3b/0x2c0 [ 573.062681][T10392] inode_init_always_gfp+0xc6f/0xfb0 [ 573.062700][T10392] alloc_inode+0x8e/0x250 [ 573.062713][T10392] new_inode+0x22/0x1c0 [ 573.062725][T10392] ? refcount_dec_not_one+0x136/0x1c0 [ 573.062743][T10392] mqueue_get_inode+0x2e/0xe00 [ 573.062755][T10392] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 573.062767][T10392] ? __kasan_kmalloc+0xaa/0xb0 [ 573.062782][T10392] ? __pfx_mqueue_fill_super+0x10/0x10 [ 573.062794][T10392] mqueue_fill_super+0x145/0x250 [ 573.062806][T10392] get_tree_nodev+0xdd/0x190 [ 573.062822][T10392] mqueue_get_tree+0xf1/0x130 [ 573.062834][T10392] vfs_get_tree+0x92/0x320 [ 573.062846][T10392] fc_mount_longterm+0x1a/0x270 [ 573.062861][T10392] mq_init_ns+0x482/0x820 [ 573.062877][T10392] copy_ipcs+0x3dd/0x7e0 [ 573.062892][T10392] create_new_namespaces+0x20a/0xac0 [ 573.062906][T10392] ? security_capable+0x80/0x260 [ 573.062921][T10392] unshare_nsproxy_namespaces+0xf2/0x220 [ 573.062936][T10392] ksys_unshare+0x4a2/0xb30 [ 573.062950][T10392] ? __pfx_ksys_unshare+0x10/0x10 [ 573.062970][T10392] __x64_sys_unshare+0x31/0x40 [ 573.062983][T10392] do_syscall_64+0x123/0x790 [ 573.063001][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.063013][T10392] RIP: 0033:0x7f8511d9e1d9 [ 573.063023][T10392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.063034][T10392] RSP: 002b:00007f8512bcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 573.063050][T10392] RAX: ffffffffffffffda RBX: 00007f8512025fa0 RCX: 00007f8511d9e1d9 [ 573.063057][T10392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 573.063064][T10392] RBP: 00007f8511e35888 R08: 0000000000000000 R09: 0000000000000000 [ 573.063071][T10392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.063078][T10392] R13: 00007f8512026038 R14: 00007f8512025fa0 R15: 00007ffd68378768 [ 573.063093][T10392] [ 573.546799][T10399] fuse: Bad value for 'fd' [ 574.934499][T10402] sctp: [Deprecated]: syz.6.1266 (pid 10402) Use of int in max_burst socket option. [ 574.934499][T10402] Use struct sctp_assoc_value instead [ 576.123244][T10412] jffs2: notice: (10412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 576.137382][T10412] lo speed is unknown, defaulting to 1000 [ 576.606957][T10417] FAULT_INJECTION: forcing a failure. [ 576.606957][T10417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.606983][T10417] CPU: 0 UID: 0 PID: 10417 Comm: syz.6.1269 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.607000][T10417] Tainted: [L]=SOFTLOCKUP [ 576.607004][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 576.607012][T10417] Call Trace: [ 576.607016][T10417] [ 576.607021][T10417] dump_stack_lvl+0x100/0x190 [ 576.607043][T10417] should_fail_ex.cold+0x5/0xa [ 576.607063][T10417] _copy_from_user+0x2e/0xd0 [ 576.607081][T10417] copy_mount_options+0x76/0x190 [ 576.607097][T10417] __x64_sys_mount+0x1ab/0x310 [ 576.607111][T10417] ? __pfx___x64_sys_mount+0x10/0x10 [ 576.607129][T10417] do_syscall_64+0x123/0x790 [ 576.607147][T10417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.607159][T10417] RIP: 0033:0x7f5d3cd9e1d9 [ 576.607169][T10417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.607181][T10417] RSP: 002b:00007f5d3dc18028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 576.607192][T10417] RAX: ffffffffffffffda RBX: 00007f5d3d025fa0 RCX: 00007f5d3cd9e1d9 [ 576.607200][T10417] RDX: 0000200000000f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.607206][T10417] RBP: 00007f5d3ce35888 R08: 0000200000000f80 R09: 0000000000000000 [ 576.607213][T10417] R10: 000000000002002a R11: 0000000000000246 R12: 0000000000000000 [ 576.607220][T10417] R13: 00007f5d3d026038 R14: 00007f5d3d025fa0 R15: 00007ffd78280e08 [ 576.607235][T10417] [ 577.051224][ T5711] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 577.212079][ T5711] usb 1-1: Using ep0 maxpacket: 32 [ 577.212696][ T5711] usb 1-1: New USB device found, idVendor=1bac, idProduct=0304, bcdDevice= 0.00 [ 577.243227][ T5711] usb 1-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 577.243253][ T5711] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.243269][ T5711] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 577.243283][ T5711] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.243302][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.314207][ T5711] usb 1-1: config 0 descriptor?? [ 577.363147][ T5725] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 577.421326][ T9] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 577.516502][ T5725] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 577.517291][ T5725] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 577.517307][ T5725] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 577.517340][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.573600][ T9] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 577.575935][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.575968][ T9] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 577.580823][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.580843][ T9] usb 6-1: Product: syz [ 577.580852][ T9] usb 6-1: Manufacturer: syz [ 577.580860][ T9] usb 6-1: SerialNumber: syz [ 577.784193][ T5725] usb 5-1: USB disconnect, device number 47 [ 578.755257][T10425] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 578.856102][ T31] audit: type=1400 audit(1791741442.228:715): avc: denied { setopt } for pid=10424 comm="syz.6.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 578.983201][ T5711] usbhid 1-1:0.0: can't add hid device: -71 [ 578.983277][ T5711] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 578.990042][ T5711] usb 1-1: USB disconnect, device number 35 [ 579.068066][ C0] usb 6-1: received EP1 urb->status = -71 [ 580.175188][ T9] usb 6-1: unable to init card! (ret=-19) [ 580.178045][ T9] usb 6-1: USB disconnect, device number 21 [ 580.202504][T10444] xt_ecn: cannot match TCP bits for non-tcp packets [ 580.434735][T10447] ovs-dp0: entered promiscuous mode [ 580.452870][ T31] audit: type=1400 audit(1791741443.828:716): avc: denied { listen } for pid=10446 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 581.094294][ T5711] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 581.774001][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 581.837192][ T5711] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 581.980958][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.980977][ T5711] usb 2-1: Product: syz [ 581.980985][ T5711] usb 2-1: Manufacturer: syz [ 581.980994][ T5711] usb 2-1: SerialNumber: syz [ 582.235782][ T5711] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 582.254262][ T5711] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 582.259451][ T5711] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 582.259483][ T5711] usb 2-1: media controller created [ 582.313841][T10468] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1286'. [ 582.316591][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.484844][ T5711] zl10353_read_register: readreg error (reg=127, ret==-71) [ 582.565957][ T31] audit: type=1400 audit(1791741445.938:717): avc: denied { write } for pid=10470 comm="syz.0.1287" name="functions" dev="configfs" ino=14106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 582.566601][T10471] LUN: removable file: (no medium) [ 582.615956][ T5711] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 582.634608][ T5711] usb 2-1: USB disconnect, device number 30 [ 582.887074][ T31] audit: type=1400 audit(1791741446.258:718): avc: denied { getattr } for pid=10474 comm="syz.0.1289" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 582.924979][ T31] audit: type=1400 audit(1791741446.298:719): avc: denied { append } for pid=10474 comm="syz.0.1289" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 582.966345][ T31] audit: type=1400 audit(1791741446.338:720): avc: denied { setopt } for pid=10474 comm="syz.0.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 583.088510][ T7146] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 583.253308][ T7146] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 583.254775][ T7146] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 583.254792][ T7146] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 583.254812][ T7146] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.361192][ T9] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 583.426176][T10494] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 583.426191][T10494] audit: out of memory in audit_log_start [ 583.426357][ T31] audit: type=1400 audit(1791741446.798:721): avc: denied { open } for pid=10493 comm="syz.4.1295" path="/" dev="nullfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 583.439232][ T5725] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 583.492685][ T7146] usb 7-1: USB disconnect, device number 27 [ 583.541300][ T5791] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 583.542358][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 583.543118][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.543149][ T9] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 583.544681][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.544695][ T9] usb 1-1: Product: syz [ 583.544703][ T9] usb 1-1: Manufacturer: syz [ 583.544712][ T9] usb 1-1: SerialNumber: syz [ 583.624730][ T5725] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 583.627576][ T5725] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 583.627594][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 583.627608][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 583.627631][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.629061][ T5725] usb 6-1: config 0 descriptor?? [ 583.691723][ T5791] usb 2-1: Using ep0 maxpacket: 8 [ 583.692407][ T5791] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 583.695233][T10486] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 583.695401][ T5791] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 583.695416][ T5791] usb 2-1: config 179 has no interface number 0 [ 583.695436][ T5791] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 583.695451][ T5791] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 583.695465][ T5791] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.695479][ T5791] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 583.695492][ T5791] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 583.695513][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.699379][T10492] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 583.868146][ T31] audit: type=1400 audit(1791741447.238:722): avc: denied { read } for pid=10495 comm="syz.4.1296" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 583.868446][ T31] audit: type=1400 audit(1791741447.238:723): avc: denied { open } for pid=10495 comm="syz.4.1296" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 583.944476][ T31] audit: type=1400 audit(1791741447.318:724): avc: denied { setattr } for pid=10488 comm="syz.1.1294" path="pipe:[33260]" dev="pipefs" ino=33260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 583.945228][ T31] audit: type=1400 audit(1791741447.318:725): avc: denied { ioctl } for pid=10495 comm="syz.4.1296" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 583.947077][ T5791] usb 2-1: USB disconnect, device number 31 [ 583.947165][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 583.947192][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 583.949461][T10496] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 584.151748][ T5725] hid_parser_main: 1 callbacks suppressed [ 584.151764][ T5725] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 584.151782][ T5725] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 584.151797][ T5725] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 584.151831][ T5725] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 584.151846][ T5725] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 584.151861][ T5725] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 584.151875][ T5725] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 584.191542][ T5725] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 584.327873][T10505] Bluetooth: MGMT ver 1.23 [ 584.345664][ T5725] cp2112 0003:10C4:EA90.0020: Part Number: 0x00 Device Version: 0x00 [ 584.667800][ C0] usb 1-1: received EP1 urb->status = -71 [ 585.433495][ T9] usb 1-1: unable to init card! (ret=-19) [ 585.437562][ T9] usb 1-1: USB disconnect, device number 36 [ 585.569476][ T5725] cp2112 0003:10C4:EA90.0020: error setting SMBus config [ 585.580804][ T5725] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -71 [ 585.591146][ T7146] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 585.609922][ T5725] usb 6-1: USB disconnect, device number 22 [ 585.741798][ T7146] usb 2-1: Using ep0 maxpacket: 16 [ 585.742491][ T7146] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 585.744458][ T7146] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 585.744472][ T7146] usb 2-1: config 0 has no interface number 0 [ 585.745963][ T7146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.745977][ T7146] usb 2-1: Product: syz [ 585.745986][ T7146] usb 2-1: Manufacturer: syz [ 585.745994][ T7146] usb 2-1: SerialNumber: syz [ 585.749087][ T7146] usb 2-1: config 0 descriptor?? [ 585.818106][ T7146] hub 2-1:0.132: bad descriptor, ignoring hub [ 585.818122][ T7146] hub 2-1:0.132: probe with driver hub failed with error -5 [ 585.838801][ T7146] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input55 [ 585.985702][T10514] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 585.985717][T10514] audit: out of memory in audit_log_start [ 586.101730][ T5791] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 586.229953][T10526] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1305'. [ 586.262643][ T5791] usb 5-1: Using ep0 maxpacket: 16 [ 586.264961][ T5791] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 586.287469][ T5791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.287486][ T5791] usb 5-1: Product: syz [ 586.287495][ T5791] usb 5-1: Manufacturer: syz [ 586.287504][ T5791] usb 5-1: SerialNumber: syz [ 586.600417][ T5791] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 586.621852][ T5791] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 586.625652][ T5791] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 586.625687][ T5791] usb 5-1: media controller created [ 586.693076][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.431211][ T7146] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 587.521655][T10522] ------------[ cut here ]------------ [ 587.521669][T10522] usb 5-1: BOGUS control dir, pipe 80003080 doesn't match bRequestType c0 [ 587.521682][T10522] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#0: syz.4.1303/10522 [ 587.547702][T10522] Modules linked in: [ 587.551632][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.4.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.562615][T10522] Tainted: [L]=SOFTLOCKUP [ 587.566944][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 587.577191][T10522] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 587.583934][T10522] Code: 48 89 54 24 40 e8 93 d3 7a fa 4c 89 e7 e8 db c1 da fe 48 89 c6 48 8d 3d 11 22 c1 0a 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 64 d3 7a fa 89 ee bf ff 00 00 00 [ 587.604048][T10522] RSP: 0018:ffffc90004597920 EFLAGS: 00010287 [ 587.610100][T10522] RAX: ffffffff8cc88cc0 RBX: ffff888058a41300 RCX: 0000000080003080 [ 587.618125][T10522] RDX: ffff888038c94c20 RSI: ffffffff8cc88cc0 RDI: ffffffff925294e0 [ 587.626113][T10522] RBP: ffff88807cdf0058 R08: 00000000000000c0 R09: 0000000000000000 [ 587.634266][T10522] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807cdf00b0 [ 587.642293][T10522] R13: ffff88805807c060 R14: ffff88805807c066 R15: ffff88805807c067 [ 587.650240][T10522] FS: 00007fd8c65036c0(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 587.659529][T10522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 587.666123][T10522] CR2: 00007f5d3db556c8 CR3: 000000007d029000 CR4: 00000000003526f0 [ 587.674089][T10522] Call Trace: [ 587.677343][T10522] [ 587.680251][T10522] ? __init_swait_queue_head+0xca/0x150 [ 587.686422][T10522] usb_start_wait_urb+0x10e/0x580 [ 587.691805][T10522] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 587.697339][T10522] ? __asan_memset+0x23/0x50 [ 587.701951][T10522] usb_control_msg+0x328/0x4b0 [ 587.706695][T10522] ? __pfx_usb_control_msg+0x10/0x10 [ 587.711991][T10522] ? rt_mutex_slowlock_block.constprop.0+0x383/0x7c0 [ 587.718648][T10522] ? rt_mutex_slowlock_block.constprop.0+0x56/0x7c0 [ 587.725244][T10522] gl861_ctrl_msg+0x1a5/0x4a0 [ 587.729902][T10522] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 587.735223][T10522] gl861_i2c_master_xfer+0x545/0x690 [ 587.740486][T10522] ? mark_held_locks+0x40/0x70 [ 587.745264][T10522] __i2c_transfer+0x5d4/0x1740 [ 587.750007][T10522] ? __pfx___i2c_transfer+0x10/0x10 [ 587.755210][T10522] i2c_transfer+0x158/0x380 [ 587.759692][T10522] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 587.764636][T10522] i2cdev_ioctl+0x19d/0x830 [ 587.769114][T10522] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 587.774136][T10522] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 587.779135][T10522] __x64_sys_ioctl+0x18e/0x210 [ 587.783907][T10522] do_syscall_64+0x123/0x790 [ 587.789072][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.795322][T10522] RIP: 0033:0x7fd8c559e1d9 [ 587.799715][T10522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.819392][T10522] RSP: 002b:00007fd8c6503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.827894][T10522] RAX: ffffffffffffffda RBX: 00007fd8c5825fa0 RCX: 00007fd8c559e1d9 [ 587.835872][T10522] RDX: 0000200000000740 RSI: 0000000000000707 RDI: 0000000000000004 [ 587.843833][T10522] RBP: 00007fd8c5635888 R08: 0000000000000000 R09: 0000000000000000 [ 587.851808][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.859754][T10522] R13: 00007fd8c5826038 R14: 00007fd8c5825fa0 R15: 00007ffdf18b0e18 [ 587.867751][T10522] [ 587.870746][T10522] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 587.877996][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.4.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.888896][T10522] Tainted: [L]=SOFTLOCKUP [ 587.893199][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 587.903224][T10522] Call Trace: [ 587.906478][T10522] [ 587.909382][T10522] dump_stack_lvl+0x100/0x190 [ 587.914039][T10522] vpanic+0x553/0x970 [ 587.917991][T10522] ? __pfx_vpanic+0x10/0x10 [ 587.922468][T10522] panic+0xd1/0xe0 [ 587.926160][T10522] ? __pfx_panic+0x10/0x10 [ 587.930552][T10522] check_panic_on_warn.cold+0x19/0x34 [ 587.935892][T10522] ? usb_submit_urb+0x15ff/0x19b0 [ 587.940892][T10522] __warn.cold+0x191/0x318 [ 587.945279][T10522] __report_bug+0x30f/0x440 [ 587.949757][T10522] ? usb_submit_urb+0x15ff/0x19b0 [ 587.954755][T10522] ? __pfx___report_bug+0x10/0x10 [ 587.959752][T10522] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 587.965548][T10522] ? lockdep_hardirqs_on+0x7d/0x110 [ 587.970727][T10522] ? kasan_save_stack+0x3f/0x50 [ 587.975555][T10522] report_bug_entry+0xe2/0x290 [ 587.980293][T10522] ? usb_submit_urb+0x160d/0x19b0 [ 587.985294][T10522] handle_bug+0x1cd/0x2a0 [ 587.989607][T10522] exc_invalid_op+0x17/0x50 [ 587.994081][T10522] asm_exc_invalid_op+0x1a/0x20 [ 587.998903][T10522] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 588.004512][T10522] Code: 48 89 54 24 40 e8 93 d3 7a fa 4c 89 e7 e8 db c1 da fe 48 89 c6 48 8d 3d 11 22 c1 0a 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 64 d3 7a fa 89 ee bf ff 00 00 00 [ 588.024086][T10522] RSP: 0018:ffffc90004597920 EFLAGS: 00010287 [ 588.030123][T10522] RAX: ffffffff8cc88cc0 RBX: ffff888058a41300 RCX: 0000000080003080 [ 588.038065][T10522] RDX: ffff888038c94c20 RSI: ffffffff8cc88cc0 RDI: ffffffff925294e0 [ 588.046006][T10522] RBP: ffff88807cdf0058 R08: 00000000000000c0 R09: 0000000000000000 [ 588.053950][T10522] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807cdf00b0 [ 588.061896][T10522] R13: ffff88805807c060 R14: ffff88805807c066 R15: ffff88805807c067 [ 588.069864][T10522] ? __init_swait_queue_head+0xca/0x150 [ 588.075389][T10522] usb_start_wait_urb+0x10e/0x580 [ 588.080393][T10522] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 588.085921][T10522] ? __asan_memset+0x23/0x50 [ 588.090505][T10522] usb_control_msg+0x328/0x4b0 [ 588.095247][T10522] ? __pfx_usb_control_msg+0x10/0x10 [ 588.100508][T10522] ? rt_mutex_slowlock_block.constprop.0+0x383/0x7c0 [ 588.107152][T10522] ? rt_mutex_slowlock_block.constprop.0+0x56/0x7c0 [ 588.113712][T10522] gl861_ctrl_msg+0x1a5/0x4a0 [ 588.118383][T10522] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 588.123577][T10522] gl861_i2c_master_xfer+0x545/0x690 [ 588.128838][T10522] ? mark_held_locks+0x40/0x70 [ 588.133573][T10522] __i2c_transfer+0x5d4/0x1740 [ 588.138331][T10522] ? __pfx___i2c_transfer+0x10/0x10 [ 588.143507][T10522] i2c_transfer+0x158/0x380 [ 588.147986][T10522] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 588.152901][T10522] i2cdev_ioctl+0x19d/0x830 [ 588.157377][T10522] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 588.162379][T10522] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 588.167376][T10522] __x64_sys_ioctl+0x18e/0x210 [ 588.172113][T10522] do_syscall_64+0x123/0x790 [ 588.176681][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.182544][T10522] RIP: 0033:0x7fd8c559e1d9 [ 588.186932][T10522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.206519][T10522] RSP: 002b:00007fd8c6503028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.214904][T10522] RAX: ffffffffffffffda RBX: 00007fd8c5825fa0 RCX: 00007fd8c559e1d9 [ 588.222857][T10522] RDX: 0000200000000740 RSI: 0000000000000707 RDI: 0000000000000004 [ 588.230801][T10522] RBP: 00007fd8c5635888 R08: 0000000000000000 R09: 0000000000000000 [ 588.238741][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.246682][T10522] R13: 00007fd8c5826038 R14: 00007fd8c5825fa0 R15: 00007ffdf18b0e18 [ 588.254631][T10522] [ 588.257684][T10522] Kernel Offset: disabled [ 588.261986][T10522] Rebooting in 86400 seconds..