last executing test programs: 15.216083637s ago: executing program 4 (id=2077): socket(0x11, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) 14.069822738s ago: executing program 4 (id=2082): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0x0, 0xd, 0x20000008, 0x1, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) socket$inet(0x2b, 0x800, 0x8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 12.342637732s ago: executing program 4 (id=2090): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x64cfb37c}}, 0x10) 10.368078439s ago: executing program 4 (id=2094): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 10.261150019s ago: executing program 4 (id=2097): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback}, 0x1c) socket$inet(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='erofs_destroy_inode\x00', r4, 0x0, 0xfffff7ffffffffff}, 0x13) open_by_handle_at(r4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60380) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002140)=""/102386, 0x18ff2}], 0x1, 0x2, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0xffff) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5cd36a38044fc0c3, 0x13, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000200)) 6.454823727s ago: executing program 1 (id=2113): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 6.244031727s ago: executing program 1 (id=2114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x4000003a, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b637075736574205321a16c6e98e9ab0be6c354391e53504adf212e788be2da7992d0e57e90dd881dc9909d253928bae011a38c69a7b86bcef66c94abe4055bc07f74f33ccf815da9ecc854c2cd1608c879e5"], 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000044"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6.243548334s ago: executing program 1 (id=2115): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) listen(0xffffffffffffffff, 0x90004) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) dup(0xffffffffffffffff) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4e881, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 6.201051374s ago: executing program 1 (id=2116): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$inet(r0, 0x0, 0x0) 5.105468781s ago: executing program 1 (id=2120): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000100)={0x40, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlinkprop={0x38, 0x6c, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x19120, 0x2110}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_PROP_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x1, r6}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f00005ae000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) bind$tipc(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x1) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x540}) 4.326976382s ago: executing program 3 (id=2122): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) recvfrom(r1, &(0x7f00000000c0)=""/209, 0xd1, 0x0, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @my=0x1, 0x13, 0x2, 0x0, 0xfffffffffffff3d6, 0xb8, 0x5, 0x7fff}) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) 3.910383567s ago: executing program 2 (id=2123): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffd, @mcast1}, 0x1c) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="3452fa09003d70814a8dc0743912d96ca64fde52a62baa5df21474d3bdd4bf37c8d820eca432136a01e92599ff1e3706b8c99f", @ANYRES16=r3, @ANYBLOB="01000000000000000000070000002000018014000400ff020000000000000000000000000001060001000a000000"], 0x34}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)=@multiplanar_overlay={0x8, 0x4, 0x4, 0x454e, 0xa1, {0x0, 0xea60}, {0x4, 0x8, 0x10, 0x8, 0xf, 0x5, "be4f17e5"}, 0x2, 0x3, {&(0x7f0000000040)=[{0xfffffffd, 0x36, {0x3}}, {0xfffffffd, 0x81, {0x8001}, 0xfdd}]}, 0x500, 0x0, r4}) connect$netrom(r1, &(0x7f00000001c0)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x2f) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000100)={0x7fff, r6, 0x0, {0xd463}, 0x2}, 0x1) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000340)={0x6, 0x2, 0x2, "e70a98dc94decd544edd8444fc30013020655cc7dda999f8e6d5b45672b17a8d", 0x41564e57}) 3.848102135s ago: executing program 2 (id=2124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r1], 0x9) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_enter(r2, 0xf000, 0x80004000, 0x4f, 0x0, 0x0) close(r0) 3.846989154s ago: executing program 2 (id=2125): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000480)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r2, 0x90004) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 3.775601791s ago: executing program 2 (id=2126): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) listen(0xffffffffffffffff, 0x90004) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) dup(0xffffffffffffffff) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4e881, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.75582145s ago: executing program 2 (id=2127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x8, 0x70, 0x200ab8, 0x9, 0x5, 0x8000, 0x0, 0x3, 0x200, 0x0, 0x10, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000011c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x20, 0x87, 0x2, 0x6}, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 3.428073359s ago: executing program 3 (id=2128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 3.354742775s ago: executing program 3 (id=2129): io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00"}) io_submit(r0, 0x0, &(0x7f00000002c0)) 3.247689162s ago: executing program 3 (id=2130): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$inet(r0, 0x0, 0x0) 3.112076733s ago: executing program 0 (id=2131): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000000)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x17, 0x0) 3.094539625s ago: executing program 0 (id=2132): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 2.990811s ago: executing program 0 (id=2133): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00'}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0x278000003e7, 0x0, 0x1, r4}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2.660057945s ago: executing program 0 (id=2134): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 2.59676618s ago: executing program 0 (id=2135): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_cache\x00') close_range(r0, r0, 0x2) 2.52012468s ago: executing program 0 (id=2136): syz_open_dev$loop(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x4000000, 0x8000}, 0x0) 2.368496459s ago: executing program 3 (id=2137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001500192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000002c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ustat(0xb, &(0x7f0000000780)) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r3, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffffffffa, 0x3fff}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000004500)=ANY=[@ANYBLOB="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"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f7ba4f24880ddb7740cdddff6354566e5ed1f550674c04ef119b42574a04bd5f3163f54c53ca5154f25bdef802498fe7e97a240808b7c4f776303b59f9", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) execveat(r5, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000300)='GPL\x00', &(0x7f0000000340)='#$($-\\/\x17&#@&\'\x00']}, &(0x7f0000000680)={[&(0x7f00000003c0)='/dev/dri/renderD128\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\xd1(+\x00', &(0x7f0000000600)='cpuhp_enter\x00', &(0x7f0000000640)='/dev/iommu\x00']}, 0x1000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000004400)=[{{&(0x7f00000006c0)=@alg, 0x80, &(0x7f0000002b40)=[{&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000008c0)=""/80, 0x50}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/248, 0xf8}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000000740)=""/7, 0x7}], 0x7}, 0x9}, {{&(0x7f0000002bc0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/57, 0x39}, {&(0x7f0000003d00)=""/72, 0x48}, {&(0x7f0000003d80)=""/25, 0x19}, {&(0x7f0000003dc0)=""/101, 0x65}], 0x6, &(0x7f0000003ec0)=""/194, 0xc2}, 0x80}, {{&(0x7f0000003fc0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004040)=""/217, 0xd9}, {&(0x7f0000004140)=""/155, 0x9b}, {&(0x7f0000004200)=""/222, 0xde}, {&(0x7f0000004300)=""/2, 0x2}, {&(0x7f0000004340)=""/23, 0x17}], 0x5}, 0x8}], 0x3, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='cpuhp_enter\x00', r9}, 0x18) io_uring_setup(0x5ab, &(0x7f0000004680)={0x0, 0x8804, 0x800, 0x40000}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) 2.012186166s ago: executing program 3 (id=2138): mkdir(&(0x7f0000000040)='./bus\x00', 0x16) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000920000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) 1.954185847s ago: executing program 1 (id=2139): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x10, 0x20, 0x3, 0xfffffff7, {{0xf, 0x4, 0x0, 0xb, 0x3c, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x7, 0x50, [@multicast1]}, @lsrr={0x83, 0x17, 0x4, [@private=0xa010102, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@RTM_GETMDB={0x18, 0x56, 0x200, 0x70bd29, 0x25dfdbff, {0x7, r1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24000804}, 0xc001) 656.092652ms ago: executing program 2 (id=2140): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x2000c800) 0s ago: executing program 4 (id=2141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x924400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8a00, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x26580) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) kernel console output (not intermixed with test programs): ng Huion firmware version: -71 [ 311.879227][ T5955] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 311.886842][ T5955] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 311.897903][ T5955] usb 5-1: USB disconnect, device number 50 [ 312.394204][ T3093] gspca_sonixj: reg_r err -32 [ 312.398920][ T3093] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 312.517925][T11066] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 312.805885][T11071] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11071 comm=syz.0.1498 [ 313.031275][ T30] audit: type=1400 audit(1755934125.393:1188): avc: denied { create } for pid=11077 comm="syz.4.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 313.067100][ T30] audit: type=1400 audit(1755934125.393:1189): avc: denied { ioctl } for pid=11077 comm="syz.4.1500" path="socket:[31336]" dev="sockfs" ino=31336 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 313.143315][ T30] audit: type=1400 audit(1755934125.393:1190): avc: denied { write } for pid=11077 comm="syz.4.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 313.332271][T11086] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11086 comm=syz.4.1502 [ 313.813557][T11098] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[11098] [ 314.495872][ T1209] usb 4-1: USB disconnect, device number 54 [ 314.579180][ T49] usb 2-1: USB disconnect, device number 57 [ 314.660858][T11108] syzkaller1: entered promiscuous mode [ 314.667582][T11108] syzkaller1: entered allmulticast mode [ 314.685011][T11108] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 314.959570][ T49] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 315.785823][T11139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'. [ 315.794980][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 315.802545][ T30] audit: type=1400 audit(1755934128.163:1191): avc: denied { write } for pid=11138 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 315.823440][ T49] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 315.832674][T11139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1519'. [ 315.841784][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.866016][ T49] pvrusb2: Hardware description: Terratec Grabster AV400 [ 315.877842][ T49] pvrusb2: ********** [ 315.882540][ T49] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 315.930401][ T49] pvrusb2: Important functionality might not be entirely working. [ 315.949606][ T49] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 315.962246][ T49] pvrusb2: ********** [ 316.107816][ T2331] pvrusb2: Invalid write control endpoint [ 316.116795][ T30] audit: type=1400 audit(1755934128.473:1192): avc: denied { write } for pid=11142 comm="syz.3.1521" name="usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 316.189626][ T2331] pvrusb2: Invalid write control endpoint [ 316.208473][ T2331] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 316.229649][ T2331] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 316.237221][ T2331] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 316.253107][ T2331] pvrusb2: Device being rendered inoperable [ 316.259225][ T2331] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 316.350273][ T2331] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 316.358548][T11105] pvrusb2: Attempted to execute control transfer when device not ok [ 316.368878][ T1209] usb 2-1: USB disconnect, device number 58 [ 316.370450][ T2331] pvrusb2: Attached sub-driver cx25840 [ 316.487910][T11156] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 316.716131][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 316.726258][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 316.793161][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.869641][ T5955] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 316.884073][ T30] audit: type=1400 audit(1755934129.243:1193): avc: denied { getopt } for pid=11161 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.973732][T11167] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 316.984581][ T30] audit: type=1400 audit(1755934129.343:1194): avc: denied { relabelto } for pid=11166 comm="syz.4.1529" name="file0" dev="tmpfs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 317.002453][T11167] 9p: Unknown Cache mode or invalid value zea`聇 [ 317.012012][ T30] audit: type=1400 audit(1755934129.343:1195): avc: denied { associate } for pid=11166 comm="syz.4.1529" name="file0" dev="tmpfs" ino=1441 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:textrel_shlib_t:s0" [ 317.054311][ T30] audit: type=1400 audit(1755934129.343:1196): avc: denied { mounton } for pid=11166 comm="syz.4.1529" path="/266/file0" dev="tmpfs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 317.056610][ T5955] usb 4-1: device descriptor read/64, error -71 [ 317.098828][ T30] audit: type=1400 audit(1755934129.443:1197): avc: denied { write } for pid=11166 comm="syz.4.1529" name="file0" dev="tmpfs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 317.182622][ T30] audit: type=1400 audit(1755934129.443:1198): avc: denied { open } for pid=11166 comm="syz.4.1529" name="file0" dev="tmpfs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 317.183240][T11173] overlay: Bad value for 'workdir' [ 317.209776][ T30] audit: type=1400 audit(1755934129.443:1199): avc: denied { read append } for pid=11166 comm="syz.4.1529" name="file0" dev="tmpfs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 317.241875][ T30] audit: type=1400 audit(1755934129.453:1200): avc: denied { ioctl } for pid=11166 comm="syz.4.1529" path="/266/file0" dev="tmpfs" ino=1441 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 317.399699][ T5955] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 317.445777][T11182] bond2: entered promiscuous mode [ 317.450991][T11182] bond2: entered allmulticast mode [ 317.456295][T11182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.465197][T11182] bond2 (unregistering): Released all slaves [ 317.529618][ T5955] usb 4-1: device descriptor read/64, error -71 [ 317.539533][ T5913] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 317.639759][ T5955] usb usb4-port1: attempt power cycle [ 317.704256][ T5913] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 317.717180][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.726803][ T5913] usb 5-1: Product: syz [ 317.731706][ T5913] usb 5-1: Manufacturer: syz [ 317.736475][ T5913] usb 5-1: SerialNumber: syz [ 317.744994][ T5913] usb 5-1: config 0 descriptor?? [ 318.069746][ T5955] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 318.274073][ T5913] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 318.289959][ T5955] usb 4-1: device descriptor read/8, error -71 [ 318.348182][T11195] wireguard: wireguard0: Could not create IPv4 socket [ 318.355078][T11195] wireguard0: entered promiscuous mode [ 318.361172][T11195] wireguard0: entered allmulticast mode [ 318.531253][ T5955] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 318.550137][ T5955] usb 4-1: device descriptor read/8, error -71 [ 318.660255][ T5955] usb usb4-port1: unable to enumerate USB device [ 319.267549][T11208] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 319.276857][T11208] overlayfs: missing 'lowerdir' [ 319.351349][T11214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.358589][T11214] IPv6: NLM_F_CREATE should be set when creating new route [ 319.365802][T11214] IPv6: NLM_F_CREATE should be set when creating new route [ 319.372995][T11214] IPv6: NLM_F_CREATE should be set when creating new route [ 319.549529][ T5955] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 319.696489][T11229] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11229 comm=syz.2.1551 [ 319.709993][ T1209] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 319.801871][ T5955] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 319.841633][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.858338][ T5955] usb 2-1: config 0 descriptor?? [ 319.873414][ T5955] cp210x 2-1:0.0: cp210x converter detected [ 319.890304][ T1209] usb 4-1: Using ep0 maxpacket: 16 [ 319.896738][ T1209] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 319.904931][ T1209] usb 4-1: config 0 has no interface number 0 [ 319.915676][ T1209] usb 4-1: config 0 interface 98 has no altsetting 0 [ 319.931044][ T1209] usb 4-1: New USB device found, idVendor=0bda, idProduct=817b, bcdDevice=54.f5 [ 319.950195][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.212568][ T5955] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 320.217836][ T1209] usb 4-1: Product: syz [ 320.226060][ T5913] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 320.229767][ T1209] usb 4-1: Manufacturer: syz [ 320.251642][ T5913] usb 5-1: USB disconnect, device number 51 [ 320.257624][ T5955] cp210x 2-1:0.0: querying part number failed [ 320.259264][ T1209] usb 4-1: SerialNumber: syz [ 320.275192][ T5955] usb 2-1: cp210x converter now attached to ttyUSB0 [ 320.284465][ T1209] usb 4-1: config 0 descriptor?? [ 320.461134][ T1209] usb 2-1: USB disconnect, device number 59 [ 320.480519][ T1209] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 320.493776][ T1209] cp210x 2-1:0.0: device disconnected [ 320.558251][ T5913] usb 4-1: USB disconnect, device number 59 [ 321.059655][ T5913] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 321.145929][T11256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11256 comm=syz.3.1560 [ 321.161776][T11256] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 321.185431][T11256] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1560'. [ 321.239713][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 321.254641][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.267959][ T5913] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 321.288092][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.308273][ T5913] usb 5-1: config 0 descriptor?? [ 321.318742][ T5913] usbhid 5-1:0.0: can't add hid device: -22 [ 321.325614][ T5913] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 321.565522][T11263] FAULT_INJECTION: forcing a failure. [ 321.565522][T11263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.584482][T11263] CPU: 0 UID: 0 PID: 11263 Comm: syz.3.1562 Not tainted syzkaller #0 PREEMPT(full) [ 321.584512][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.584522][T11263] Call Trace: [ 321.584527][T11263] [ 321.584533][T11263] dump_stack_lvl+0x16c/0x1f0 [ 321.584555][T11263] should_fail_ex+0x512/0x640 [ 321.584575][T11263] _copy_to_user+0x32/0xd0 [ 321.584597][T11263] simple_read_from_buffer+0xcb/0x170 [ 321.584615][T11263] proc_fail_nth_read+0x197/0x240 [ 321.584633][T11263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.584650][T11263] ? security_file_permission+0x71/0x210 [ 321.584675][T11263] ? rw_verify_area+0xcf/0x6c0 [ 321.584700][T11263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.584718][T11263] vfs_read+0x1e1/0xcf0 [ 321.584736][T11263] ? __pfx___mutex_lock+0x10/0x10 [ 321.584755][T11263] ? __pfx_vfs_read+0x10/0x10 [ 321.584777][T11263] ? __fget_files+0x204/0x3c0 [ 321.584799][T11263] ? rcu_is_watching+0x12/0xc0 [ 321.584822][T11263] ? __fget_files+0x20e/0x3c0 [ 321.584839][T11263] ? commit_creds+0x6a0/0x1040 [ 321.584858][T11263] ksys_read+0x12a/0x250 [ 321.584874][T11263] ? __pfx_ksys_read+0x10/0x10 [ 321.584887][T11263] ? syscall_user_dispatch+0x78/0x140 [ 321.584905][T11263] ? __do_sys_setgroups+0xa2/0x4e0 [ 321.584919][T11263] do_syscall_64+0xcd/0x4c0 [ 321.584938][T11263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.584954][T11263] RIP: 0033:0x7f1e8678d5fc [ 321.584968][T11263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.584984][T11263] RSP: 002b:00007f1e875ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.585001][T11263] RAX: ffffffffffffffda RBX: 00007f1e869b5fa0 RCX: 00007f1e8678d5fc [ 321.585011][T11263] RDX: 000000000000000f RSI: 00007f1e875ad0a0 RDI: 0000000000000003 [ 321.585021][T11263] RBP: 00007f1e875ad090 R08: 0000000000000000 R09: 0000000000000000 [ 321.585031][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.585040][T11263] R13: 00007f1e869b6038 R14: 00007f1e869b5fa0 R15: 00007ffed705dd88 [ 321.585057][T11263] [ 321.992551][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 321.992565][ T30] audit: type=1400 audit(1755934134.333:1207): avc: denied { create } for pid=11267 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 322.140995][ T30] audit: type=1326 audit(1755934134.503:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11272 comm="syz.3.1565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e8678ebe9 code=0x0 [ 322.488293][T11271] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 322.550507][ T5913] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 322.699953][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 322.711863][ T5913] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 322.718481][ T30] audit: type=1400 audit(1755934135.073:1209): avc: denied { setopt } for pid=11284 comm="syz.0.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 322.740875][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.754210][ T5913] usb 2-1: Product: syz [ 322.758479][ T5913] usb 2-1: Manufacturer: syz [ 322.763205][ T5913] usb 2-1: SerialNumber: syz [ 322.768902][ T5913] usb 2-1: config 0 descriptor?? [ 322.812468][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'. [ 322.979574][ T5913] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 323.272969][ T30] audit: type=1400 audit(1755934135.633:1210): avc: denied { map } for pid=11280 comm="syz.1.1567" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 323.273068][T11299] No memory to map [ 323.364323][T11303] 9pnet_fd: Insufficient options for proto=fd [ 323.382273][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 323.487507][ T30] audit: type=1400 audit(1755934135.843:1211): avc: denied { ioctl } for pid=11306 comm="syz.3.1577" path="socket:[31699]" dev="sockfs" ino=31699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 323.548456][T11310] FAULT_INJECTION: forcing a failure. [ 323.548456][T11310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 323.562056][T11310] CPU: 0 UID: 0 PID: 11310 Comm: syz.3.1578 Not tainted syzkaller #0 PREEMPT(full) [ 323.562084][T11310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.562093][T11310] Call Trace: [ 323.562098][T11310] [ 323.562105][T11310] dump_stack_lvl+0x16c/0x1f0 [ 323.562129][T11310] should_fail_ex+0x512/0x640 [ 323.562145][T11310] should_fail_alloc_page+0xe7/0x130 [ 323.562159][T11310] prepare_alloc_pages+0x3c2/0x610 [ 323.562175][T11310] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 323.562187][T11310] ? stack_trace_save+0x8e/0xc0 [ 323.562203][T11310] ? __pfx_stack_trace_save+0x10/0x10 [ 323.562218][T11310] ? stack_depot_save_flags+0x29/0x9c0 [ 323.562231][T11310] ? rcu_is_watching+0x12/0xc0 [ 323.562246][T11310] ? kasan_save_stack+0x42/0x60 [ 323.562258][T11310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 323.562274][T11310] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 323.562291][T11310] ? inode_init_always_gfp+0xce4/0x1030 [ 323.562308][T11310] ? new_inode+0x22/0x1c0 [ 323.562323][T11310] ? __debugfs_create_file+0x11c/0x6b0 [ 323.562337][T11310] ? debugfs_create_file_full+0x41/0x60 [ 323.562350][T11310] ? ref_tracker_dir_debugfs+0x19d/0x290 [ 323.562363][T11310] ? alloc_netdev_mqs+0x30f/0x1530 [ 323.562375][T11310] ? rtnl_create_link+0xc08/0xf90 [ 323.562386][T11310] ? rtnl_newlink+0xb69/0x2000 [ 323.562398][T11310] ? ___sys_sendmsg+0x134/0x1d0 [ 323.562409][T11310] ? __sys_sendmsg+0x16d/0x220 [ 323.562419][T11310] ? do_syscall_64+0xcd/0x4c0 [ 323.562430][T11310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.562443][T11310] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 323.562456][T11310] ? policy_nodemask+0xea/0x4e0 [ 323.562469][T11310] alloc_pages_mpol+0x1fb/0x550 [ 323.562481][T11310] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 323.562494][T11310] ? inode_doinit_with_dentry+0x84b/0x12e0 [ 323.562511][T11310] alloc_pages_noprof+0x131/0x390 [ 323.562523][T11310] get_free_pages_noprof+0x10/0xb0 [ 323.562537][T11310] inode_doinit_with_dentry+0x8d6/0x12e0 [ 323.562554][T11310] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 323.562571][T11310] selinux_d_instantiate+0x26/0x30 [ 323.562586][T11310] security_d_instantiate+0x142/0x1a0 [ 323.562603][T11310] d_instantiate+0x5c/0x90 [ 323.562618][T11310] __debugfs_create_file+0x286/0x6b0 [ 323.562631][T11310] debugfs_create_file_full+0x41/0x60 [ 323.562645][T11310] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 323.562662][T11310] ref_tracker_dir_debugfs+0x19d/0x290 [ 323.562675][T11310] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 323.562692][T11310] ? __kvmalloc_node_noprof+0x298/0x620 [ 323.562708][T11310] ? alloc_netdev_mqs+0xd2/0x1530 [ 323.562718][T11310] ? lockdep_init_map_type+0x5c/0x280 [ 323.562729][T11310] alloc_netdev_mqs+0x30f/0x1530 [ 323.562742][T11310] rtnl_create_link+0xc08/0xf90 [ 323.562754][T11310] rtnl_newlink+0xb69/0x2000 [ 323.562767][T11310] ? __pfx_rtnl_newlink+0x10/0x10 [ 323.562778][T11310] ? avc_has_perm_noaudit+0x117/0x3b0 [ 323.562789][T11310] ? rcu_is_watching+0x12/0xc0 [ 323.562802][T11310] ? lock_release+0x201/0x2f0 [ 323.562820][T11310] ? avc_has_perm_noaudit+0x149/0x3b0 [ 323.562831][T11310] ? cred_has_capability.isra.0+0x190/0x310 [ 323.562848][T11310] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 323.562866][T11310] ? cap_capable+0xb3/0x250 [ 323.562879][T11310] ? rcu_is_watching+0x12/0xc0 [ 323.562892][T11310] ? __pfx_rtnl_newlink+0x10/0x10 [ 323.562903][T11310] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 323.562915][T11310] ? rcu_is_watching+0x12/0xc0 [ 323.562927][T11310] ? __pfx_rtnl_newlink+0x10/0x10 [ 323.562939][T11310] ? lock_release+0x201/0x2f0 [ 323.562955][T11310] ? __pfx_rtnl_newlink+0x10/0x10 [ 323.562967][T11310] rtnetlink_rcv_msg+0x95b/0xe90 [ 323.562979][T11310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.562992][T11310] ? ref_tracker_free+0x37c/0x830 [ 323.563006][T11310] netlink_rcv_skb+0x155/0x420 [ 323.563020][T11310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.563032][T11310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.563046][T11310] ? netlink_deliver_tap+0x1ae/0xd30 [ 323.563058][T11310] netlink_unicast+0x5aa/0x870 [ 323.563071][T11310] ? __pfx_netlink_unicast+0x10/0x10 [ 323.563082][T11310] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 323.563096][T11310] netlink_sendmsg+0x8d1/0xdd0 [ 323.563109][T11310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.563123][T11310] ____sys_sendmsg+0xa95/0xc70 [ 323.563137][T11310] ? copy_msghdr_from_user+0x10a/0x160 [ 323.563148][T11310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.563161][T11310] ? __pfx_kstrtouint+0x10/0x10 [ 323.563173][T11310] ? kstrtouint_from_user+0x13c/0x1d0 [ 323.563184][T11310] ___sys_sendmsg+0x134/0x1d0 [ 323.563195][T11310] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.563208][T11310] ? rcu_is_watching+0x12/0xc0 [ 323.563225][T11310] __sys_sendmsg+0x16d/0x220 [ 323.563236][T11310] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.563250][T11310] do_syscall_64+0xcd/0x4c0 [ 323.563262][T11310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.563273][T11310] RIP: 0033:0x7f1e8678ebe9 [ 323.563282][T11310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.563293][T11310] RSP: 002b:00007f1e875ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.563305][T11310] RAX: ffffffffffffffda RBX: 00007f1e869b5fa0 RCX: 00007f1e8678ebe9 [ 323.563313][T11310] RDX: 0000000004000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 323.563319][T11310] RBP: 00007f1e875ad090 R08: 0000000000000000 R09: 0000000000000000 [ 323.563325][T11310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.563331][T11310] R13: 00007f1e869b6038 R14: 00007f1e869b5fa0 R15: 00007ffed705dd88 [ 323.563341][T11310] [ 324.178886][ T49] usb 5-1: USB disconnect, device number 52 [ 324.216110][ T30] audit: type=1400 audit(1755934136.573:1212): avc: denied { append } for pid=11312 comm="syz.3.1580" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 324.264887][ T5913] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 324.806486][T11321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1581'. [ 325.155615][ T30] audit: type=1400 audit(1755934137.513:1213): avc: denied { lock } for pid=11320 comm="syz.2.1581" path="socket:[31924]" dev="sockfs" ino=31924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 325.346586][ T5913] usb 2-1: USB disconnect, device number 60 [ 325.370226][T11341] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.1586'. [ 325.399645][ T49] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 325.525899][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 325.632433][ T30] audit: type=1400 audit(1755934137.983:1214): avc: denied { create } for pid=11353 comm="syz.2.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 325.681725][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 325.700070][ T30] audit: type=1400 audit(1755934137.983:1215): avc: denied { ioctl } for pid=11353 comm="syz.2.1591" path="socket:[32843]" dev="sockfs" ino=32843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 325.740056][ T49] usb 5-1: config 9 has an invalid interface number: 70 but max is 0 [ 325.757734][ T49] usb 5-1: config 9 has no interface number 0 [ 325.771775][ T49] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 325.781076][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.789083][ T49] usb 5-1: Product: syz [ 325.806859][ T49] usb 5-1: Manufacturer: syz [ 325.818876][ T49] usb 5-1: SerialNumber: syz [ 325.898152][ T5900] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 326.197125][ T5900] usb 2-1: config 1 has an invalid interface number: 115 but max is 0 [ 326.272411][ T5900] usb 2-1: config 1 has no interface number 0 [ 326.299136][ T5900] usb 2-1: config 1 interface 115 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 326.317701][ T30] audit: type=1400 audit(1755934138.673:1216): avc: denied { ioctl } for pid=11329 comm="syz.4.1584" path="socket:[31724]" dev="sockfs" ino=31724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 326.352882][ T5900] usb 2-1: config 1 interface 115 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 326.429304][T11359] tmpfs: Unknown parameter 'usrquota' [ 326.437213][ T5900] usb 2-1: config 1 interface 115 has no altsetting 0 [ 326.445505][ T49] ttusb_dec_send_command: command bulk message failed: error -22 [ 326.565118][ T49] ttusb-dec 5-1:9.70: probe with driver ttusb-dec failed with error -22 [ 326.577648][ T5900] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a21, bcdDevice=9b.66 [ 326.598269][ T49] usb 5-1: USB disconnect, device number 53 [ 326.604371][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.613411][ T5900] usb 2-1: Product: syz [ 326.618419][ T5900] usb 2-1: Manufacturer: syz [ 326.627763][ T5900] usb 2-1: SerialNumber: syz [ 326.638052][T11352] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 326.720528][T11352] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 326.812375][T11363] wireguard: wg1: Could not create IPv4 socket [ 327.028561][ T5900] ipaq 2-1:1.115: PocketPC PDA converter detected [ 327.258773][ T5900] ipaq 2-1:1.115: probe with driver ipaq failed with error -71 [ 327.277822][ T5900] usb 2-1: USB disconnect, device number 61 [ 327.385803][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 327.392092][ T30] audit: type=1400 audit(1755934139.743:1218): avc: denied { bind } for pid=11366 comm="syz.4.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 328.472444][ T30] audit: type=1326 audit(1755934140.813:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4558ebe9 code=0x7ffc0000 [ 328.546539][ T30] audit: type=1326 audit(1755934140.813:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4558ebe9 code=0x7ffc0000 [ 328.569234][T11405] 9pnet: p9_errstr2errno: server reported unknown error [ 328.721134][ T30] audit: type=1326 audit(1755934140.813:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f4a4558ebe9 code=0x7ffc0000 [ 328.744774][ T5893] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 328.798257][ T30] audit: type=1326 audit(1755934140.813:1222): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4558ebe9 code=0x7ffc0000 [ 328.911113][ T30] audit: type=1326 audit(1755934140.813:1223): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4a4558ebe9 code=0x7ffc0000 [ 328.967546][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 328.990444][ T5893] usb 4-1: config 9 has an invalid interface number: 70 but max is 0 [ 328.998632][ T5893] usb 4-1: config 9 has no interface number 0 [ 329.022856][T11409] syzkaller0: entered promiscuous mode [ 329.034019][T11409] syzkaller0: entered allmulticast mode [ 329.044514][ T5893] usb 4-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 329.053677][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.063341][ T30] audit: type=1326 audit(1755934140.813:1224): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4558ebe9 code=0x7ffc0000 [ 329.088626][ T5893] usb 4-1: Product: syz [ 329.094052][ T5893] usb 4-1: Manufacturer: syz [ 329.098789][ T5893] usb 4-1: SerialNumber: syz [ 329.110561][ T30] audit: type=1326 audit(1755934140.813:1225): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4558ebe9 code=0x7ffc0000 [ 329.137083][ T30] audit: type=1326 audit(1755934140.813:1226): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a4558ebe9 code=0x7ffc0000 [ 329.161738][ T30] audit: type=1326 audit(1755934140.813:1227): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11386 comm="syz.1.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a4558ebe9 code=0x7ffc0000 [ 330.120466][ T5893] ttusb_dec_send_command: command bulk message failed: error -22 [ 330.139832][ T5893] ttusb-dec 4-1:9.70: probe with driver ttusb-dec failed with error -22 [ 330.197624][T11425] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11425 comm=syz.2.1612 [ 330.855134][ T5893] usb 4-1: USB disconnect, device number 60 [ 331.276102][T11434] Failed to initialize the IGMP autojoin socket (err -2) [ 331.494113][ T5913] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 331.579450][T11449] tc_dump_action: action bad kind [ 331.592492][T11449] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 331.601135][T11449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1616'. [ 331.621183][T11449] dummy0: entered promiscuous mode [ 331.627089][T11449] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 331.660804][ T5913] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 331.677347][ T5913] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 331.772541][ T5913] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 331.785609][ T5913] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 331.797587][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 331.807782][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 331.824183][ T5913] usb 5-1: string descriptor 0 read error: -22 [ 331.845752][ T5913] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 331.856167][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.865450][ T5913] usb 5-1: config 0 descriptor?? [ 331.871878][T11431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.881740][ T5913] hub 5-1:0.0: bad descriptor, ignoring hub [ 331.905490][ T5913] hub 5-1:0.0: probe with driver hub failed with error -5 [ 331.917558][ T5913] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 332.428779][ T5900] usb 5-1: USB disconnect, device number 54 [ 333.391532][T11484] ALSA: mixer_oss: invalid OSS volume '' [ 333.845895][ T5893] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 333.853601][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 333.853621][ T30] audit: type=1400 audit(1755934146.203:1269): avc: denied { shutdown } for pid=11492 comm="syz.0.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 333.896033][ T30] audit: type=1400 audit(1755934146.203:1270): avc: denied { read } for pid=11492 comm="syz.0.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 334.075258][ T5913] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 334.099756][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 334.110410][ T5893] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 334.118629][ T5893] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.141272][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.155444][ T5893] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.185758][ T5893] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.221912][ T5893] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.234061][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.240992][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.246274][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.277481][ T5913] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 334.288950][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.300906][ T5913] usb 5-1: config 0 descriptor?? [ 334.475308][ T5893] usb 4-1: usb_control_msg returned -32 [ 334.509689][ T5900] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 335.277457][ T5893] usbtmc 4-1:16.0: can't read capabilities [ 335.353127][T11516] kAFS: Can only specify source 'none' with -o dyn [ 335.429541][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 335.445414][ T5900] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 335.459036][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.467363][ T5900] usb 2-1: Product: syz [ 335.472442][ T5900] usb 2-1: Manufacturer: syz [ 335.477577][ T5900] usb 2-1: SerialNumber: syz [ 335.487218][ T5900] usb 2-1: config 0 descriptor?? [ 335.495575][ T5900] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 335.541745][ T5913] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71 [ 335.599079][ T5913] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 335.606817][ T5913] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 335.655216][ T5913] usb 5-1: USB disconnect, device number 55 [ 336.238191][ T5926] usb 4-1: USB disconnect, device number 61 [ 336.297320][ T5900] gspca_sonixj: reg_r err -32 [ 336.331975][ T5900] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 336.463700][T11543] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1647'. [ 336.557804][T11545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.565082][T11545] IPv6: NLM_F_CREATE should be set when creating new route [ 336.572309][T11545] FAULT_INJECTION: forcing a failure. [ 336.572309][T11545] name failslab, interval 1, probability 0, space 0, times 0 [ 336.584942][T11545] CPU: 1 UID: 0 PID: 11545 Comm: syz.3.1649 Not tainted syzkaller #0 PREEMPT(full) [ 336.584968][T11545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.584979][T11545] Call Trace: [ 336.584985][T11545] [ 336.584992][T11545] dump_stack_lvl+0x16c/0x1f0 [ 336.585016][T11545] should_fail_ex+0x512/0x640 [ 336.585038][T11545] should_failslab+0xc2/0x120 [ 336.585059][T11545] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 336.585077][T11545] ? __sys_sendmsg+0x16d/0x220 [ 336.585096][T11545] ? fib6_add_1+0xce9/0x17d0 [ 336.585121][T11545] fib6_add_1+0xce9/0x17d0 [ 336.585145][T11545] fib6_add+0x1c4/0x1d90 [ 336.585170][T11545] ? do_raw_spin_lock+0x12c/0x2b0 [ 336.585191][T11545] ? __pfx_fib6_add+0x10/0x10 [ 336.585213][T11545] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 336.585234][T11545] ip6_route_multipath_add+0x4a6/0x1bd0 [ 336.585259][T11545] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 336.585288][T11545] ? lock_release+0x201/0x2f0 [ 336.585313][T11545] ? avc_has_perm_noaudit+0x149/0x3b0 [ 336.585330][T11545] ? inet6_rtm_newroute+0xe4/0x1a0 [ 336.585347][T11545] inet6_rtm_newroute+0xe4/0x1a0 [ 336.585366][T11545] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 336.585393][T11545] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 336.585412][T11545] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 336.585431][T11545] ? rcu_is_watching+0x12/0xc0 [ 336.585452][T11545] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 336.585471][T11545] ? lock_release+0x201/0x2f0 [ 336.585496][T11545] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 336.585515][T11545] rtnetlink_rcv_msg+0x95b/0xe90 [ 336.585534][T11545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.585556][T11545] ? ref_tracker_free+0x37c/0x830 [ 336.585577][T11545] netlink_rcv_skb+0x155/0x420 [ 336.585597][T11545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.585615][T11545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.585636][T11545] ? netlink_deliver_tap+0x1ae/0xd30 [ 336.585660][T11545] netlink_unicast+0x5aa/0x870 [ 336.585680][T11545] ? __pfx_netlink_unicast+0x10/0x10 [ 336.585700][T11545] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 336.585723][T11545] netlink_sendmsg+0x8d1/0xdd0 [ 336.585744][T11545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.585767][T11545] ____sys_sendmsg+0xa95/0xc70 [ 336.585790][T11545] ? copy_msghdr_from_user+0x10a/0x160 [ 336.585807][T11545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.585828][T11545] ? __pfx_kstrtouint+0x10/0x10 [ 336.585847][T11545] ? kstrtouint_from_user+0x13c/0x1d0 [ 336.585864][T11545] ___sys_sendmsg+0x134/0x1d0 [ 336.585881][T11545] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.585902][T11545] ? rcu_is_watching+0x12/0xc0 [ 336.585930][T11545] __sys_sendmsg+0x16d/0x220 [ 336.585947][T11545] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.585970][T11545] do_syscall_64+0xcd/0x4c0 [ 336.585990][T11545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.586008][T11545] RIP: 0033:0x7f1e8678ebe9 [ 336.586022][T11545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.586039][T11545] RSP: 002b:00007f1e875ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.586058][T11545] RAX: ffffffffffffffda RBX: 00007f1e869b5fa0 RCX: 00007f1e8678ebe9 [ 336.586070][T11545] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 336.586081][T11545] RBP: 00007f1e875ad090 R08: 0000000000000000 R09: 0000000000000000 [ 336.586091][T11545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.586102][T11545] R13: 00007f1e869b6038 R14: 00007f1e869b5fa0 R15: 00007ffed705dd88 [ 336.586120][T11545] [ 337.014703][ T30] audit: type=1400 audit(1755934149.323:1271): avc: denied { getopt } for pid=11546 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.428117][ T6014] usb 2-1: USB disconnect, device number 62 [ 337.648142][T11575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.655417][T11575] IPv6: NLM_F_CREATE should be set when creating new route [ 337.662757][T11575] IPv6: NLM_F_CREATE should be set when creating new route [ 337.669976][T11575] IPv6: NLM_F_CREATE should be set when creating new route [ 337.800015][ T6014] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 337.966405][ T6014] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 338.000909][ T6014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.066528][ T6014] usb 2-1: config 0 descriptor?? [ 338.074360][ T6014] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 338.469770][T11592] Failed to initialize the IGMP autojoin socket (err -2) [ 338.779603][ T5893] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 338.931794][ T5893] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 338.940298][ T5893] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 338.948425][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 339.039576][ T5893] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 339.058378][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 339.092763][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 339.573987][ T6014] usb 2-1: USB disconnect, device number 63 [ 339.946889][ T5893] usb 5-1: string descriptor 0 read error: -22 [ 339.953192][ T5893] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 339.962390][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.971768][ T5893] usb 5-1: config 0 descriptor?? [ 339.980824][T11593] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 339.988657][ T5893] hub 5-1:0.0: bad descriptor, ignoring hub [ 339.994876][ T5893] hub 5-1:0.0: probe with driver hub failed with error -5 [ 340.006704][ T5893] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 340.064311][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 340.387134][T11614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1670'. [ 340.416085][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 340.425413][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 340.462803][T11619] syz.0.1670: attempt to access beyond end of device [ 340.462803][T11619] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 340.466347][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 340.513632][T11619] syz.0.1670: attempt to access beyond end of device [ 340.513632][T11619] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 340.536249][T11619] Mount JFS Failure: -5 [ 340.548884][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 340.745418][T11633] Failed to initialize the IGMP autojoin socket (err -2) [ 340.764990][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 340.782355][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1672'. [ 340.805490][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1675'. [ 341.068324][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 341.451404][ T5913] usb 5-1: USB disconnect, device number 56 [ 341.649549][ T6014] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 341.699568][ T5893] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 341.799576][ T5913] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 341.807482][T11667] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11667 comm=syz.2.1686 [ 341.821318][ T6014] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 341.850566][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.859915][ T6014] usb 4-1: config 0 descriptor?? [ 341.861118][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.866679][ T6014] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 341.895139][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.905319][ T5893] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 341.914588][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.933520][ T5893] usb 2-1: config 0 descriptor?? [ 341.969608][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 341.975886][ T5913] usb 5-1: config 9 has an invalid interface number: 70 but max is 0 [ 341.989583][ T5913] usb 5-1: config 9 has no interface number 0 [ 342.012746][ T5913] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 342.047301][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.072378][ T5913] usb 5-1: Product: syz [ 342.076036][T11671] netlink: 'syz.0.1687': attribute type 4 has an invalid length. [ 342.086185][ T5913] usb 5-1: Manufacturer: syz [ 342.091192][ T5913] usb 5-1: SerialNumber: syz [ 342.091397][T11671] netlink: 'syz.0.1687': attribute type 4 has an invalid length. [ 342.158676][T11671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11671 comm=syz.0.1687 [ 342.552303][ T5893] usb 2-1: language id specifier not provided by device, defaulting to English [ 342.688775][ T5913] ttusb_dec_send_command: command bulk message failed: error -22 [ 342.703452][ T5913] ttusb-dec 5-1:9.70: probe with driver ttusb-dec failed with error -22 [ 342.724117][ T5913] usb 5-1: USB disconnect, device number 57 [ 343.100877][ T5893] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 343.151135][ T5893] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 343.159297][ T5893] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 343.177748][ T5893] usb 2-1: USB disconnect, device number 64 [ 343.336404][ T6014] usb 4-1: USB disconnect, device number 62 [ 344.023063][T11718] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11718 comm=syz.1.1701 [ 345.266671][ T30] audit: type=1400 audit(1755934157.623:1272): avc: denied { create } for pid=11745 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 345.298745][ T30] audit: type=1400 audit(1755934157.653:1273): avc: denied { sys_admin } for pid=11745 comm="syz.4.1709" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 345.469659][ T5893] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 345.751836][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.055434][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.065349][ T5893] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 346.076632][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.122885][ T5893] usb 4-1: config 0 descriptor?? [ 346.249153][T11762] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 346.263517][T11762] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 346.588591][ T30] audit: type=1400 audit(1755934158.943:1274): avc: denied { load_policy } for pid=11772 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 346.594641][T11773] SELinux: failed to load policy [ 346.672637][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 346.739608][ T5955] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 346.824397][ T5893] usb 4-1: language id specifier not provided by device, defaulting to English [ 346.889587][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 346.897543][ T5955] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 346.906773][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.914899][ T5955] usb 2-1: Product: syz [ 346.919116][ T5955] usb 2-1: Manufacturer: syz [ 346.923755][ T5955] usb 2-1: SerialNumber: syz [ 346.929968][ T5955] usb 2-1: config 0 descriptor?? [ 346.936621][ T5955] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 347.196414][T11778] FAULT_INJECTION: forcing a failure. [ 347.196414][T11778] name failslab, interval 1, probability 0, space 0, times 0 [ 347.209711][T11778] CPU: 0 UID: 0 PID: 11778 Comm: syz.0.1719 Not tainted syzkaller #0 PREEMPT(full) [ 347.209735][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.209745][T11778] Call Trace: [ 347.209751][T11778] [ 347.209757][T11778] dump_stack_lvl+0x16c/0x1f0 [ 347.209778][T11778] should_fail_ex+0x512/0x640 [ 347.209794][T11778] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 347.209813][T11778] should_failslab+0xc2/0x120 [ 347.209826][T11778] __kmalloc_noprof+0xd2/0x510 [ 347.209839][T11778] tomoyo_realpath_from_path+0xc2/0x6e0 [ 347.209862][T11778] ? tomoyo_profile+0x47/0x60 [ 347.209878][T11778] tomoyo_path_number_perm+0x245/0x580 [ 347.209897][T11778] ? tomoyo_path_number_perm+0x237/0x580 [ 347.209917][T11778] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 347.209935][T11778] ? preempt_count_add+0x76/0x150 [ 347.209950][T11778] ? rcu_is_watching+0x12/0xc0 [ 347.209964][T11778] ? __fget_files+0x204/0x3c0 [ 347.209976][T11778] ? hook_file_ioctl_common+0x145/0x410 [ 347.209988][T11778] ? lock_release+0x201/0x2f0 [ 347.210014][T11778] ? __fget_files+0x20e/0x3c0 [ 347.210032][T11778] security_file_ioctl+0x9b/0x240 [ 347.210054][T11778] __x64_sys_ioctl+0xb7/0x210 [ 347.210075][T11778] do_syscall_64+0xcd/0x4c0 [ 347.210087][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.210099][T11778] RIP: 0033:0x7fb738b8ebe9 [ 347.210108][T11778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.210119][T11778] RSP: 002b:00007fb73997b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.210132][T11778] RAX: ffffffffffffffda RBX: 00007fb738db5fa0 RCX: 00007fb738b8ebe9 [ 347.210143][T11778] RDX: 00002000000000c0 RSI: 00000000400454d1 RDI: 0000000000000006 [ 347.210153][T11778] RBP: 00007fb73997b090 R08: 0000000000000000 R09: 0000000000000000 [ 347.210163][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.210172][T11778] R13: 00007fb738db6038 R14: 00007fb738db5fa0 R15: 00007ffe02896588 [ 347.210188][T11778] [ 347.210195][T11778] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.424618][ T5893] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 347.443619][ T5893] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 347.452397][ T5893] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 347.473117][ T5893] usb 4-1: USB disconnect, device number 63 [ 347.970215][T11791] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11791 comm=syz.4.1720 [ 348.089960][ T5955] gspca_sonixj: reg_r err -32 [ 348.094701][ T5955] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 348.105369][T11795] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1722'. [ 349.565908][ T5955] usb 2-1: USB disconnect, device number 65 [ 350.556804][T11853] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11853 comm=syz.0.1734 [ 350.576452][T11845] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 350.583078][T11845] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 350.590978][T11845] vhci_hcd vhci_hcd.0: Device attached [ 350.730143][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1742'. [ 350.859538][ T6014] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 350.879666][ T1209] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 351.105652][T11854] vhci_hcd: connection reset by peer [ 351.225656][ T30] audit: type=1400 audit(1755934163.573:1275): avc: denied { connect } for pid=11878 comm="syz.2.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 351.566258][ T1131] vhci_hcd: stop threads [ 351.572746][ T1131] vhci_hcd: release socket [ 351.577741][ T1131] vhci_hcd: disconnect device [ 351.839721][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 351.944643][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 352.057296][ T1209] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 352.096915][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.143600][ T1209] usb 5-1: Product: syz [ 352.147819][ T1209] usb 5-1: Manufacturer: syz [ 352.154014][ T1209] usb 5-1: SerialNumber: syz [ 352.159944][ T1209] usb 5-1: config 0 descriptor?? [ 352.168430][ T1209] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 352.178150][ T1209] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 352.424868][T11902] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11902 comm=syz.2.1753 [ 352.732163][T11915] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.1756'. [ 352.783413][ T1209] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 352.791159][ T1209] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 353.403453][ T30] audit: type=1400 audit(1755934165.763:1276): avc: denied { create } for pid=11929 comm="syz.1.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 353.406772][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.459821][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.490760][ T30] audit: type=1400 audit(1755934165.813:1277): avc: denied { ioctl } for pid=11929 comm="syz.1.1763" path="socket:[34115]" dev="sockfs" ino=34115 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 353.516254][ T1209] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 353.551354][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 353.571039][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 353.584127][T11934] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=11934 comm=syz.3.1764 [ 353.602207][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 353.611074][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 353.618051][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 353.820812][ T5893] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 353.827563][T11849] netlink: 16182 bytes leftover after parsing attributes in process `syz.4.1740'. [ 353.868584][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 353.875311][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 353.882006][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 353.888391][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 353.895409][ T1209] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 353.911701][ T1209] usb 5-1: USB disconnect, device number 58 [ 353.979689][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 353.989671][ T5893] usb 2-1: no configurations [ 353.998864][ T5893] usb 2-1: can't read configurations, error -22 [ 354.149583][ T5893] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 354.299555][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 354.305337][ T5893] usb 2-1: no configurations [ 354.310261][ T5893] usb 2-1: can't read configurations, error -22 [ 354.316861][ T5893] usb usb2-port1: attempt power cycle [ 354.662530][ T5893] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 354.695485][T11962] ALSA: mixer_oss: invalid OSS volume '' [ 354.704018][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 354.710164][ T5893] usb 2-1: no configurations [ 354.718281][ T5893] usb 2-1: can't read configurations, error -22 [ 354.769995][ T5900] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 354.859742][ T5893] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 354.880062][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 354.885652][ T5893] usb 2-1: no configurations [ 354.890458][ T5893] usb 2-1: can't read configurations, error -22 [ 354.896862][ T5893] usb usb2-port1: unable to enumerate USB device [ 354.931247][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 354.939441][ T5900] usb 5-1: not running at top speed; connect to a high speed hub [ 354.948489][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 354.956230][ T5900] usb 5-1: can't read configurations, error -61 [ 355.029620][ T5913] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 355.089523][ T5900] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 355.189585][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 355.198514][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 355.216653][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.300006][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 355.303896][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400 [ 355.308297][ T5900] usb 5-1: not running at top speed; connect to a high speed hub [ 355.325019][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 355.325464][ T5913] pvrusb2: ********** [ 355.337028][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 355.337030][ T5900] usb 5-1: can't read configurations, error -61 [ 355.337293][ T5900] usb usb5-port1: attempt power cycle [ 355.347562][ T5913] pvrusb2: Important functionality might not be entirely working. [ 355.367837][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 355.379576][ T5913] pvrusb2: ********** [ 355.501974][ T2331] pvrusb2: Invalid write control endpoint [ 355.525941][ T2331] pvrusb2: Invalid write control endpoint [ 355.531760][ T2331] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 355.541261][ T2331] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 355.548904][ T2331] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 355.558913][ T2331] pvrusb2: Device being rendered inoperable [ 355.565967][ T2331] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 355.573048][ T2331] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 355.580932][ T2331] pvrusb2: Attached sub-driver cx25840 [ 355.586486][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 355.596826][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 355.699635][ T5900] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 355.715901][T11968] pvrusb2: Attempted to execute control transfer when device not ok [ 355.721804][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 355.725235][ T5913] usb 4-1: USB disconnect, device number 64 [ 355.741111][ T5900] usb 5-1: not running at top speed; connect to a high speed hub [ 355.753013][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 355.760770][ T5900] usb 5-1: can't read configurations, error -61 [ 355.889648][ T5900] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 355.912120][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short [ 355.920302][ T5900] usb 5-1: not running at top speed; connect to a high speed hub [ 355.929081][ T5900] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 355.936857][ T5900] usb 5-1: can't read configurations, error -61 [ 355.943486][ T5900] usb usb5-port1: unable to enumerate USB device [ 355.979684][ T6014] vhci_hcd: vhci_device speed not set [ 356.785780][T11992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.945336][T11995] ALSA: mixer_oss: invalid OSS volume '' [ 357.087426][ T30] audit: type=1400 audit(1755934169.443:1278): avc: denied { create } for pid=12002 comm="syz.0.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 357.108128][ T30] audit: type=1400 audit(1755934169.443:1279): avc: denied { setopt } for pid=12002 comm="syz.0.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 357.460054][ T5900] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 357.678315][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 357.696012][ T5900] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 357.705769][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.744914][ T5900] pvrusb2: Hardware description: Terratec Grabster AV400 [ 357.752495][ T5900] pvrusb2: ********** [ 357.756502][ T5900] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 357.793693][T12016] Failed to initialize the IGMP autojoin socket (err -2) [ 357.810683][ T5900] pvrusb2: Important functionality might not be entirely working. [ 357.819505][ T5900] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 357.831401][ T5900] pvrusb2: ********** [ 357.952588][ T2331] pvrusb2: Invalid write control endpoint [ 358.029283][ T6014] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 358.130571][ T2331] pvrusb2: Invalid write control endpoint [ 358.137620][ T2331] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 358.175147][ T2331] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 358.182990][ T2331] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 358.204134][ T2331] pvrusb2: Device being rendered inoperable [ 358.210179][T12008] pvrusb2: Attempted to execute control transfer when device not ok [ 358.230057][ T5955] usb 4-1: USB disconnect, device number 65 [ 358.240143][ T2331] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 358.249572][ T6014] usb 5-1: Using ep0 maxpacket: 16 [ 358.259732][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.281340][ T2331] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 358.289695][ T6014] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 358.302139][ T2331] pvrusb2: Attached sub-driver cx25840 [ 358.309520][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.318680][ T2331] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 358.330004][ T2331] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 358.342940][ T6014] usb 5-1: config 0 descriptor?? [ 358.412761][ T6014] usbhid 5-1:0.0: can't add hid device: -22 [ 358.441320][ T6014] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 358.644688][T12037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1803'. [ 359.389501][ T1209] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 359.494888][T12057] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 359.592098][ T1209] usb 2-1: config index 0 descriptor too short (expected 1033, got 45) [ 359.625376][ T1209] usb 2-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 359.637247][ T1209] usb 2-1: config 0 has no interfaces? [ 359.643067][ T1209] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 359.653293][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.663813][ T1209] usb 2-1: config 0 descriptor?? [ 359.673174][T12060] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=12060 comm=syz.2.1810 [ 359.877121][T12042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.892442][T12042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.910307][ T1209] usb 2-1: string descriptor 0 read error: -71 [ 359.926565][ T1209] usb 2-1: USB disconnect, device number 70 [ 360.067845][T12067] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 360.267397][T12073] netlink: 'syz.0.1814': attribute type 10 has an invalid length. [ 360.278505][T12073] batman_adv: batadv0: Adding interface: team0 [ 360.284863][T12073] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.310555][T12073] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 360.379095][ T6014] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 360.421806][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 360.469578][ T1209] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 360.562652][ T6014] usb 4-1: config 66 has an invalid interface number: 195 but max is 0 [ 360.571326][ T6014] usb 4-1: config 66 has no interface number 0 [ 360.577555][ T6014] usb 4-1: config 66 interface 195 has no altsetting 0 [ 360.586125][ T6014] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49 [ 360.595572][ T6014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.604266][ T6014] usb 4-1: Product: syz [ 360.620377][ T6014] usb 4-1: Manufacturer: syz [ 360.631110][ T6014] usb 4-1: SerialNumber: syz [ 360.645356][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 360.656755][ T1209] usb 2-1: config index 0 descriptor too short (expected 1033, got 45) [ 360.665770][ T1209] usb 2-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 360.681894][ T1209] usb 2-1: config 0 has no interfaces? [ 360.689877][ T6014] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40) [ 360.696282][ T6014] usb 4-1: Forcing UVC version to 1.0a [ 360.702619][ T6014] usb 4-1: No valid video chain found. [ 360.714300][ T1209] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 360.743100][ T6014] usb 5-1: USB disconnect, device number 63 [ 360.873639][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.928194][ T1209] usb 2-1: config 0 descriptor?? [ 361.284884][T12095] SELinux: failed to load policy [ 361.662045][ T1209] usb 2-1: string descriptor 0 read error: -71 [ 361.669303][ T1209] usb 2-1: USB disconnect, device number 71 [ 361.674956][T12095] syz.0.1822: attempt to access beyond end of device [ 361.674956][T12095] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 361.692419][ T6014] usb 4-1: USB disconnect, device number 66 [ 362.192109][T12115] tmpfs: Unknown parameter 'usrquotacĩ.' [ 362.413559][ T30] audit: type=1400 audit(1755934174.733:1280): avc: denied { block_suspend } for pid=12111 comm="syz.0.1828" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 362.836610][T12130] bond1: entered promiscuous mode [ 362.845160][T12130] bond1: entered allmulticast mode [ 362.865350][T12130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.045382][T12163] FAULT_INJECTION: forcing a failure. [ 364.045382][T12163] name failslab, interval 1, probability 0, space 0, times 0 [ 364.058228][T12163] CPU: 1 UID: 0 PID: 12163 Comm: syz.3.1844 Not tainted syzkaller #0 PREEMPT(full) [ 364.058254][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.058264][T12163] Call Trace: [ 364.058269][T12163] [ 364.058276][T12163] dump_stack_lvl+0x16c/0x1f0 [ 364.058298][T12163] should_fail_ex+0x512/0x640 [ 364.058318][T12163] should_failslab+0xc2/0x120 [ 364.058339][T12163] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 364.058357][T12163] ? __d_alloc+0x32/0xae0 [ 364.058379][T12163] __d_alloc+0x32/0xae0 [ 364.058397][T12163] ? security_prepare_creds+0x30/0x270 [ 364.058424][T12163] ? prepare_creds+0x56f/0x7d0 [ 364.058443][T12163] d_alloc_parallel+0x111/0x1480 [ 364.058468][T12163] ? avc_has_perm_noaudit+0x117/0x3b0 [ 364.058485][T12163] ? rcu_is_watching+0x12/0xc0 [ 364.058506][T12163] ? lock_release+0x201/0x2f0 [ 364.058531][T12163] ? map_id_range_up+0x2ce/0x3b0 [ 364.058552][T12163] ? __pfx_d_alloc_parallel+0x10/0x10 [ 364.058576][T12163] ? __pfx_map_id_range_up+0x10/0x10 [ 364.058595][T12163] ? cred_has_capability.isra.0+0x190/0x310 [ 364.058619][T12163] ? lockdep_init_map_type+0x5c/0x280 [ 364.058640][T12163] ? lockdep_init_map_type+0x5c/0x280 [ 364.058657][T12163] __lookup_slow+0x193/0x460 [ 364.058682][T12163] ? __pfx___lookup_slow+0x10/0x10 [ 364.058704][T12163] ? rcu_is_watching+0x12/0xc0 [ 364.058730][T12163] ? d_lookup+0xe7/0x190 [ 364.058754][T12163] lookup_one+0x115/0x170 [ 364.058779][T12163] ovl_create_or_link+0x2c0/0x870 [ 364.058806][T12163] ovl_create_object+0x266/0x300 [ 364.058825][T12163] ? __pfx_ovl_create_object+0x10/0x10 [ 364.058846][T12163] ? __pfx_ovl_permission+0x10/0x10 [ 364.058859][T12163] ? bpf_lsm_inode_permission+0x9/0x10 [ 364.058875][T12163] ? security_inode_permission+0xbf/0x260 [ 364.058897][T12163] ovl_mkdir+0x2a/0x40 [ 364.058915][T12163] vfs_mkdir+0x590/0x8c0 [ 364.058928][T12163] do_mkdirat+0x304/0x3e0 [ 364.058944][T12163] ? __pfx_do_mkdirat+0x10/0x10 [ 364.058959][T12163] ? getname_flags.part.0+0x1c5/0x550 [ 364.058981][T12163] __x64_sys_mkdirat+0x83/0xb0 [ 364.058997][T12163] do_syscall_64+0xcd/0x4c0 [ 364.059013][T12163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.059027][T12163] RIP: 0033:0x7f1e8678ebe9 [ 364.059038][T12163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.059052][T12163] RSP: 002b:00007f1e875ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 364.059066][T12163] RAX: ffffffffffffffda RBX: 00007f1e869b5fa0 RCX: 00007f1e8678ebe9 [ 364.059076][T12163] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 364.059084][T12163] RBP: 00007f1e875ad090 R08: 0000000000000000 R09: 0000000000000000 [ 364.059093][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.059101][T12163] R13: 00007f1e869b6038 R14: 00007f1e869b5fa0 R15: 00007ffed705dd88 [ 364.059114][T12163] [ 364.637270][T12178] trusted_key: encrypted_key: hex blob is missing [ 364.723008][ T5893] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 364.980316][ T30] audit: type=1400 audit(1755934177.333:1281): avc: denied { listen } for pid=12179 comm="syz.4.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 365.119634][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 365.136041][ T5893] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 365.146728][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 365.156229][ T5893] usb 4-1: Product: syz [ 365.161391][ T5893] usb 4-1: Manufacturer: syz [ 365.166018][ T5893] usb 4-1: SerialNumber: syz [ 365.173093][ T5893] usb 4-1: config 0 descriptor?? [ 365.249625][ T6014] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 365.270841][T12190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.106865][ T6014] usb 5-1: unable to get BOS descriptor or descriptor too short [ 366.130116][ T6014] usb 5-1: not running at top speed; connect to a high speed hub [ 366.183710][ T6014] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.383713][ T6014] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 366.401470][T12171] Failed to initialize the IGMP autojoin socket (err -2) [ 366.408993][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.419693][ T6014] usb 5-1: Product: syz [ 366.423897][ T6014] usb 5-1: Manufacturer: syz [ 366.428587][ T6014] usb 5-1: SerialNumber: syz [ 366.461566][ T6014] usb 5-1: config 0 descriptor?? [ 366.706447][T12211] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 366.723851][ T1209] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 366.770986][T12182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.794655][T12182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.809307][T12214] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1859'. [ 366.820415][ T5893] usb 4-1: USB disconnect, device number 67 [ 366.842253][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.864112][ T5900] usb 5-1: USB disconnect, device number 64 [ 366.971936][ T1209] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 366.980898][ T1209] usb 2-1: config 150 has no interface number 0 [ 366.987219][ T1209] usb 2-1: config 150 interface 204 has no altsetting 0 [ 367.007297][ T1209] usb 2-1: config 150 interface 1 has no altsetting 0 [ 367.029190][ T1209] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 367.039808][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.213318][ T30] audit: type=1400 audit(1755934179.553:1282): avc: denied { create } for pid=12216 comm="syz.4.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 367.234754][ T30] audit: type=1400 audit(1755934179.553:1283): avc: denied { map } for pid=12216 comm="syz.4.1860" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 367.260859][ T1209] usb 2-1: Product: syz [ 367.265129][ T1209] usb 2-1: Manufacturer: syz [ 367.273678][ T1209] usb 2-1: SerialNumber: syz [ 367.287350][ T30] audit: type=1400 audit(1755934179.553:1284): avc: denied { execute } for pid=12216 comm="syz.4.1860" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 368.016212][T12232] FAULT_INJECTION: forcing a failure. [ 368.016212][T12232] name failslab, interval 1, probability 0, space 0, times 0 [ 368.030275][T12232] CPU: 1 UID: 0 PID: 12232 Comm: syz.3.1865 Not tainted syzkaller #0 PREEMPT(full) [ 368.030293][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.030299][T12232] Call Trace: [ 368.030303][T12232] [ 368.030310][T12232] dump_stack_lvl+0x16c/0x1f0 [ 368.030326][T12232] should_fail_ex+0x512/0x640 [ 368.030341][T12232] should_failslab+0xc2/0x120 [ 368.030354][T12232] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 368.030366][T12232] ? __pfx_from_vfsgid+0x10/0x10 [ 368.030382][T12232] ? prepare_creds+0x2c/0x7d0 [ 368.030396][T12232] prepare_creds+0x2c/0x7d0 [ 368.030407][T12232] ovl_setup_cred_for_create+0x25/0x300 [ 368.030424][T12232] ovl_tmpfile+0x312/0x860 [ 368.030439][T12232] ? __pfx_ovl_tmpfile+0x10/0x10 [ 368.030454][T12232] ? _raw_spin_unlock+0x28/0x50 [ 368.030473][T12232] vfs_tmpfile+0x2bb/0x890 [ 368.030487][T12232] path_openat+0x1683/0x2cb0 [ 368.030498][T12232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.030512][T12232] ? __pfx_path_openat+0x10/0x10 [ 368.030525][T12232] do_filp_open+0x20b/0x470 [ 368.030537][T12232] ? __pfx_do_filp_open+0x10/0x10 [ 368.030554][T12232] ? alloc_fd+0x471/0x7d0 [ 368.030567][T12232] do_sys_openat2+0x11b/0x1d0 [ 368.030587][T12232] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.030602][T12232] ? __fget_files+0x20e/0x3c0 [ 368.030615][T12232] __x64_sys_openat+0x174/0x210 [ 368.030630][T12232] ? __pfx___x64_sys_openat+0x10/0x10 [ 368.030645][T12232] ? ksys_write+0x1ac/0x250 [ 368.030658][T12232] do_syscall_64+0xcd/0x4c0 [ 368.030670][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.030681][T12232] RIP: 0033:0x7f1e8678ebe9 [ 368.030690][T12232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.030701][T12232] RSP: 002b:00007f1e875ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.030713][T12232] RAX: ffffffffffffffda RBX: 00007f1e869b5fa0 RCX: 00007f1e8678ebe9 [ 368.030720][T12232] RDX: 0000000000478103 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 368.030727][T12232] RBP: 00007f1e875ad090 R08: 0000000000000000 R09: 0000000000000000 [ 368.030734][T12232] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000001 [ 368.030740][T12232] R13: 00007f1e869b6038 R14: 00007f1e869b5fa0 R15: 00007ffed705dd88 [ 368.030750][T12232] [ 368.363618][ T30] audit: type=1326 audit(1755934180.713:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.387234][ T30] audit: type=1326 audit(1755934180.713:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.410690][ T30] audit: type=1326 audit(1755934180.713:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.434127][ T30] audit: type=1326 audit(1755934180.713:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.457567][ T30] audit: type=1326 audit(1755934180.713:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.481069][ T30] audit: type=1326 audit(1755934180.713:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.504564][ T30] audit: type=1326 audit(1755934180.713:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.529519][ T30] audit: type=1326 audit(1755934180.713:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.555542][ T30] audit: type=1326 audit(1755934180.713:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.908277][ T30] audit: type=1326 audit(1755934180.713:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12233 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb738b8ebe9 code=0x7ffc0000 [ 368.914742][T12246] FAULT_INJECTION: forcing a failure. [ 368.914742][T12246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 368.986165][T12243] overlayfs: failed to clone upperpath [ 368.993460][T12246] CPU: 1 UID: 0 PID: 12246 Comm: syz.3.1866 Not tainted syzkaller #0 PREEMPT(full) [ 368.993488][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.993498][T12246] Call Trace: [ 368.993504][T12246] [ 368.993511][T12246] dump_stack_lvl+0x16c/0x1f0 [ 368.993535][T12246] should_fail_ex+0x512/0x640 [ 368.993556][T12246] should_fail_alloc_page+0xe7/0x130 [ 368.993574][T12246] prepare_alloc_pages+0x3c2/0x610 [ 368.993597][T12246] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 368.993616][T12246] ? stack_trace_save+0x8e/0xc0 [ 368.993640][T12246] ? __pfx_stack_trace_save+0x10/0x10 [ 368.993663][T12246] ? stack_depot_save_flags+0x29/0x9c0 [ 368.993683][T12246] ? rcu_is_watching+0x12/0xc0 [ 368.993706][T12246] ? kasan_save_stack+0x42/0x60 [ 368.993723][T12246] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 368.993741][T12246] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 368.993759][T12246] ? inode_init_always_gfp+0xce4/0x1030 [ 368.993779][T12246] ? new_inode+0x22/0x1c0 [ 368.993807][T12246] ? __debugfs_create_file+0x11c/0x6b0 [ 368.993829][T12246] ? debugfs_create_file_full+0x41/0x60 [ 368.993849][T12246] ? ref_tracker_dir_debugfs+0x19d/0x290 [ 368.993870][T12246] ? alloc_netdev_mqs+0x30f/0x1530 [ 368.993889][T12246] ? rtnl_create_link+0xc08/0xf90 [ 368.993907][T12246] ? rtnl_newlink+0xb69/0x2000 [ 368.993927][T12246] ? ___sys_sendmsg+0x134/0x1d0 [ 368.993944][T12246] ? __sys_sendmsg+0x16d/0x220 [ 368.993960][T12246] ? do_syscall_64+0xcd/0x4c0 [ 368.993978][T12246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.993998][T12246] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 368.994019][T12246] ? policy_nodemask+0xea/0x4e0 [ 368.994041][T12246] alloc_pages_mpol+0x1fb/0x550 [ 368.994060][T12246] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 368.994081][T12246] ? inode_doinit_with_dentry+0x84b/0x12e0 [ 368.994106][T12246] alloc_pages_noprof+0x131/0x390 [ 368.994126][T12246] get_free_pages_noprof+0x10/0xb0 [ 368.994147][T12246] inode_doinit_with_dentry+0x8d6/0x12e0 [ 368.994173][T12246] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 368.994200][T12246] selinux_d_instantiate+0x26/0x30 [ 368.994223][T12246] security_d_instantiate+0x142/0x1a0 [ 368.994248][T12246] d_instantiate+0x5c/0x90 [ 368.994271][T12246] __debugfs_create_file+0x286/0x6b0 [ 368.994293][T12246] debugfs_create_file_full+0x41/0x60 [ 368.994315][T12246] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 368.994339][T12246] ref_tracker_dir_debugfs+0x19d/0x290 [ 368.994359][T12246] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 368.994388][T12246] ? __kvmalloc_node_noprof+0x298/0x620 [ 368.994406][T12246] ? alloc_netdev_mqs+0xd2/0x1530 [ 368.994423][T12246] ? lockdep_init_map_type+0x5c/0x280 [ 368.994442][T12246] alloc_netdev_mqs+0x30f/0x1530 [ 368.994462][T12246] rtnl_create_link+0xc08/0xf90 [ 368.994483][T12246] rtnl_newlink+0xb69/0x2000 [ 368.994505][T12246] ? __pfx_rtnl_newlink+0x10/0x10 [ 368.994523][T12246] ? avc_has_perm_noaudit+0x117/0x3b0 [ 368.994541][T12246] ? rcu_is_watching+0x12/0xc0 [ 368.994561][T12246] ? lock_release+0x201/0x2f0 [ 368.994587][T12246] ? avc_has_perm_noaudit+0x149/0x3b0 [ 368.994606][T12246] ? cred_has_capability.isra.0+0x190/0x310 [ 368.994632][T12246] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 368.994662][T12246] ? cap_capable+0xb3/0x250 [ 368.994683][T12246] ? rcu_is_watching+0x12/0xc0 [ 368.994704][T12246] ? __pfx_rtnl_newlink+0x10/0x10 [ 368.994722][T12246] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 368.994741][T12246] ? rcu_is_watching+0x12/0xc0 [ 368.994761][T12246] ? __pfx_rtnl_newlink+0x10/0x10 [ 368.994779][T12246] ? lock_release+0x201/0x2f0 [ 368.994808][T12246] ? __pfx_rtnl_newlink+0x10/0x10 [ 368.994827][T12246] rtnetlink_rcv_msg+0x95b/0xe90 [ 368.994848][T12246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.994870][T12246] ? ref_tracker_free+0x37c/0x830 [ 368.994892][T12246] netlink_rcv_skb+0x155/0x420 [ 368.994913][T12246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.994933][T12246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.994956][T12246] ? netlink_deliver_tap+0x1ae/0xd30 [ 368.994976][T12246] netlink_unicast+0x5aa/0x870 [ 368.994997][T12246] ? __pfx_netlink_unicast+0x10/0x10 [ 368.995016][T12246] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 368.995039][T12246] netlink_sendmsg+0x8d1/0xdd0 [ 368.995060][T12246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.995083][T12246] ____sys_sendmsg+0xa95/0xc70 [ 368.995106][T12246] ? copy_msghdr_from_user+0x10a/0x160 [ 368.995123][T12246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.995145][T12246] ? __pfx_kstrtouint+0x10/0x10 [ 368.995164][T12246] ? kstrtouint_from_user+0x13c/0x1d0 [ 368.995182][T12246] ___sys_sendmsg+0x134/0x1d0 [ 368.995200][T12246] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.995222][T12246] ? rcu_is_watching+0x12/0xc0 [ 368.995252][T12246] __sys_sendmsg+0x16d/0x220 [ 368.995269][T12246] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.995295][T12246] do_syscall_64+0xcd/0x4c0 [ 368.995314][T12246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.995331][T12246] RIP: 0033:0x7f1e8678ebe9 [ 368.995345][T12246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.995362][T12246] RSP: 002b:00007f1e875ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.995381][T12246] RAX: ffffffffffffffda RBX: 00007f1e869b5fa0 RCX: 00007f1e8678ebe9 [ 368.995393][T12246] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 368.995403][T12246] RBP: 00007f1e875ad090 R08: 0000000000000000 R09: 0000000000000000 [ 368.995413][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.995424][T12246] R13: 00007f1e869b6038 R14: 00007f1e869b5fa0 R15: 00007ffed705dd88 [ 368.995440][T12246] [ 369.629201][T12246] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 369.665623][ T1209] xr_serial 2-1:150.204: xr_serial converter detected [ 369.673526][ T1209] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 369.680162][ T1209] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 369.691419][ T1209] usb 2-1: USB disconnect, device number 72 [ 369.698028][ T1209] xr_serial 2-1:150.204: device disconnected [ 370.027047][T12269] vxcan1: entered allmulticast mode [ 370.056500][T12270] FAULT_INJECTION: forcing a failure. [ 370.056500][T12270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.069703][T12270] CPU: 1 UID: 0 PID: 12270 Comm: syz.0.1878 Not tainted syzkaller #0 PREEMPT(full) [ 370.069730][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.069740][T12270] Call Trace: [ 370.069745][T12270] [ 370.069751][T12270] dump_stack_lvl+0x16c/0x1f0 [ 370.069774][T12270] should_fail_ex+0x512/0x640 [ 370.069794][T12270] _copy_from_user+0x2e/0xd0 [ 370.069816][T12270] kstrtouint_from_user+0xd6/0x1d0 [ 370.069831][T12270] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 370.069849][T12270] ? 0xffffffff81000000 [ 370.069860][T12270] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 370.069897][T12270] proc_fail_nth_write+0x83/0x220 [ 370.069916][T12270] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 370.069934][T12270] ? __pfx___might_resched+0x10/0x10 [ 370.069959][T12270] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 370.069978][T12270] vfs_write+0x29d/0x11d0 [ 370.069998][T12270] ? __pfx___mutex_lock+0x10/0x10 [ 370.070017][T12270] ? __pfx_vfs_write+0x10/0x10 [ 370.070033][T12270] ? __fget_files+0x204/0x3c0 [ 370.070051][T12270] ? rcu_is_watching+0x12/0xc0 [ 370.070075][T12270] ? __fget_files+0x20e/0x3c0 [ 370.070097][T12270] ksys_write+0x12a/0x250 [ 370.070113][T12270] ? __pfx_ksys_write+0x10/0x10 [ 370.070134][T12270] do_syscall_64+0xcd/0x4c0 [ 370.070154][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.070171][T12270] RIP: 0033:0x7fb738b8d69f [ 370.070184][T12270] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 370.070201][T12270] RSP: 002b:00007fb73997b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 370.070220][T12270] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb738b8d69f [ 370.070232][T12270] RDX: 0000000000000001 RSI: 00007fb73997b0a0 RDI: 0000000000000006 [ 370.070243][T12270] RBP: 00007fb73997b090 R08: 0000000000000000 R09: 0000000000000000 [ 370.070253][T12270] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 370.070264][T12270] R13: 00007fb738db6038 R14: 00007fb738db5fa0 R15: 00007ffe02896588 [ 370.070280][T12270] [ 370.569155][T12286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 370.584744][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1885'. [ 371.362790][ T5900] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 371.521802][ T5900] usb 4-1: config 1 has an invalid interface number: 144 but max is 0 [ 371.530171][ T5900] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 371.538131][ T5900] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 371.559510][ T5900] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 371.599535][ T5900] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 371.631655][ T5900] usb 4-1: config 1 has no interface number 0 [ 371.637774][ T5900] usb 4-1: config 1 interface 144 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 371.651335][ T1209] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 371.660402][ T5900] usb 4-1: too many endpoints for config 1 interface 1 altsetting 35: 89, using maximum allowed: 30 [ 371.673222][ T5900] usb 4-1: config 1 interface 1 altsetting 35 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 371.696191][ T5900] usb 4-1: config 1 interface 144 has no altsetting 0 [ 371.703515][ T5900] usb 4-1: config 1 interface 1 has no altsetting 0 [ 371.712216][ T5900] usb 4-1: New USB device found, idVendor=046d, idProduct=08f5, bcdDevice=ad.ae [ 371.724055][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.732982][ T5900] usb 4-1: Product: syz [ 371.738203][ T5900] usb 4-1: Manufacturer: syz [ 371.744997][ T5900] usb 4-1: SerialNumber: syz [ 371.758559][T12312] tmpfs: Bad value for 'mpol' [ 371.840050][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 371.849959][ T1209] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 371.865241][T12317] netlink: 'syz.0.1894': attribute type 3 has an invalid length. [ 371.879474][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.887713][ T1209] usb 5-1: Product: syz [ 371.894435][T12319] tmpfs: Unknown parameter 'pol' [ 371.901604][ T1209] usb 5-1: Manufacturer: syz [ 371.906293][ T1209] usb 5-1: SerialNumber: syz [ 371.914134][ T1209] usb 5-1: config 0 descriptor?? [ 371.924249][ T1209] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 371.970112][ T5900] usb 4-1: unknown interface protocol 0x99, assuming v1 [ 371.977163][ T5900] usb 4-1: 144:2 : does not exist [ 371.996946][ T5900] usb 4-1: USB disconnect, device number 68 [ 372.042328][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.144/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.659066][T12325] netlink: 'syz.1.1896': attribute type 2 has an invalid length. [ 372.671751][T12325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=12325 comm=syz.1.1896 [ 372.689518][T12325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12325 comm=syz.1.1896 [ 373.173925][T12348] lo speed is unknown, defaulting to 1000 [ 373.181180][T12348] lo speed is unknown, defaulting to 1000 [ 373.187199][T12348] lo speed is unknown, defaulting to 1000 [ 373.208800][T12349] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=12349 comm=syz.2.1902 [ 373.252293][T12351] bridge0: left promiscuous mode [ 373.259809][T12351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.267901][T12351] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.271274][T12348] infiniband syz2: set active [ 373.279333][T12351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.279846][T12348] infiniband syz2: added lo [ 373.299494][ T1209] lo speed is unknown, defaulting to 1000 [ 373.305656][ T1209] syz2: Port: 1 Link ACTIVE [ 373.311879][T12348] syz2: rxe_create_qp: returned err = -2 [ 373.317567][T12348] infiniband syz2: Couldn't create ib_mad QP1 [ 373.324728][T12348] infiniband syz2: Couldn't open port 1 [ 373.345164][T12348] RDS/IB: syz2: added [ 373.350165][T12348] smc: adding ib device syz2 with port count 1 [ 373.356581][T12348] smc: ib device syz2 port 1 has pnetid [ 373.363008][ T5913] lo speed is unknown, defaulting to 1000 [ 373.369387][T12348] lo speed is unknown, defaulting to 1000 [ 373.384829][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'. [ 373.423082][ T13] syzkaller0: tun_net_xmit 76 [ 373.432934][ T13] syzkaller0: tun_net_xmit 48 [ 373.437852][T12354] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 373.444183][T12354] syzkaller0: Linktype set failed because interface is up [ 373.451560][T12348] lo speed is unknown, defaulting to 1000 [ 373.451594][ T5913] syzkaller0: tun_net_xmit 76 [ 373.511015][T12348] lo speed is unknown, defaulting to 1000 [ 373.581767][T12348] lo speed is unknown, defaulting to 1000 [ 373.625892][T12348] lo speed is unknown, defaulting to 1000 [ 373.710708][T12359] 9pnet_fd: Insufficient options for proto=fd [ 373.809599][ T5913] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 373.959699][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 373.970249][ T5913] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 373.981068][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.992193][ T1209] usb 5-1: USB disconnect, device number 65 [ 373.993262][ T5913] usb 4-1: Product: syz [ 374.012245][ T5913] usb 4-1: Manufacturer: syz [ 374.020814][ T5913] usb 4-1: SerialNumber: syz [ 374.026985][ T5913] usb 4-1: config 0 descriptor?? [ 374.033717][ T5913] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 374.609252][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'. [ 374.857829][ T5913] gspca_sonixj: reg_r err -32 [ 374.862591][ T5913] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 374.888962][T12386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.047316][T12391] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=12391 comm=syz.4.1919 [ 375.695644][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 375.695659][ T30] audit: type=1400 audit(1755934188.050:1353): avc: denied { accept } for pid=12399 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 376.899776][ T5893] usb 4-1: USB disconnect, device number 69 [ 376.942018][T12434] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 376.987419][T12434] cramfs: wrong magic [ 377.160702][T12447] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=12447 comm=syz.4.1933 [ 377.329571][ T5893] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 377.469604][ T1209] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 377.520794][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.531113][ T5893] usb 4-1: config 0 has no interfaces? [ 377.536865][ T5893] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 377.546811][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.561444][ T5893] usb 4-1: config 0 descriptor?? [ 377.584069][T12450] netlink: 'syz.2.1937': attribute type 4 has an invalid length. [ 377.629695][ T1209] usb 2-1: Using ep0 maxpacket: 8 [ 377.636132][ T1209] usb 2-1: config 9 has an invalid interface number: 70 but max is 0 [ 377.645640][ T1209] usb 2-1: config 9 has no interface number 0 [ 377.654219][ T1209] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 377.664029][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.672203][ T1209] usb 2-1: Product: syz [ 377.676780][ T1209] usb 2-1: Manufacturer: syz [ 377.682012][ T1209] usb 2-1: SerialNumber: syz [ 377.781582][ T30] audit: type=1400 audit(1755934190.140:1354): avc: denied { link } for pid=12435 comm="syz.3.1932" name="#27" dev="tmpfs" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 377.805409][ T30] audit: type=1400 audit(1755934190.140:1355): avc: denied { rename } for pid=12435 comm="syz.3.1932" name="#28" dev="tmpfs" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 377.941440][ T1209] ttusb_dec_send_command: command bulk message failed: error -22 [ 377.949714][ T1209] ttusb-dec 2-1:9.70: probe with driver ttusb-dec failed with error -22 [ 377.959565][ T1209] usb 2-1: USB disconnect, device number 73 [ 378.328990][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.940058][ T30] audit: type=1400 audit(1755934191.230:1356): avc: denied { write } for pid=12473 comm="syz.1.1944" name="file0" dev="tmpfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 379.112944][ T30] audit: type=1400 audit(1755934191.230:1357): avc: denied { open } for pid=12473 comm="syz.1.1944" path="/387/file0" dev="tmpfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 379.142475][ T30] audit: type=1400 audit(1755934191.230:1358): avc: denied { ioctl } for pid=12473 comm="syz.1.1944" path="/387/file0" dev="tmpfs" ino=2089 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 379.541219][T12486] netlink: 'syz.4.1947': attribute type 10 has an invalid length. [ 379.549152][T12486] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1947'. [ 379.558917][T12486] dummy0: entered promiscuous mode [ 379.565655][T12486] bridge0: port 4(dummy0) entered blocking state [ 379.572924][T12486] bridge0: port 4(dummy0) entered disabled state [ 379.580656][T12486] dummy0: entered allmulticast mode [ 379.600099][T12486] bridge0: port 4(dummy0) entered blocking state [ 379.606580][T12486] bridge0: port 4(dummy0) entered forwarding state [ 379.777234][ T30] audit: type=1400 audit(1755934192.130:1359): avc: denied { bind } for pid=12487 comm="syz.4.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.841995][T12490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 379.959221][T12493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1949'. [ 379.979756][ T1209] usb 4-1: USB disconnect, device number 70 [ 380.474180][ T30] audit: type=1400 audit(1755934192.330:1360): avc: denied { ioctl } for pid=12491 comm="syz.1.1949" path="socket:[37359]" dev="sockfs" ino=37359 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 380.717967][T12506] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1953'. [ 381.039618][ T1209] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 381.658310][ T1209] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 381.727671][ T1209] usb 2-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 381.737371][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.776689][ T1209] usb 2-1: config 0 descriptor?? [ 382.015908][ T1209] usb 2-1: USB disconnect, device number 74 [ 382.147457][T12524] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1959'. [ 382.427135][ T30] audit: type=1400 audit(1755934194.740:1361): avc: denied { mount } for pid=12523 comm="syz.0.1959" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 382.667282][ T30] audit: type=1400 audit(1755934194.940:1362): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 383.721956][ T30] audit: type=1800 audit(1755934196.070:1363): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1964" name="bus" dev="overlay" ino=1871 res=0 errno=0 [ 383.799652][ T5900] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 383.891362][ T5955] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 383.959523][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 383.964863][ T30] audit: type=1400 audit(1755934196.320:1364): avc: denied { bind } for pid=12550 comm="syz.4.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.989764][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.009262][ T5900] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 384.031431][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.050508][ T5900] usb 2-1: config 0 descriptor?? [ 384.070402][ T5900] usbhid 2-1:0.0: can't add hid device: -22 [ 384.076406][ T5900] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 384.149657][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 384.157631][ T5955] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 384.166846][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.174953][ T5955] usb 4-1: Product: syz [ 384.179162][ T5955] usb 4-1: Manufacturer: syz [ 384.183805][ T5955] usb 4-1: SerialNumber: syz [ 384.190906][ T5955] usb 4-1: config 0 descriptor?? [ 384.197453][ T5955] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 385.447118][ T5955] gspca_sonixj: reg_w1 err -110 [ 385.523199][T12562] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 385.528547][ T5955] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 385.717140][T12571] fuse: Unknown parameter 'rootmo' [ 386.657194][ T5955] usb 4-1: USB disconnect, device number 71 [ 386.825250][T12596] binder: 12594:12596 ioctl c0306201 0 returned -14 [ 387.407827][ T1209] usb 2-1: USB disconnect, device number 75 [ 387.457238][T12602] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=12602 comm=syz.0.1980 [ 387.859652][ T5900] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 387.870209][ T5893] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 388.169518][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 388.176013][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.189562][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.201313][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.213721][ T5900] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 388.225433][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.248359][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.257352][ T5893] usb 5-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 388.267885][ T5900] usb 4-1: config 0 descriptor?? [ 388.273582][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.284664][ T5900] usbhid 4-1:0.0: can't add hid device: -22 [ 388.291328][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 388.300407][ T5893] usb 5-1: config 0 descriptor?? [ 388.732679][ T5893] logitech-hidpp-device 0003:046D:C091.000C: unknown main item tag 0x0 [ 388.747621][ T5893] logitech-hidpp-device 0003:046D:C091.000C: hidraw0: USB HID v0.00 Device [HID 046d:c091] on usb-dummy_hcd.4-1/input0 [ 388.946101][T12606] veth0: entered promiscuous mode [ 388.985617][ T5893] usb 5-1: USB disconnect, device number 66 [ 388.992076][T12605] veth0: left promiscuous mode [ 389.739500][ T5893] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 389.782407][T12643] Failed to initialize the IGMP autojoin socket (err -2) [ 389.919548][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 390.065746][ T5893] usb 2-1: config 9 has an invalid interface number: 70 but max is 0 [ 390.077307][ T5893] usb 2-1: config 9 has no interface number 0 [ 390.100729][ T5893] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 390.109927][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.118897][ T5893] usb 2-1: Product: syz [ 390.143925][T12649] Failed to initialize the IGMP autojoin socket (err -2) [ 390.178336][ T5893] usb 2-1: Manufacturer: syz [ 390.186047][ T5893] usb 2-1: SerialNumber: syz [ 390.439523][ T5900] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 390.496902][ T5893] ttusb_dec_send_command: command bulk message failed: error -22 [ 390.504862][ T5893] ttusb-dec 2-1:9.70: probe with driver ttusb-dec failed with error -22 [ 390.526611][ T5893] usb 2-1: USB disconnect, device number 76 [ 390.592070][ T5900] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 390.601188][ T5900] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 390.609311][ T5900] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 390.627747][ T5900] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 390.650617][ T5852] usb 4-1: USB disconnect, device number 72 [ 390.662807][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 390.696960][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 391.317290][ T5900] usb 5-1: string descriptor 0 read error: -22 [ 391.323833][ T5900] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 391.333276][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.342468][ T5900] usb 5-1: config 0 descriptor?? [ 391.349748][T12650] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 391.359424][ T5900] hub 5-1:0.0: bad descriptor, ignoring hub [ 391.368639][ T5900] hub 5-1:0.0: probe with driver hub failed with error -5 [ 391.390852][ T5900] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 391.475326][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 391.833082][T12664] netlink: 'syz.3.1997': attribute type 142 has an invalid length. [ 391.859676][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1997'. [ 391.892441][ T5955] usb 5-1: USB disconnect, device number 67 [ 392.230858][T12673] pim6reg1: entered promiscuous mode [ 392.236210][T12673] pim6reg1: entered allmulticast mode [ 392.273822][ T30] audit: type=1400 audit(1755934204.630:1365): avc: denied { read } for pid=12670 comm="syz.1.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 392.569516][ T5955] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 392.819644][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 392.827063][ T5955] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 392.835470][ T5955] usb 2-1: config 0 has no interface number 0 [ 392.843358][ T5955] usb 2-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 392.854325][ T5955] usb 2-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.929587][ T5900] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 392.940071][ T5955] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 392.949212][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.962359][ T5955] usb 2-1: Product: syz [ 392.966558][ T5955] usb 2-1: Manufacturer: syz [ 392.972400][ T5955] usb 2-1: SerialNumber: syz [ 392.982732][ T5955] usb 2-1: config 0 descriptor?? [ 392.989286][ T5955] xbox_remote_probe: Unexpected endpoint_in [ 393.080817][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.093320][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.183259][ T5900] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 393.198757][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.289563][ T5900] usb 5-1: SerialNumber: syz [ 393.511294][ T5900] usb 5-1: 0:2 : does not exist [ 393.519569][ T5900] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 393.543011][ T5900] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 393.555003][ T5900] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 393.582325][ T5955] usb 2-1: USB disconnect, device number 77 [ 393.594292][ T5900] usb 5-1: USB disconnect, device number 68 [ 393.627080][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.929723][ T5913] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 394.099566][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 394.452868][ T5913] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 394.524895][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.534457][ T5913] usb 4-1: Product: syz [ 394.538747][ T5913] usb 4-1: Manufacturer: syz [ 394.554448][ T5913] usb 4-1: SerialNumber: syz [ 394.580345][ T5913] usb 4-1: config 0 descriptor?? [ 394.587369][ T5913] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 394.880149][ T1209] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 395.041844][ T1209] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 395.052527][ T1209] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 395.063536][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.181390][ T1209] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 395.282366][ T30] audit: type=1400 audit(1755934207.570:1366): avc: denied { append } for pid=12714 comm="syz.0.2014" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 395.308622][ T30] audit: type=1400 audit(1755934207.640:1367): avc: denied { read } for pid=12720 comm="syz.2.2016" name="file0" dev="tmpfs" ino=2871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 395.755959][ T30] audit: type=1400 audit(1755934208.110:1368): avc: denied { remount } for pid=12734 comm="syz.1.2020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 395.810718][T12739] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2021'. [ 396.080874][ T30] audit: type=1400 audit(1755934208.440:1369): avc: denied { mounton } for pid=12744 comm="syz.1.2024" path="/proc/1257/task" dev="proc" ino=39098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 396.104793][ T30] audit: type=1400 audit(1755934208.440:1370): avc: denied { mount } for pid=12744 comm="syz.1.2024" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 396.198407][T12753] Failed to initialize the IGMP autojoin socket (err -2) [ 396.232822][ T1209] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 396.241493][ T1209] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 396.248018][ T1209] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 396.264393][ T1209] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 396.272339][ T1209] usb 5-1: USB disconnect, device number 69 [ 396.714149][ T5852] usb 4-1: USB disconnect, device number 73 [ 396.902678][T12771] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 396.911979][T12771] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2031'. [ 397.341534][ T30] audit: type=1400 audit(1755934209.690:1371): avc: denied { create } for pid=12767 comm="syz.4.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 397.470352][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2038'. [ 397.491302][T12786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12786 comm=syz.3.2038 [ 397.577778][ T30] audit: type=1400 audit(1755934209.930:1372): avc: denied { read } for pid=12789 comm="syz.1.2039" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 397.604487][ T30] audit: type=1400 audit(1755934209.930:1373): avc: denied { open } for pid=12789 comm="syz.1.2039" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 397.631685][T12792] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 397.639413][T12792] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2039'. [ 397.650707][ T30] audit: type=1400 audit(1755934209.970:1374): avc: denied { ioctl } for pid=12789 comm="syz.1.2039" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 397.839514][ T6014] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 397.856095][T12802] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.2041'. [ 398.269553][ T6014] usb 4-1: Using ep0 maxpacket: 16 [ 398.276209][ T6014] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.289660][ T6014] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 398.304979][ T6014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.322294][ T6014] usb 4-1: config 0 descriptor?? [ 398.334804][ T6014] usbhid 4-1:0.0: can't add hid device: -22 [ 398.346342][ T6014] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 398.577334][T12811] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 398.634384][T12813] input: syz1 as /devices/virtual/input/input21 [ 398.939505][T12821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.158715][T12821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.235923][ T30] audit: type=1400 audit(1755934211.250:1375): avc: denied { remount } for pid=12814 comm="syz.4.2046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 399.692288][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 399.701785][T12827] bridge_slave_1: left allmulticast mode [ 399.708346][T12827] bridge_slave_1: left promiscuous mode [ 399.718155][T12827] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.817472][T12827] bridge_slave_0: left allmulticast mode [ 399.908281][T12834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2051'. [ 399.917860][T12827] bridge_slave_0: left promiscuous mode [ 399.928424][T12827] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.010430][T12840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12840 comm=syz.0.2051 [ 400.308471][ T30] audit: type=1400 audit(1755934212.660:1376): avc: denied { write } for pid=12848 comm="syz.1.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.331324][ T30] audit: type=1400 audit(1755934212.690:1377): avc: denied { ioctl } for pid=12848 comm="syz.1.2055" path="socket:[38329]" dev="sockfs" ino=38329 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.619526][T12858] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.2057'. [ 401.221457][ T1209] usb 4-1: USB disconnect, device number 74 [ 401.831545][ T30] audit: type=1400 audit(1755934214.190:1378): avc: denied { mount } for pid=12889 comm="syz.1.2068" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 402.428721][T12899] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 402.498117][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2073'. [ 402.941867][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 403.164003][T12921] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=12921 comm=syz.3.2076 [ 404.586966][T12942] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.2083'. [ 404.999577][ T5852] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 405.159549][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 405.165825][ T5852] usb 2-1: config 9 has an invalid interface number: 70 but max is 0 [ 405.174887][ T5852] usb 2-1: config 9 has no interface number 0 [ 405.339745][ T5852] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 405.348809][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.380986][ T5852] usb 2-1: Product: syz [ 405.410315][ T5852] usb 2-1: Manufacturer: syz [ 405.416371][ T5852] usb 2-1: SerialNumber: syz [ 405.617050][T12957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.745185][ T5852] ttusb_dec_send_command: command bulk message failed: error -22 [ 405.753745][ T5852] ttusb-dec 2-1:9.70: probe with driver ttusb-dec failed with error -22 [ 405.775376][ T5852] usb 2-1: USB disconnect, device number 78 [ 407.982948][T12979] overlayfs: overlapping lowerdir path [ 408.090047][ T30] audit: type=1400 audit(1755934220.450:1379): avc: denied { create } for pid=12977 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 408.114361][ T30] audit: type=1400 audit(1755934220.470:1380): avc: denied { ioctl } for pid=12977 comm="syz.0.2095" path="socket:[38541]" dev="sockfs" ino=38541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 408.460630][ T30] audit: type=1400 audit(1755934220.470:1381): avc: denied { write } for pid=12977 comm="syz.0.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 408.619550][ T5913] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 408.742020][T12979] overlayfs: failed to resolve './file1': -2 [ 408.881577][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 408.904127][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 408.945023][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.959778][ T5913] usb 4-1: Product: syz [ 408.964020][ T5913] usb 4-1: Manufacturer: syz [ 408.971455][ T5913] usb 4-1: SerialNumber: syz [ 408.989900][ T5913] usb 4-1: config 0 descriptor?? [ 409.149650][ T5900] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 409.202760][ T30] audit: type=1400 audit(1755934221.560:1382): avc: denied { setopt } for pid=13008 comm="syz.0.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 409.238571][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.257660][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.273937][ T5913] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 409.310961][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 409.328212][ T5900] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 409.343455][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.354175][ T5900] usb 2-1: Product: syz [ 409.359122][ T5900] usb 2-1: Manufacturer: syz [ 409.370856][ T5900] usb 2-1: SerialNumber: syz [ 409.394687][ T5900] usb 2-1: config 0 descriptor?? [ 409.424181][ T5900] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 409.757238][ T5913] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 410.019622][ T5913] usb 4-1: USB disconnect, device number 75 [ 410.167252][T13019] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.2106'. [ 410.481441][T13021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2107'. [ 410.504466][T13021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13021 comm=syz.2.2107 [ 411.582888][ T30] audit: type=1400 audit(1755934223.790:1383): avc: denied { firmware_load } for pid=13037 comm="syz.3.2111" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 411.903353][ T5900] usb 2-1: USB disconnect, device number 79 [ 411.923311][T13044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2112'. [ 412.013123][ T30] audit: type=1400 audit(1755934224.370:1384): avc: denied { watch_sb watch_reads } for pid=13045 comm="syz.1.2113" path="/432/file0" dev="tmpfs" ino=2326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 412.091771][T13049] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2114'. [ 413.055578][T13064] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=19353 sclass=netlink_xfrm_socket pid=13064 comm=syz.3.2119 [ 413.559502][ T5913] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 413.710661][ T5913] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 413.718344][T13072] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2121'. [ 413.896440][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.927648][ T5913] usb 2-1: config 0 has no interface number 0 [ 413.996825][ T5913] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 414.007080][ T5913] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.056131][ T5913] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 414.072104][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.086372][ T5913] usb 2-1: Product: syz [ 414.090814][ T5913] usb 2-1: Manufacturer: syz [ 414.095678][ T5913] usb 2-1: SerialNumber: syz [ 414.109181][ T5913] usb 2-1: config 0 descriptor?? [ 415.737761][T13107] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 415.737761][T13107] program syz.0.2134 not setting count and/or reply_len properly [ 416.033715][ T30] audit: type=1326 audit(1755934228.390:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8678ebe9 code=0x7ffc0000 [ 416.085581][ T30] audit: type=1326 audit(1755934228.390:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8678ebe9 code=0x7ffc0000 [ 416.109704][ T30] audit: type=1326 audit(1755934228.420:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f1e8678ebe9 code=0x7ffc0000 [ 416.142069][ T30] audit: type=1400 audit(1755934228.420:1388): avc: denied { getattr } for pid=13113 comm="syz.3.2137" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 416.168340][ T30] audit: type=1326 audit(1755934228.420:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8678ebe9 code=0x7ffc0000 [ 416.212359][ T30] audit: type=1326 audit(1755934228.420:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8678ebe9 code=0x7ffc0000 [ 416.237660][ T30] audit: type=1326 audit(1755934228.420:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e8678ebe9 code=0x7ffc0000 [ 416.265535][ T30] audit: type=1326 audit(1755934228.420:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8678ebe9 code=0x7ffc0000 [ 416.290993][ T30] audit: type=1326 audit(1755934228.420:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e8678ebe9 code=0x7ffc0000 [ 416.316998][ T30] audit: type=1326 audit(1755934228.420:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13113 comm="syz.3.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e8678ebe9 code=0x7ffc0000 [ 416.392802][ T5955] usb 2-1: USB disconnect, device number 80 [ 522.689353][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 522.696333][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13116 [ 522.703699][ C0] rcu: (detected by 0, t=10502 jiffies, g=49193, q=916 ncpus=2) [ 522.711399][ C0] task:syz.3.2138 state:R running task stack:26776 pid:13116 tgid:13115 ppid:5851 task_flags:0x400140 flags:0x00004002 [ 522.724838][ C0] Call Trace: [ 522.728095][ C0] [ 522.730917][ C0] sched_show_task+0x423/0x630 [ 522.735680][ C0] ? lock_acquire+0x2cd/0x350 [ 522.740354][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 522.745615][ C0] ? rcu_dump_cpu_stacks+0x376/0x530 [ 522.750972][ C0] ? wq_watchdog_touch+0xe8/0x1d0 [ 522.755974][ C0] rcu_sched_clock_irq+0x2661/0x30c0 [ 522.761238][ C0] ? __pfx_tmigr_requires_handle_remote_up+0x10/0x10 [ 522.767905][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 522.773528][ C0] ? tmigr_requires_handle_remote+0x13f/0x310 [ 522.779569][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 522.785961][ C0] ? __cgroup_account_cputime_field+0x12c/0x1f0 [ 522.792252][ C0] ? hrtimer_run_queues+0x97/0x500 [ 522.797342][ C0] update_process_times+0x178/0x2d0 [ 522.802529][ C0] ? __pfx_update_process_times+0x10/0x10 [ 522.808235][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 522.814075][ C0] ? update_wall_time+0x67/0x90 [ 522.818904][ C0] tick_nohz_handler+0x37e/0x540 [ 522.823815][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 522.828989][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 522.834420][ C0] __hrtimer_run_queues+0x5ed/0xad0 [ 522.839593][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 522.845286][ C0] ? read_tsc+0x9/0x20 [ 522.849351][ C0] hrtimer_interrupt+0x397/0x8e0 [ 522.854310][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 522.860280][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 522.865893][ C0] [ 522.868798][ C0] [ 522.871703][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.877658][ C0] RIP: 0010:__local_bh_enable_ip+0xac/0x120 [ 522.883529][ C0] Code: 1d f9 02 5a 12 65 8b 05 f2 02 5a 12 a9 00 ff ff 00 74 4d bf 01 00 00 00 e8 c1 d5 0b 00 e8 9c 3a 47 00 fb 65 8b 05 d4 02 5a 12 <85> c0 74 52 5b 5d c3 cc cc cc cc 65 8b 05 1e 41 5a 12 85 c0 75 9e [ 522.903110][ C0] RSP: 0018:ffffc9000b8ef958 EFLAGS: 00000246 [ 522.909156][ C0] RAX: 0000000080000000 RBX: 00000000fffffe01 RCX: ffffffff81c376ef [ 522.917118][ C0] RDX: 0000000000000000 RSI: ffffffff8c162880 RDI: ffffffff817c3d54 [ 522.925069][ C0] RBP: ffffffff89afe49f R08: 0000000000000000 R09: 0000000000000000 [ 522.933029][ C0] R10: ffffffff90ab4097 R11: ffffffff9b0465e8 R12: ffffc90004465000 [ 522.940985][ C0] R13: ffffc9000b8efab0 R14: ffffc9000b8efc40 R15: 0000000000000000 [ 522.948950][ C0] ? bpf_test_run+0x2df/0x810 [ 522.953643][ C0] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 522.959605][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 522.964976][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 522.970234][ C0] bpf_test_run+0x2e4/0x810 [ 522.974716][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 522.979721][ C0] ? __asan_memset+0x23/0x50 [ 522.984311][ C0] bpf_prog_test_run_skb+0xb92/0x2280 [ 522.989663][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 522.995482][ C0] ? fput+0x9b/0xd0 [ 522.999379][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 523.005218][ C0] __sys_bpf+0x104d/0x4de0 [ 523.009652][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 523.014411][ C0] ? do_futex+0x122/0x350 [ 523.018743][ C0] ? __pfx_do_futex+0x10/0x10 [ 523.023402][ C0] ? rcu_is_watching+0x12/0xc0 [ 523.028158][ C0] ? xfd_validate_state+0x61/0x180 [ 523.033250][ C0] __x64_sys_bpf+0x78/0xc0 [ 523.037665][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 523.043639][ C0] do_syscall_64+0xcd/0x4c0 [ 523.048147][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.054013][ C0] RIP: 0033:0x7f1e8678ebe9 [ 523.058422][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.078016][ C0] RSP: 002b:00007f1e875ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.086421][ C0] RAX: ffffffffffffffda RBX: 00007f1e869b5fa0 RCX: 00007f1e8678ebe9 [ 523.094386][ C0] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 523.102350][ C0] RBP: 00007f1e86811e19 R08: 0000000000000000 R09: 0000000000000000 [ 523.110299][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.118243][ C0] R13: 00007f1e869b6038 R14: 00007f1e869b5fa0 R15: 00007ffed705dd88 [ 523.126192][ C0] [ 523.129188][ C0] rcu: rcu_preempt kthread starved for 5672 jiffies! g49193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 523.140282][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 523.150222][ C0] rcu: RCU grace-period kthread stack dump: [ 523.156082][ C0] task:rcu_preempt state:R running task stack:28320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 523.169540][ C0] Call Trace: [ 523.172791][ C0] [ 523.175697][ C0] __schedule+0x1190/0x5de0 [ 523.180170][ C0] ? rcu_is_watching+0x12/0xc0 [ 523.184910][ C0] ? __mod_timer+0x8ed/0xd30 [ 523.189475][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 523.195449][ C0] ? __pfx___schedule+0x10/0x10 [ 523.200280][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 523.205902][ C0] ? schedule+0x2d7/0x3a0 [ 523.210217][ C0] ? rcu_is_watching+0x12/0xc0 [ 523.214967][ C0] ? lock_release+0x201/0x2f0 [ 523.219643][ C0] schedule+0xe7/0x3a0 [ 523.223694][ C0] schedule_timeout+0x123/0x290 [ 523.228538][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 523.233886][ C0] ? __pfx_process_timeout+0x10/0x10 [ 523.239145][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 523.244927][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 523.250371][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 523.255125][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 523.260383][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 523.265311][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 523.270150][ C0] rcu_gp_kthread+0x270/0x380 [ 523.274824][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 523.279997][ C0] ? rcu_is_watching+0x12/0xc0 [ 523.284736][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.289909][ C0] ? __kthread_parkme+0x19e/0x250 [ 523.294926][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 523.300097][ C0] kthread+0x3c2/0x780 [ 523.304156][ C0] ? __pfx_kthread+0x10/0x10 [ 523.308734][ C0] ? rcu_is_watching+0x12/0xc0 [ 523.313487][ C0] ? __pfx_kthread+0x10/0x10 [ 523.318071][ C0] ret_from_fork+0x5d7/0x6f0 [ 523.322653][ C0] ? __pfx_kthread+0x10/0x10 [ 523.327221][ C0] ret_from_fork_asm+0x1a/0x30 [ 523.331973][ C0] [ 523.334968][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 523.341265][ C0] Sending NMI from CPU 0 to CPUs 1: [ 523.346472][ C1] NMI backtrace for cpu 1 [ 523.346484][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 523.346498][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.346505][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 523.346521][ C1] Code: 5c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 72 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 523.346533][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 523.346545][ C1] RAX: 0000000001611744 RBX: 0000000000000001 RCX: ffffffff8b939c29 [ 523.346553][ C1] RDX: ffffed10170a6656 RSI: ffffffff8c162880 RDI: ffffffff81913321 [ 523.346561][ C1] RBP: ffffed1003c5d488 R08: 0000000000000000 R09: ffffed10170a6655 [ 523.346569][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 523.346577][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab4090 R15: 0000000000000000 [ 523.346585][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 523.346598][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.346606][ C1] CR2: 0000560907effbe0 CR3: 0000000030b8e000 CR4: 00000000003526f0 [ 523.346614][ C1] Call Trace: [ 523.346620][ C1] [ 523.346625][ C1] default_idle+0x13/0x20 [ 523.346643][ C1] default_idle_call+0x6d/0xb0 [ 523.346657][ C1] do_idle+0x391/0x510 [ 523.346673][ C1] ? __pfx_do_idle+0x10/0x10 [ 523.346687][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 523.346703][ C1] cpu_startup_entry+0x4f/0x60 [ 523.346718][ C1] start_secondary+0x21d/0x2b0 [ 523.346736][ C1] ? __pfx_start_secondary+0x10/0x10 [ 523.346755][ C1] common_startup_64+0x13e/0x148 [ 523.346774][ C1]