last executing test programs: 13.237376671s ago: executing program 1 (id=2470): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x0, 0x800f002, 0x1000, &(0x7f0000639000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) 11.714804203s ago: executing program 1 (id=2473): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f89880", 0x73, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584920271", 0x43}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd1", 0x62}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.262141771s ago: executing program 1 (id=2479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) 10.301723843s ago: executing program 1 (id=2484): write(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = socket(0x29, 0xa, 0x3280) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00000001c0), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000140008008000"/34], 0x28}}, 0x0) 8.22137589s ago: executing program 4 (id=2489): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002811ff"], 0xfdef) 7.506548859s ago: executing program 4 (id=2493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x2) lsetxattr$security_ima(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f0000000000)=@ng={0x4, 0x12}, 0x2, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, r4, 0xc8cd000) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x7c7d0eb92800643c) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="d4000000150a010200000000000000000a00000b0800034000eebdea59a1cc8becf75cacde318d2beb875944f3483643d6daf08d93e277c4a1c8c23c3b085c46b69dc528a3005a698ad46137113b56f247a2086c873ab40e075838200c435383084814783225232c5369cd0073b3d4a7a70900010073797a31000000000c00064000000000000000010900020073797a32000000002f000800ced3ecc891a2ae208a82f17d29cb038b2f3644ed882d9254ad0caf6b61c1d59ac2e9c12e33f9a602c646b500"], 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x60850) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b0000000000060001"], 0x40}}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) 6.785682695s ago: executing program 2 (id=2494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000100)={0x8, 0x8, [0x7, 0x100]}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 6.667690888s ago: executing program 0 (id=2495): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffd, 0x4, 0x10, 0x3}, {0x10000002, 0x4, 0xf}], 0x10, 0xa}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(0x3) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) 6.546518416s ago: executing program 4 (id=2496): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74f", 0x86}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d", 0xd0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b", 0x41}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.147664729s ago: executing program 3 (id=2497): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x1, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) read(r1, &(0x7f0000000280)=""/134, 0x86) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0x3457, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r8, &(0x7f00000014c0)=[{&(0x7f0000000800)=""/203, 0xcb}], 0x1, 0x182, 0x20010000) fcntl$addseals(r8, 0x409, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r9, r10/1000+60000}, 0x10) accept4(r0, 0x0, 0x0, 0x80800) 6.111687912s ago: executing program 1 (id=2498): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r8, 0x40104d14, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, 0x0, 0x50) close(r9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) socket$kcm(0x11, 0x3, 0x0) write$tun(r8, &(0x7f0000000580)={@val={0x0, 0x809b}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "d8b8", "bc1a9d", 0x5898, "1279ab4699e6fbc5368509b7ee1c4317204318af318053cf7c19817831bc73a8498d68df9925381cc0a1d79f9d5d5ccab8b97f55990150d13dada76fbac07233d9e05c8a654617aa8091b614d14dfc0c849a8e8875c64af8982ab0620b4dc04f4947677e919abae4bbd894b911c706db8897305e91f865389710333b0b8f6f0b9a8ecd64897a9f6ed6f67d1337597989916d1c7bbb6f63fa9904a54a34efd0b19b999701efc604ba4e9dd1a902a961550788cdd36258d466c8f6265ff0d20618100bcc8a3d8b2c51c9b90541f82bcd5c33653d17ddb539646ee29de94ac3450ed791b344e8017fd6814f4328409699bc8b3536ae00"}}}}}}, 0x110) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) io_cancel(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2, r1, &(0x7f0000000080)="23a2cfbedf2be8dbcbf2edb742c9127050928399f11623dc18d9a566c02861932c11241fa69166664e235ff19223b530a8e74d3377f91ae93ce0fdf1786f4cc6d963bfadfc99691213e6fdc995bc22847bfb7d554c6c9c79fe62a94370638cb465c5e23a1cd207261eef394b199b6036394c72ea427c0aeb08c21093be0f633278d1e4203f771d22f4f879bc15ff72b87620e2f01b0ea6ea4ac3a9d6bebc44e34683c60c14ec3fc98bc580a41a8f7fa66d00752422c4ffd30a00e4c1b3da319741854e06b30e6127dddafb3be245499aed703850a4bfa970416e5288bb976f8f8aec04cde2612707b9606737fe75a7959bb5c60f5ffbf231", 0xf8, 0x10000, 0x0, 0x1}, &(0x7f00000001c0)) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x7040, 0x0) 6.029669554s ago: executing program 4 (id=2499): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8000) 5.995782002s ago: executing program 4 (id=2500): socket(0x3d, 0x1, 0xfffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x6a3, 0x1000000}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8e6, 0x3a, '\\xJ3\x00\xe2\x03\x82f\xc0I\x8cf\xaa\v`?7JM\x9f\xfdv\xd4!M ts\xb1\x11\xde\x10\xa2x\xcc\xcfp\xfa0\x9e\x0e\xbev\b\x12RP\xb1}\xeb\xa4\xce\xa4w\xc8\x16\x1a\xd3\x1a\xdf\xb5l\xdf\x95C\x12\x01\x01\x10\x8f\xd8\x8a\xbd0\nz\xe4\xaa\xd8\x8bk\n\x06u\r\x9c\x19S\xca\x15,Y>wCd\xf7\x03\x103+\xbc\aNq\x9fV7\xfd\xdf\xd4\xc1\xab=8\xc0\x96;\x1a\"\v\xe3\xac@CU\xca\r\xd76\t\x95\x03\x1e\xb6\xf0\xa2\xc3\xb4\x01?\xc3\xe3\xfd\x81s\x06\xe7\xe0U\xb2\x8a\xa1\xeb\xaf\xed\xe6\xa7.\"\xbe\x1e\x97\xed\xf3\xed\x8d\xb3k\x91\n#\x19YO\xac\xd7;D>~#\xe0\xf4\x0f\x1e\xecI\xd71\xcf\xbc\xa3\x00\x04\r`s\xa4\x1c}\x85\xd1hR\x1d\x11\xfb\x1e\xba', 0x3a, '\x00\x00w\xd7\xbf\x81\x00\x00\x00\x00\x00\x00:\"mN\xff\b\xed\x99\x94\x0f>\xed\xe9\xcbj\x87\xb6\x02\x18\xbb\xd8\xf1\x0e5\xfa\a\x8db\x01\x00\xe1\xc2\xdc\nUQ\xe5\xf3\x14\xef.\x869$\xf7\x1c\xfd\xd2\xf2\x84T`\xc8\xe8+\xd2]\xf9^iFV\xc5E\x00\x1cO\x16\xc8.\xc9\xa7\x13\x1b2\x04\xf4\x13\xc6\xdb\xdd@\x9d\x18\x90\xff\xf9b\x1e@f\x9e\x0e\xc2A\x80\x90o5f\x8aV\xdf*\xce\xfc\x80\x91Es\xff~\xc0\xa8P|\x1c9\xdbW\a\xc8i\x81\xf2H\xeb\xf2\x1f\x1d\a\xf7Q\xf1\xd1\f\x9fM\x99\x03\xba\xf0\xd5\x9c~\x05\xe2\x80\x15\xc2\x84 6\xd3Y\xe4\xd9\x10\x01B\xe3JJCMd\xc4VG O\\\x02\x80*c\x97\xe4\xaa', 0x3a, './bus'}, 0x1b7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x3, 0x36, &(0x7f00000052c0)=ANY=[@ANYBLOB="12010003033dd608f80600b0a85d0102030109022400020908b006090405090184435f07090581"], &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) munlockall() 5.875740605s ago: executing program 2 (id=2501): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f000031a000/0x2000)=nil, 0x2000, 0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xffffffff}, 0x1c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000300)={'HL\x00'}, &(0x7f0000000340)=0x1e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = getgid() write$FUSE_CREATE_OPEN(r0, &(0x7f0000000140)={0xa0, 0x0, 0x0, {{0xfffffffffffffffe, 0x1, 0x4, 0x8, 0x2, 0x6, {0x2, 0x67, 0x1, 0x5, 0x366d, 0xa, 0x6, 0x5, 0x0, 0x8000, 0xba9, r1, r4, 0x2, 0x7}}, {0x0, 0x10}}}, 0xa0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000110000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r0, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd5c) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f000000b200)='./file0/file0\x00', 0x0, 0x800) syz_fuse_handle_req(r0, &(0x7f0000004540)="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", 0x2000, &(0x7f000000b700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000068c0)={0x90, 0x0, 0x8, {0x7, 0x1, 0x400, 0x8, 0xf3d4, 0x9a5, {0x1, 0x50f1, 0x2, 0x100000000, 0x359, 0x1dfa, 0x8001, 0xe, 0xfffffffd, 0x4000, 0x32ab, r6, r7, 0x8ef9, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000180001002cbd7000000000000a0000032002ff050000000408000400", @ANYRES32=r10, @ANYBLOB="060015000500000028001680240001000000000000000000040204018030b90000000000000000000000000000000001"], 0x54}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="34120000120000042dbd3000fedbdf01000000034ef3660ffd5e0d22da4d204e2108000000ff03000000000005000000ff0700005d4b75a56686a078a8a6e695ef446a21238122e68cd04dcc2e51a22445d050b9d9b3ac400b2891f5526205acffee3d398d67da30525dc74692ca44a865c05f9b0118b7d7e630270dc4726bc12f3e9631fbc708ec13edb63ab8674fc8f6a5ac22957138e4b6941bcd7f98122fecf97aa8adf0bad8346c5d15df5e6f25a68d650b6ecd352912d95ed50f2c44b74aad210432b5210e1137ecdba66db66876e05b4d725c44ac5ee350cd172fa576ea1a7f27ff492a3e1ebcac5b2d811e20ef2315", @ANYRES32=r10, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) 5.484450028s ago: executing program 0 (id=2502): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0xff}}, './file0\x00'}) write$evdev(r1, &(0x7f0000000040)=[{{0x77359400}, 0x2, 0x3, 0x3}, {{}, 0x16, 0x3, 0xf}, {{0x0, 0xea60}, 0x3, 0x7, 0x4c}, {{0x77359400}, 0x17, 0x2, 0x7}], 0x60) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xb, 0x1, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@typed={0x9, 0x5d, 0x0, 0x0, @str='ceph\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&>\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@RR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00'/335, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 5.409605984s ago: executing program 2 (id=2503): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0xff}}, './file0\x00'}) write$evdev(r1, &(0x7f0000000040)=[{{0x77359400}, 0x2, 0x3, 0x3}, {{}, 0x16, 0x3, 0xf}, {{0x0, 0xea60}, 0x3, 0x7, 0x4c}, {{0x77359400}, 0x17, 0x2, 0x7}], 0x60) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xb, 0x1, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@typed={0x9, 0x5d, 0x0, 0x0, @str='ceph\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&>\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@RR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00'/335, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 5.163746788s ago: executing program 3 (id=2504): r0 = syz_open_dev$ublk_bdev(&(0x7f0000000000), 0x0, 0x0) read$ublk_bdev(r0, &(0x7f0000000040)=""/147, 0x93) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4040, 0x20) statx(r1, &(0x7f0000000180)='./file0\x00', 0x4000, 0x7ff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/1, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xb, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0xe, 0x1}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x5f, 0x30, 0x0, 0x30, 0x61]}}, &(0x7f00000003c0)=""/4096, 0x4f, 0x1000, 0x0, 0x3}, 0x28) fcntl$getown(r3, 0x9) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000001400)) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000001440)={'#! ', './file0', [{0x20, '/dev/ublkb#\x00'}, {0x20, '/dev/ublkb#\x00'}, {0x20, '/dev/ublkb#\x00'}, {0x20, ':'}, {0x20, 'l\'-*^^}.'}, {0x20, '/dev/ublkb#\x00'}, {0x20, '+.-'}, {0x20, '/dev/ublkb#\x00'}], 0xa, "fb063e0dac67e3b46cf62e6a6dc1125816284fff7281459c1a27202fa6fa3506d222f444615f588aa419ca7889bc"}, 0x89) fcntl$getownex(r0, 0x10, &(0x7f0000001500)) lsetxattr(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)=@random={'trusted.', ':'}, &(0x7f00000015c0)='/*.\x00', 0x4, 0x3) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001600)='blkio.bfq.dequeue\x00', 0x0, 0x0) read$msr(r5, &(0x7f0000001640)=""/197, 0xc5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000001740)={0x2, 0x4e20, @remote}, 0x10) mmap$snddsp_status(&(0x7f0000fef000/0xf000)=nil, 0x1000, 0x1, 0x20010, r5, 0x82000000) fchmod(r5, 0x97) getpeername(r5, &(0x7f0000001780)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000001800)=0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a00)={0xffffffffffffffff, 0x0, 0x6f, 0x6e, &(0x7f0000001840)="0a57c2b09f29d74475e5273c6d13309f6232de6cd5abef35b614880c923775c7c0ca884955f2f7b52ead4d675b262d292ef6567dd6c144f4acc9b3219b2fd075b74d7a13a97408dcf2799c7072350a5d6f12861ff06944323868e9a7815be1a7dd12ec7e7ba75c048ca8018a3d7e4f", &(0x7f00000018c0)=""/110, 0x5, 0x0, 0x1000, 0x90, &(0x7f0000001940)="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", &(0x7f0000002940)="a08eed57494a9e461102a2cd57e9fab8b5fff3a0801cca829c2e9f1c1d4a4e823ace287fffc55e65e1ce41924ece2d10723fe76f3f39daec2b712528c826fd32fa8c28421475b16ec6a8ebac61d4a8dd99bcb64d12ebf7cb779dbb951d99b7c65869077ff2b954fca7244a15f499e8d1e5d934262ead7f96f503db8ee7f5f808bac239e40601165b9cddb095ad0a9429", 0x4, 0x0, 0x5}, 0x50) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000002a80)=@rnullb, r2, &(0x7f0000002ac0)='./file0\x00') r7 = syz_ublk_setup_io_uring(0x32b3, &(0x7f0000002b00)={0x0, 0x10b7, 0x8, 0x3, 0xe4, 0x0, r5}, &(0x7f0000002b80), &(0x7f0000002bc0)=0x0, &(0x7f0000002c00)) syz_io_uring_modify_offsets$generic(0x0, r8, 0x68, 0x993a) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000002c80)={{0x1, 0x1, 0x18, r7, {0x31}}, './file1\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000002c40), r9) r10 = io_uring_setup(0x18ca, &(0x7f0000002cc0)={0x0, 0x4c79, 0x40, 0x1, 0x1ca, 0x0, r5}) io_uring_register$IORING_UNREGISTER_NAPI(r10, 0x1c, &(0x7f0000002d40), 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000004dc0)={0x18, 0x0, 0x0, {0x4}}, 0x18) 4.194195558s ago: executing program 0 (id=2505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002004000850000008200000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x37) 4.080026016s ago: executing program 3 (id=2506): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$cont(0x9, 0x0, 0x4, 0xcf8) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x800}, 0x24000080) 4.079643022s ago: executing program 0 (id=2507): socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000706010400000000000000000500000a0500010007000000d74f60678715c628"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) 4.078252834s ago: executing program 2 (id=2508): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0]) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x1ac) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) write$snapshot(r0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000007c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xc) ioctl$SNAPSHOT_FREE(r0, 0x3305) landlock_restrict_self(r1, 0x6) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="40000037132000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.772036309s ago: executing program 0 (id=2509): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000020000000100000c02000000000000000000000d00000000c9ec5598fcd836344868d83500000000000000000000cca08a06a6bc9ccc362be3dae197fd900cb12745e3bf910700bfe414189829553833898d95cbe3"], 0x0, 0x34}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f00000003c0)=0x3) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8074000bfaf1f9d457cb8a93954cb07ba16da79bbeb6df22e77536d1a600cdebd43271e3603d63fff8a565f9f6194398d95615087bef4e05401bbae9fa36dc28c9bf838806e3db6816953f817ccab1a9ed6679d33bddc98c85b0d79", @ANYRES16=r5, @ANYBLOB="01072cbd7000fedbdf250600000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) ioctl$BTRFS_IOC_QUOTA_CTL(r7, 0xc0109428, &(0x7f0000000040)={0x1, 0x5}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r8) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x2c, r9, 0x1, 0x70bd0c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) 2.771203381s ago: executing program 3 (id=2510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.609869332s ago: executing program 4 (id=2511): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lstat(&(0x7f0000002fc0)='./file1\x00', &(0x7f0000003000)) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x189c02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x0, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0xd4000000, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x7, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xffffffc0, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x41, 0x9, 0x10, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x2e, 0x1, 0x0, 0x20000200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x5, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x9, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x58, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x10000009, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x400000, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x3fe, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff6, 0xe, 0x0, 0x1, 0x4}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0x68, 0x0, 0x0) read$dsp(r5, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x420002) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa0000000000006110ad0000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300000000df008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f0000000700)="b800000500000000d8962d350a0e", 0x0, 0x107cef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000000ac0)={{r7}, "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"}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 829.609696ms ago: executing program 2 (id=2512): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8", 0x7a, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6c", 0x51}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f9760", 0x81}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 663.157921ms ago: executing program 0 (id=2513): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0x541b, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00', 0x3}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 627.45828ms ago: executing program 3 (id=2514): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f89880", 0x73, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b", 0xe3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16000000000018000000000000001701000004000000060000000000000036b01a06bfa0450a95c85e192c3e04beaa663010259f"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584920271", 0x43}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd1", 0x62}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8a}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 515.533419ms ago: executing program 2 (id=2515): madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000000), 0x0) ioperm(0x5, 0x6, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8040) r0 = socket(0x2, 0x80805, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8}, 0x14) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) cachestat(r0, &(0x7f0000000080)={0x5, 0x1}, &(0x7f00000000c0), 0x0) 481.359907ms ago: executing program 1 (id=2516): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mmap(&(0x7f0000b9e000/0x2000)=nil, 0x2000, 0xb635773f04ebbefc, 0x8031, 0xffffffffffffffff, 0x6ace9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x400a200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000015c000/0x3000)=nil, 0x3000) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x2) removexattr(0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a738e7a2030303030305f88dd382595dc1169c73c9b13303030"], 0x2d, 0xfffffffffffffffa) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x70) sched_setattr(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000024000380200000800800034018000000140007800c000100636f756e7465720004000280140000001000010000000000000000000384000a"], 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x8, 0x200, 0x9eeb, 0xffffffffffffffff, 0x10000000008, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0xec743663d7d0e967}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ppoll(&(0x7f0000000080)=[{}, {0xffffffffffffffff, 0x203}, {r2, 0x8400}], 0x3, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7df}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 0s ago: executing program 3 (id=2517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): id=13568 comm=syz.1.2070 [ 746.178319][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.223262][ T5728] usb 4-1: config 0 descriptor?? [ 746.451053][ T5728] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 746.491931][ T5718] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 746.703527][ T5718] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.713849][ T5718] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 746.728719][ T5718] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 746.738227][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 746.749818][ T5718] usb 5-1: SerialNumber: syz [ 746.768567][ T5718] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 746.905971][T13575] erofs (device loop0): cannot find valid erofs superblock [ 746.919398][ T5779] usb 4-1: USB disconnect, device number 61 [ 747.487949][T13580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.548109][T13580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.603412][ T5718] usb 5-1: USB disconnect, device number 65 [ 748.055775][ T30] audit: type=1400 audit(1782321120.811:1229): avc: denied { mounton } for pid=13584 comm="syz.0.2076" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 748.387047][T13593] tipc: Enabled bearer , priority 0 [ 748.460635][T13595] syzkaller0: entered promiscuous mode [ 748.569774][T13595] syzkaller0: entered allmulticast mode [ 748.760896][T13593] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 749.059539][T13593] FAULT_INJECTION: forcing a failure. [ 749.059539][T13593] name failslab, interval 1, probability 0, space 0, times 0 [ 749.117035][T13593] CPU: 1 UID: 0 PID: 13593 Comm: syz.4.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.117066][T13593] Tainted: [L]=SOFTLOCKUP [ 749.117073][T13593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 749.117084][T13593] Call Trace: [ 749.117091][T13593] [ 749.117098][T13593] dump_stack_lvl+0x100/0x190 [ 749.117128][T13593] should_fail_ex.cold+0x5/0xa [ 749.117154][T13593] should_failslab+0xc2/0x120 [ 749.117177][T13593] __kmalloc_noprof+0xfc/0x820 [ 749.117196][T13593] ? rcu_is_watching+0x12/0xc0 [ 749.117223][T13593] ? tomoyo_realpath_from_path+0xb6/0x690 [ 749.117251][T13593] tomoyo_realpath_from_path+0xb6/0x690 [ 749.117280][T13593] tomoyo_path_number_perm+0x23c/0x580 [ 749.117298][T13593] ? tomoyo_path_number_perm+0x22e/0x580 [ 749.117318][T13593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 749.117362][T13593] ? find_held_lock+0x2b/0x80 [ 749.117378][T13593] ? __fget_files+0x215/0x3d0 [ 749.117395][T13593] ? hook_file_ioctl_common+0x140/0x440 [ 749.117419][T13593] ? __fget_files+0x215/0x3d0 [ 749.117440][T13593] ? __fget_files+0x21f/0x3d0 [ 749.117461][T13593] security_file_ioctl+0xd3/0x230 [ 749.117483][T13593] __x64_sys_ioctl+0xb7/0x210 [ 749.117511][T13593] do_syscall_64+0x115/0x870 [ 749.117529][T13593] ? clear_bhb_loop+0x40/0x90 [ 749.117551][T13593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.117569][T13593] RIP: 0033:0x7f39c0b9ce59 [ 749.117584][T13593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.117601][T13593] RSP: 002b:00007f39c19b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.117619][T13593] RAX: ffffffffffffffda RBX: 00007f39c0e15fa0 RCX: 00007f39c0b9ce59 [ 749.117631][T13593] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 749.117642][T13593] RBP: 00007f39c19b7090 R08: 0000000000000000 R09: 0000000000000000 [ 749.117652][T13593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.117663][T13593] R13: 00007f39c0e16038 R14: 00007f39c0e15fa0 R15: 00007fff5e11cd18 [ 749.117687][T13593] [ 749.117696][T13593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 749.386236][T13592] tipc: Resetting bearer [ 749.592077][T13592] tipc: Disabling bearer [ 749.602374][T13605] binder: 13604:13605 ioctl c018620c 200000000240 returned -1 [ 749.693572][T13606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2079'. [ 749.991996][ T5718] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 750.047489][ T5728] tipc: Node number set to 3500075610 [ 750.222485][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 750.271592][ T5718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 750.306413][ T5718] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 750.407543][T13612] siw: device registration error -23 [ 750.742187][ T5779] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 751.026093][ T5779] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.187098][T13614] erofs (device loop2): cannot find valid erofs superblock [ 751.209746][ T5779] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 751.234926][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.247771][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.256002][ T5718] usb 2-1: Product: syz [ 751.260195][ T5718] usb 2-1: Manufacturer: syz [ 751.264838][ T5718] usb 2-1: SerialNumber: syz [ 751.289010][ T5718] usb 2-1: config 0 descriptor?? [ 751.307375][ T5718] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 751.340525][ T5718] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 751.351037][ T5779] usb 4-1: Product: syz [ 751.355622][ T5779] usb 4-1: Manufacturer: syz [ 751.360577][ T5779] usb 4-1: SerialNumber: syz [ 751.367341][ T5779] usb 4-1: config 0 descriptor?? [ 751.379843][ T5779] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 751.643641][T13619] netlink: 410 bytes leftover after parsing attributes in process `syz.4.2085'. [ 751.759333][ T30] audit: type=1400 audit(1782321124.511:1230): avc: denied { map } for pid=13616 comm="syz.4.2085" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 751.913183][T13611] tipc: Cannot configure node identity twice [ 751.924580][ T5779] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 751.932929][ T5779] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 751.954505][ T5718] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 751.976952][ T5779] usb 4-1: USB disconnect, device number 62 [ 752.196146][T13624] erofs (device loop0): cannot find valid erofs superblock [ 752.796928][ T5718] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 752.823953][ T5718] em28xx 2-1:0.0: board has no eeprom [ 753.069408][T13636] FAULT_INJECTION: forcing a failure. [ 753.069408][T13636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.119276][T13636] CPU: 1 UID: 0 PID: 13636 Comm: syz.0.2091 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.119305][T13636] Tainted: [L]=SOFTLOCKUP [ 753.119312][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 753.119322][T13636] Call Trace: [ 753.119329][T13636] [ 753.119336][T13636] dump_stack_lvl+0x100/0x190 [ 753.119363][T13636] should_fail_ex.cold+0x5/0xa [ 753.119387][T13636] _copy_from_user+0x2e/0xd0 [ 753.119404][T13636] __sys_bpf+0x2f5/0x4e80 [ 753.119428][T13636] ? irqentry_exit+0x210/0xa00 [ 753.119447][T13636] ? __pfx___sys_bpf+0x10/0x10 [ 753.119462][T13636] ? irqentry_exit+0x24d/0xa00 [ 753.119484][T13636] ? ksys_write+0x12a/0x250 [ 753.119516][T13636] ? find_held_lock+0x2b/0x80 [ 753.119538][T13636] ? rcu_read_lock_any_held+0x6a/0xa0 [ 753.119555][T13636] ? find_held_lock+0x2b/0x80 [ 753.119572][T13636] ? ksys_write+0x190/0x250 [ 753.119596][T13636] ? ksys_write+0x190/0x250 [ 753.119637][T13636] ? fput+0x79/0x100 [ 753.119661][T13636] ? __x64_sys_bpf+0xce/0x140 [ 753.119677][T13636] __x64_sys_bpf+0xce/0x140 [ 753.119694][T13636] ? do_syscall_64+0x90/0x870 [ 753.119712][T13636] do_syscall_64+0x115/0x870 [ 753.119726][T13636] ? clear_bhb_loop+0x40/0x90 [ 753.119746][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.119761][T13636] RIP: 0033:0x7f899679ce59 [ 753.119778][T13636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.119795][T13636] RSP: 002b:00007f8997571028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 753.119812][T13636] RAX: ffffffffffffffda RBX: 00007f8996a15fa0 RCX: 00007f899679ce59 [ 753.119823][T13636] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 753.119834][T13636] RBP: 00007f8997571090 R08: 0000000000000000 R09: 0000000000000000 [ 753.119843][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.119853][T13636] R13: 00007f8996a16038 R14: 00007f8996a15fa0 R15: 00007ffd78332698 [ 753.119881][T13636] [ 753.529488][T13628] ntfs3(nullb0): Primary boot signature is not NTFS. [ 753.587780][T13628] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 753.611913][ T5718] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 753.611963][ T5718] em28xx 2-1:0.0: dvb set to bulk mode. [ 753.613030][ T5728] em28xx 2-1:0.0: Binding DVB extension [ 753.644627][T13644] FAULT_INJECTION: forcing a failure. [ 753.644627][T13644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.644659][T13644] CPU: 1 UID: 0 PID: 13644 Comm: syz.0.2092 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.644684][T13644] Tainted: [L]=SOFTLOCKUP [ 753.644691][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 753.644701][T13644] Call Trace: [ 753.644707][T13644] [ 753.644713][T13644] dump_stack_lvl+0x100/0x190 [ 753.644739][T13644] should_fail_ex.cold+0x5/0xa [ 753.644756][T13644] _copy_from_user+0x2e/0xd0 [ 753.644768][T13644] copy_msghdr_from_user+0x9f/0x4c0 [ 753.644781][T13644] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 753.644798][T13644] ___sys_sendmsg+0x106/0x1e0 [ 753.644810][T13644] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.644819][T13644] ? __lock_acquire+0x49f/0x1a40 [ 753.644833][T13644] ? get_pid_task+0x106/0x250 [ 753.644858][T13644] __sys_sendmsg+0x160/0x210 [ 753.644872][T13644] ? __pfx___sys_sendmsg+0x10/0x10 [ 753.644893][T13644] do_syscall_64+0x115/0x870 [ 753.644904][T13644] ? clear_bhb_loop+0x40/0x90 [ 753.644918][T13644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.644928][T13644] RIP: 0033:0x7f899679ce59 [ 753.644940][T13644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.644951][T13644] RSP: 002b:00007f8997571028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.644962][T13644] RAX: ffffffffffffffda RBX: 00007f8996a15fa0 RCX: 00007f899679ce59 [ 753.644969][T13644] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 753.644975][T13644] RBP: 00007f8997571090 R08: 0000000000000000 R09: 0000000000000000 [ 753.644982][T13644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.644988][T13644] R13: 00007f8996a16038 R14: 00007f8996a15fa0 R15: 00007ffd78332698 [ 753.645002][T13644] [ 753.677941][ T30] audit: type=1400 audit(1782321126.431:1231): avc: denied { append } for pid=13645 comm="syz.0.2093" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 753.732035][T11905] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 753.813303][ T5704] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 753.894987][T11905] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 753.895036][T11905] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 753.895059][T11905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.913497][T11905] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 754.276443][ T5704] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 754.276488][ T5704] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 754.276507][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.289562][ T5704] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 754.708008][ T5779] usb 3-1: USB disconnect, device number 62 [ 754.719881][T13605] em28xx 2-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 754.734817][ T29] usb 2-1: USB disconnect, device number 52 [ 754.735938][ T29] em28xx 2-1:0.0: Disconnecting em28xx [ 754.742776][T11905] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 754.761140][ T5704] usb 5-1: USB disconnect, device number 66 [ 754.848039][ T5728] em28xx 2-1:0.0: Registering input extension [ 754.874014][ T29] em28xx 2-1:0.0: Closing input extension [ 754.935679][T11905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.952203][T11905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 754.981188][T11905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.003773][ T29] em28xx 2-1:0.0: Freeing device [ 755.016082][T11905] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 755.025606][T11905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.041590][T11905] usb 1-1: Product: syz [ 755.050245][T11905] usb 1-1: Manufacturer: syz [ 755.054940][T11905] usb 1-1: SerialNumber: syz [ 755.064106][T11905] usb 1-1: config 0 descriptor?? [ 755.071583][T13654] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 755.080649][T11905] usb 1-1: ucan: probing device on interface #0 [ 755.086989][T11905] usb 1-1: ucan: invalid EP count (1) [ 755.092509][T11905] usb 1-1: ucan: probe failed; try to update the device firmware [ 755.421848][T11905] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 755.531883][ T5728] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 755.583449][T11905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.596225][T11905] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 755.605428][T11905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.614019][T11905] usb 4-1: Product: syz [ 755.618349][T11905] usb 4-1: Manufacturer: syz [ 755.623117][T11905] usb 4-1: SerialNumber: syz [ 755.640055][T11905] usb 4-1: config 0 descriptor?? [ 755.652592][T11905] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 755.700834][ T5728] usb 2-1: Using ep0 maxpacket: 32 [ 755.806515][ T5728] usb 2-1: no configurations [ 755.820634][ T5728] usb 2-1: can't read configurations, error -22 [ 756.151918][ T5728] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 756.239387][T13665] tipc: Cannot configure node identity twice [ 756.262630][T11905] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 756.275752][T11905] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 756.300164][T11905] usb 4-1: USB disconnect, device number 63 [ 756.312432][ T5728] usb 2-1: Using ep0 maxpacket: 32 [ 756.322980][ T5728] usb 2-1: no configurations [ 756.331234][ T5728] usb 2-1: can't read configurations, error -22 [ 756.349339][ T5728] usb usb2-port1: attempt power cycle [ 756.701851][ T5728] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 756.722897][ T5728] usb 2-1: Using ep0 maxpacket: 32 [ 756.729347][ T5728] usb 2-1: no configurations [ 756.734219][ T5728] usb 2-1: can't read configurations, error -22 [ 756.802040][T11905] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 756.872121][ T5728] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 756.903672][ T5728] usb 2-1: Using ep0 maxpacket: 32 [ 756.905124][ T5728] usb 2-1: no configurations [ 756.905164][ T5728] usb 2-1: can't read configurations, error -22 [ 756.906052][ T5728] usb usb2-port1: unable to enumerate USB device [ 757.512498][T11905] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 757.652747][T11905] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 757.661987][T11905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.704012][T11905] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 757.704760][ T5704] usb 1-1: USB disconnect, device number 63 [ 758.011543][T11905] usb 3-1: USB disconnect, device number 63 [ 758.101855][ T5704] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 758.273457][ T5704] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 758.288189][ T5704] usb 1-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 758.312272][ T5704] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 758.330275][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.613047][ T29] usb 1-1: USB disconnect, device number 64 [ 758.701840][T11905] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 758.928919][T13718] erofs (device loop2): cannot find valid erofs superblock [ 758.955115][T11905] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 758.978818][T11905] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 759.003151][T11905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.038253][T11905] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 759.302368][ T5704] usb 2-1: USB disconnect, device number 57 [ 759.522753][T11905] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 759.733541][T11905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.766532][T11905] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 759.784240][T11905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.801800][T11905] usb 1-1: Product: syz [ 759.807032][T11905] usb 1-1: Manufacturer: syz [ 759.816490][T11905] usb 1-1: SerialNumber: syz [ 759.836264][T11905] usb 1-1: config 0 descriptor?? [ 759.861526][T11905] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 760.485852][T11905] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 760.499315][T13730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2119'. [ 760.539551][T11905] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 760.754881][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2121'. [ 761.113503][T11905] usb 1-1: USB disconnect, device number 65 [ 761.152059][ T7514] udevd[7514]: setting owner of /dev/bus/usb/001/065 to uid=0, gid=0 failed: No such file or directory [ 761.297427][ T30] audit: type=1400 audit(1782321134.051:1232): avc: denied { create } for pid=13741 comm="syz.2.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 761.561153][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2124'. [ 761.821881][T11905] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 761.981966][T11905] usb 4-1: Using ep0 maxpacket: 32 [ 762.279378][T11905] usb 4-1: no configurations [ 762.298859][T11905] usb 4-1: can't read configurations, error -22 [ 762.317537][T13755] hub 8-0:1.0: USB hub found [ 762.414018][T13755] hub 8-0:1.0: 1 port detected [ 763.429996][T11905] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 763.462493][ T29] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 763.571909][T11905] usb 4-1: Using ep0 maxpacket: 32 [ 763.613993][ T29] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 763.614050][ T29] usb 5-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 763.614138][ T29] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 763.614187][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.950577][T11905] usb 4-1: no configurations [ 763.950591][T11905] usb 4-1: can't read configurations, error -22 [ 763.950777][T11905] usb usb4-port1: attempt power cycle [ 763.975933][ T5779] usb 5-1: USB disconnect, device number 67 [ 764.282014][T11905] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 764.356992][ T5704] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 764.502141][T11905] usb 4-1: device not accepting address 66, error -71 [ 764.527210][ T5704] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 764.568280][ T5704] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 764.592058][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.623700][ T5704] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 764.691877][ T187] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 764.831958][ T29] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 764.863144][ T187] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.871864][T11905] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 764.892600][ T187] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 764.911519][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.911539][T11905] usb 4-1: Using ep0 maxpacket: 8 [ 764.915269][T11905] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 764.927506][ T187] usb 1-1: Product: syz [ 764.934334][T11905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.946670][T11905] usb 4-1: Product: syz [ 764.950934][T11905] usb 4-1: Manufacturer: syz [ 764.955756][ T187] usb 1-1: Manufacturer: syz [ 764.967632][ T187] usb 1-1: SerialNumber: syz [ 764.972238][T11905] usb 4-1: SerialNumber: syz [ 764.993378][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 765.007502][ T187] usb 1-1: config 0 descriptor?? [ 765.016803][T11905] usb 4-1: config 0 descriptor?? [ 765.022886][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 765.039143][ T187] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 765.067319][ T29] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 765.079531][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.088160][ T29] usb 5-1: Product: syz [ 765.092510][ T29] usb 5-1: Manufacturer: syz [ 765.097196][ T29] usb 5-1: SerialNumber: syz [ 765.114811][ T29] usb 5-1: config 0 descriptor?? [ 765.115210][ T5704] usb 3-1: USB disconnect, device number 64 [ 765.121198][T13773] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 765.147181][ T29] usb 5-1: ucan: probing device on interface #0 [ 765.154411][ T29] usb 5-1: ucan: invalid EP count (1) [ 765.160059][ T29] usb 5-1: ucan: probe failed; try to update the device firmware [ 765.227333][T11905] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 765.371914][ T5779] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 765.446995][ T187] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 765.457741][ T187] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 765.473901][ T187] usb 1-1: USB disconnect, device number 66 [ 765.502263][ T5779] usb 2-1: device descriptor read/64, error -71 [ 765.751910][ T5779] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 765.882072][ T5779] usb 2-1: device descriptor read/64, error -71 [ 766.505212][ T5779] usb usb2-port1: attempt power cycle [ 766.941997][ T5779] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 767.075103][ T5779] usb 2-1: device descriptor read/8, error -71 [ 767.266212][T13794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2140'. [ 767.293020][T11905] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 767.306304][T11905] usb 4-1: USB disconnect, device number 67 [ 767.335276][ T5779] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 767.404249][ T5779] usb 2-1: device descriptor read/8, error -71 [ 767.876939][ T5779] usb usb2-port1: unable to enumerate USB device [ 767.894128][ T30] audit: type=1400 audit(1782321140.651:1233): avc: denied { mounton } for pid=13790 comm="syz.0.2139" path="/syzcgroup/unified/syz0" dev="rpc_pipefs" ino=41111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 768.311610][ T5728] usb 5-1: USB disconnect, device number 68 [ 769.149341][T13809] erofs (device loop4): cannot find valid erofs superblock [ 769.803207][T13813] random: crng reseeded on system resumption [ 769.901218][ T187] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 769.918986][T13813] Restarting kernel threads ... [ 769.924122][T13813] Done restarting kernel threads. [ 770.241816][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 770.258740][ T187] usb 2-1: no configurations [ 770.265277][ T187] usb 2-1: can't read configurations, error -22 [ 770.361939][ T5728] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 770.431989][ T187] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 770.461877][ T5779] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 770.543757][ T5728] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 770.552885][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.563373][ T5728] usb 4-1: config 0 descriptor?? [ 770.573410][ T5728] cp210x 4-1:0.0: cp210x converter detected [ 770.601905][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 770.637712][ T5779] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 770.648805][ T5779] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 770.659181][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.716742][ T5779] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 770.734278][T11905] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 770.912010][T11905] usb 5-1: Using ep0 maxpacket: 32 [ 770.926377][T11905] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 770.942887][T11905] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 770.958947][T11905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.972756][ T5779] usb 3-1: USB disconnect, device number 65 [ 771.000154][T11905] usb 5-1: Product: syz [ 771.009620][T11905] usb 5-1: Manufacturer: syz [ 771.031251][T11905] usb 5-1: SerialNumber: syz [ 771.045959][ T5728] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 771.059581][T11905] usb 5-1: config 0 descriptor?? [ 771.896162][ T5728] cp210x 4-1:0.0: querying part number failed [ 771.903871][ T5728] usb 4-1: cp210x converter now attached to ttyUSB0 [ 771.979087][ T187] usb 2-1: device descriptor read/all, error -71 [ 771.986058][ T187] usb usb2-port1: attempt power cycle [ 772.011843][ T30] audit: type=1400 audit(1782321144.761:1234): avc: denied { attach_queue } for pid=13823 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 772.820211][T13842] erofs (device loop1): cannot find valid erofs superblock [ 773.566308][ T5728] usb 5-1: USB disconnect, device number 69 [ 773.633704][T13846] FAULT_INJECTION: forcing a failure. [ 773.633704][T13846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.640556][ T187] usb 4-1: USB disconnect, device number 68 [ 773.647939][T13846] CPU: 1 UID: 0 PID: 13846 Comm: syz.2.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.647965][T13846] Tainted: [L]=SOFTLOCKUP [ 773.647970][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 773.647980][T13846] Call Trace: [ 773.647986][T13846] [ 773.647992][T13846] dump_stack_lvl+0x100/0x190 [ 773.648019][T13846] should_fail_ex.cold+0x5/0xa [ 773.648041][T13846] _copy_from_user+0x2e/0xd0 [ 773.648057][T13846] copy_msghdr_from_user+0x9f/0x4c0 [ 773.648074][T13846] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 773.648100][T13846] ___sys_sendmsg+0x106/0x1e0 [ 773.648117][T13846] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.648131][T13846] ? __lock_acquire+0x49f/0x1a40 [ 773.648150][T13846] ? get_pid_task+0x106/0x250 [ 773.648189][T13846] __sys_sendmsg+0x160/0x210 [ 773.648209][T13846] ? __pfx___sys_sendmsg+0x10/0x10 [ 773.648243][T13846] do_syscall_64+0x115/0x870 [ 773.648259][T13846] ? clear_bhb_loop+0x40/0x90 [ 773.648279][T13846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.648294][T13846] RIP: 0033:0x7f6bf039ce59 [ 773.648308][T13846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.648322][T13846] RSP: 002b:00007f6bf1333028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.648338][T13846] RAX: ffffffffffffffda RBX: 00007f6bf0615fa0 RCX: 00007f6bf039ce59 [ 773.648348][T13846] RDX: 0000000000080000 RSI: 0000200000000240 RDI: 0000000000000003 [ 773.648358][T13846] RBP: 00007f6bf1333090 R08: 0000000000000000 R09: 0000000000000000 [ 773.648368][T13846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.648377][T13846] R13: 00007f6bf0616038 R14: 00007f6bf0615fa0 R15: 00007ffdf08362e8 [ 773.648398][T13846] [ 773.933700][T13851] erofs (device loop2): cannot find valid erofs superblock [ 773.967275][T13852] tmpfs: Bad value for 'mpol' [ 773.972980][ T187] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 773.989920][ T187] cp210x 4-1:0.0: device disconnected [ 774.088589][T13855] siw: device registration error -23 [ 775.131837][T11905] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 775.141842][ T5779] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 775.281861][ T5779] usb 1-1: device descriptor read/64, error -71 [ 775.881902][T11905] usb 3-1: Using ep0 maxpacket: 32 [ 775.889829][T11905] usb 3-1: no configurations [ 775.896027][T11905] usb 3-1: can't read configurations, error -22 [ 775.940239][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'. [ 775.952870][ T30] audit: type=1400 audit(1782321148.711:1235): avc: denied { getopt } for pid=13878 comm="syz.3.2167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 775.978400][T13882] netlink: 'syz.3.2167': attribute type 12 has an invalid length. [ 775.986472][ T5779] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 776.051892][T11905] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 776.082484][T13886] random: crng reseeded on system resumption [ 776.175419][ T5779] usb 1-1: device descriptor read/64, error -71 [ 776.189318][T13886] Restarting kernel threads ... [ 776.194608][T13886] Done restarting kernel threads. [ 776.241104][T13890] tipc: Cannot configure node identity twice [ 776.262298][T11905] usb 3-1: Using ep0 maxpacket: 32 [ 776.270563][T11905] usb 3-1: no configurations [ 776.278686][T11905] usb 3-1: can't read configurations, error -22 [ 776.292233][ T5779] usb usb1-port1: attempt power cycle [ 776.297703][T11905] usb usb3-port1: attempt power cycle [ 776.441958][ T29] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 776.603202][ T29] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 776.619768][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.630034][ T29] usb 2-1: config 0 descriptor?? [ 776.636777][ T29] cp210x 2-1:0.0: cp210x converter detected [ 776.642808][ T5779] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 776.650370][T11905] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 776.672876][ T5779] usb 1-1: device descriptor read/8, error -71 [ 776.679114][T11905] usb 3-1: Using ep0 maxpacket: 32 [ 776.684736][T11905] usb 3-1: no configurations [ 776.689328][T11905] usb 3-1: can't read configurations, error -22 [ 776.821948][T11905] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 776.837124][ T29] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 776.846525][ T29] cp210x 2-1:0.0: querying part number failed [ 776.858769][T11905] usb 3-1: Using ep0 maxpacket: 32 [ 776.862042][ T187] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 776.866385][ T29] usb 2-1: cp210x converter now attached to ttyUSB0 [ 776.879855][T11905] usb 3-1: no configurations [ 776.885352][T11905] usb 3-1: can't read configurations, error -22 [ 776.966781][ T5779] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 776.976791][T11905] usb usb3-port1: unable to enumerate USB device [ 777.002303][ T5779] usb 1-1: device descriptor read/8, error -71 [ 777.127597][ T5779] usb usb1-port1: unable to enumerate USB device [ 777.381817][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 777.463440][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 777.480634][ T187] usb 5-1: config 9 has an invalid interface number: 5 but max is 1 [ 777.489030][ T187] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 777.499552][ T187] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 777.511224][ T187] usb 5-1: config 9 has no interface number 0 [ 777.517540][ T187] usb 5-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 777.528373][ T187] usb 5-1: config 9 interface 5 has no altsetting 0 [ 777.539260][ T187] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 777.548830][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.557368][ T187] usb 5-1: Product: syz [ 777.561590][ T187] usb 5-1: Manufacturer: syz [ 777.566550][ T187] usb 5-1: SerialNumber: syz [ 778.822093][ T5728] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 778.889305][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2177'. [ 779.474928][ T5728] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 779.609369][ T5728] usb 1-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 779.706903][ T5704] usb 2-1: USB disconnect, device number 65 [ 779.722688][ T5728] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 779.748343][ T5704] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 779.770060][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.783970][ T5704] cp210x 2-1:0.0: device disconnected [ 779.953744][T13926] FAULT_INJECTION: forcing a failure. [ 779.953744][T13926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.967027][T13926] CPU: 0 UID: 0 PID: 13926 Comm: syz.3.2181 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.967054][T13926] Tainted: [L]=SOFTLOCKUP [ 779.967059][T13926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 779.967066][T13926] Call Trace: [ 779.967071][T13926] [ 779.967075][T13926] dump_stack_lvl+0x100/0x190 [ 779.967096][T13926] should_fail_ex.cold+0x5/0xa [ 779.967113][T13926] _copy_from_user+0x2e/0xd0 [ 779.967124][T13926] move_addr_to_kernel+0x65/0x170 [ 779.967136][T13926] __sys_connect+0xb5/0x170 [ 779.967148][T13926] ? __pfx___sys_connect+0x10/0x10 [ 779.967166][T13926] ? __pfx_ksys_write+0x10/0x10 [ 779.967185][T13926] __x64_sys_connect+0x72/0xb0 [ 779.967197][T13926] ? lockdep_hardirqs_on+0x78/0x100 [ 779.967208][T13926] do_syscall_64+0x115/0x870 [ 779.967219][T13926] ? clear_bhb_loop+0x40/0x90 [ 779.967232][T13926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.967243][T13926] RIP: 0033:0x7f861179ce59 [ 779.967252][T13926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.967262][T13926] RSP: 002b:00007f86126f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 779.967273][T13926] RAX: ffffffffffffffda RBX: 00007f8611a16090 RCX: 00007f861179ce59 [ 779.967280][T13926] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000005 [ 779.967286][T13926] RBP: 00007f86126f4090 R08: 0000000000000000 R09: 0000000000000000 [ 779.967292][T13926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.967299][T13926] R13: 00007f8611a16128 R14: 00007f8611a16090 R15: 00007ffc20884608 [ 779.967312][T13926] [ 780.167893][T11905] usb 1-1: USB disconnect, device number 71 [ 780.198162][ T30] audit: type=1400 audit(1782321152.921:1236): avc: denied { getopt } for pid=13924 comm="syz.3.2181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 781.581941][ T187] usb 5-1: USB disconnect, device number 70 [ 781.684455][T13940] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2185'. [ 781.735974][T13940] bond0 (unregistering): Released all slaves [ 781.787448][ T30] audit: type=1400 audit(1782321154.541:1237): avc: denied { execute } for pid=13937 comm="syz.4.2185" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 781.962054][ T5779] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 782.130873][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 782.131874][ T187] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 782.145083][ T5779] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 782.154213][ T5779] usb 1-1: config 0 has no interface number 1 [ 782.180741][ T5779] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 782.234359][ T5779] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 782.246198][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'. [ 782.257141][ T5779] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 782.269810][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2182'. [ 782.290232][ T5779] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 782.301931][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 782.327704][ T187] usb 4-1: no configurations [ 782.333398][ T187] usb 4-1: can't read configurations, error -22 [ 782.351599][ T5779] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.410528][ T5779] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 782.504143][T13951] (syz.4.2187,13951,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 782.512964][T13951] (syz.4.2187,13951,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 782.524309][ T187] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 782.534908][ T5779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 782.546306][ T5779] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 782.558244][ T5779] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 782.567526][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.579129][ T5779] usb 1-1: Product: syz [ 782.583432][ T5779] usb 1-1: Manufacturer: syz [ 782.588218][ T5779] usb 1-1: SerialNumber: syz [ 782.595514][ T5779] usb 1-1: config 0 descriptor?? [ 782.601358][T13936] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 782.613932][ T5779] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 782.626727][ T5779] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 782.783986][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 782.789713][ T187] usb 4-1: no configurations [ 782.797276][ T187] usb 4-1: can't read configurations, error -22 [ 782.804420][ T187] usb usb4-port1: attempt power cycle [ 782.812023][T13959] netlink: 'syz.4.2189': attribute type 14 has an invalid length. [ 782.928313][ T5779] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 782.956647][ T5779] usb 1-1: USB disconnect, device number 72 [ 783.081560][T13967] random: crng reseeded on system resumption [ 783.348788][T13967] Restarting kernel threads ... [ 783.354041][T13967] Done restarting kernel threads. [ 783.370090][ T187] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 783.743528][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 783.750811][ T187] usb 4-1: no configurations [ 783.757133][ T187] usb 4-1: can't read configurations, error -22 [ 783.822356][T13970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 783.879293][ T6992] udevd[6992]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.902423][ T187] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 783.963652][ T5704] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 784.046319][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 784.229755][ T187] usb 4-1: no configurations [ 784.234486][ T187] usb 4-1: can't read configurations, error -22 [ 784.241795][ T187] usb usb4-port1: unable to enumerate USB device [ 784.353586][ T5704] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 784.363087][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.377617][ T5704] usb 3-1: config 0 descriptor?? [ 784.392488][ T5704] cp210x 3-1:0.0: cp210x converter detected [ 784.925286][ T5704] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 784.932929][ T5704] cp210x 3-1:0.0: querying part number failed [ 784.944239][ T5704] usb 3-1: cp210x converter now attached to ttyUSB0 [ 785.079518][T13984] FAULT_INJECTION: forcing a failure. [ 785.079518][T13984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.094184][T13984] CPU: 0 UID: 0 PID: 13984 Comm: syz.4.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.094213][T13984] Tainted: [L]=SOFTLOCKUP [ 785.094219][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.094229][T13984] Call Trace: [ 785.094235][T13984] [ 785.094243][T13984] dump_stack_lvl+0x100/0x190 [ 785.094273][T13984] should_fail_ex.cold+0x5/0xa [ 785.094298][T13984] _copy_from_user+0x2e/0xd0 [ 785.094317][T13984] copy_msghdr_from_user+0x9f/0x4c0 [ 785.094337][T13984] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 785.094367][T13984] ___sys_sendmsg+0x106/0x1e0 [ 785.094387][T13984] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.094402][T13984] ? __lock_acquire+0x49f/0x1a40 [ 785.094425][T13984] ? get_pid_task+0x106/0x250 [ 785.094469][T13984] __sys_sendmsg+0x160/0x210 [ 785.094494][T13984] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.094531][T13984] do_syscall_64+0x115/0x870 [ 785.094549][T13984] ? clear_bhb_loop+0x40/0x90 [ 785.094571][T13984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.094589][T13984] RIP: 0033:0x7f39c0b9ce59 [ 785.094604][T13984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.094620][T13984] RSP: 002b:00007f39c19b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.094638][T13984] RAX: ffffffffffffffda RBX: 00007f39c0e15fa0 RCX: 00007f39c0b9ce59 [ 785.094649][T13984] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 785.094660][T13984] RBP: 00007f39c19b7090 R08: 0000000000000000 R09: 0000000000000000 [ 785.094671][T13984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.094681][T13984] R13: 00007f39c0e16038 R14: 00007f39c0e15fa0 R15: 00007fff5e11cd18 [ 785.094706][T13984] [ 785.745868][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2201'. [ 785.779924][T13998] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2201'. [ 785.805034][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2201'. [ 786.159595][ T5704] usb 3-1: USB disconnect, device number 70 [ 786.167101][ T5704] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 786.205437][ T5704] cp210x 3-1:0.0: device disconnected [ 787.317656][T14017] (syz.1.2203,14017,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 787.326471][T14017] (syz.1.2203,14017,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 788.657385][T14019] (syz.0.2205,14019,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 788.666235][T14019] (syz.0.2205,14019,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 789.529622][T14036] sctp: [Deprecated]: syz.1.2209 (pid 14036) Use of int in maxseg socket option. [ 789.529622][T14036] Use struct sctp_assoc_value instead [ 789.655151][T11905] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 789.793039][T14038] siw: device registration error -23 [ 789.885934][T11905] usb 3-1: Using ep0 maxpacket: 32 [ 789.910741][T11905] usb 3-1: no configurations [ 789.986890][T11905] usb 3-1: can't read configurations, error -22 [ 790.752169][T11905] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 790.933032][T11905] usb 3-1: Using ep0 maxpacket: 32 [ 790.949228][T11905] usb 3-1: no configurations [ 790.954964][T11905] usb 3-1: can't read configurations, error -22 [ 790.972484][T11905] usb usb3-port1: attempt power cycle [ 791.249531][ T30] audit: type=1400 audit(1782321164.001:1238): avc: denied { create } for pid=14043 comm="syz.1.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 791.289204][ T30] audit: type=1400 audit(1782321164.001:1239): avc: denied { read } for pid=14043 comm="syz.1.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 791.291956][ T5704] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 791.416890][T11905] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 792.561869][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 792.570906][ T5704] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 792.585675][ T5704] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 792.595206][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.603242][ T5704] usb 4-1: Product: syz [ 792.607387][ T5704] usb 4-1: Manufacturer: syz [ 792.776194][ T5704] usb 4-1: SerialNumber: syz [ 792.806731][T11905] usb 3-1: Using ep0 maxpacket: 32 [ 792.840809][T11905] usb 3-1: device descriptor read/all, error -71 [ 792.840897][ T5704] usb 4-1: config 0 descriptor?? [ 793.084426][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'. [ 793.175754][T14075] siw: device registration error -23 [ 793.184881][T11905] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 793.260643][T11905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.230662][T11905] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 794.240227][T11905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.249617][T11905] usb 3-1: Product: syz [ 794.277092][T11905] usb 3-1: Manufacturer: syz [ 794.518385][T11905] usb 3-1: SerialNumber: syz [ 794.542466][T11905] usb 3-1: config 0 descriptor?? [ 794.568124][T11905] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 794.634270][ T5779] usb 4-1: USB disconnect, device number 73 [ 795.479354][T11905] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 795.556168][T11905] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 797.656762][ T5779] usb 3-1: USB disconnect, device number 74 [ 797.932856][T14109] xt_hashlimit: size too large, truncated to 1048576 [ 798.304969][T14118] siw: device registration error -23 [ 799.659733][T14129] random: crng reseeded on system resumption [ 799.809299][T14129] Restarting kernel threads ... [ 799.814574][T14129] Done restarting kernel threads. [ 800.023637][T14135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2240'. [ 800.066760][T11905] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 800.345196][T11905] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 800.421947][T11905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.447312][T11905] usb 3-1: config 0 descriptor?? [ 800.467337][T11905] cp210x 3-1:0.0: cp210x converter detected [ 800.653747][ T187] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 800.667017][T11905] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 800.684363][T11905] cp210x 3-1:0.0: querying part number failed [ 800.724823][T11905] usb 3-1: cp210x converter now attached to ttyUSB0 [ 801.571207][ T187] usb 5-1: Using ep0 maxpacket: 32 [ 801.586807][ T30] audit: type=1400 audit(1782321173.631:1240): avc: denied { write } for pid=14143 comm="syz.0.2244" name="mouse0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 801.649133][ T187] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.751094][ T187] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 801.802672][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.872383][ T5704] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 801.886893][ T187] usb 5-1: Product: syz [ 801.921028][ T187] usb 5-1: Manufacturer: syz [ 801.962825][ T187] usb 5-1: SerialNumber: syz [ 802.074502][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 802.095954][ T187] usb 5-1: config 0 descriptor?? [ 802.125905][ T5704] usb 1-1: unable to get BOS descriptor or descriptor too short [ 802.228434][ T5704] usb 1-1: New USB device found, idVendor=10d2, idProduct=887b, bcdDevice=7c.62 [ 802.333170][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.526337][ T5704] usb 1-1: Product: syz [ 802.563264][T14159] siw: device registration error -23 [ 802.566701][ T5704] usb 1-1: Manufacturer: syz [ 802.982345][ T5704] usb 1-1: SerialNumber: syz [ 803.143016][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.149511][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.230223][ T187] usb 3-1: USB disconnect, device number 75 [ 803.255976][ T187] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 803.288540][ T187] cp210x 3-1:0.0: device disconnected [ 803.303750][ T5718] usb 5-1: USB disconnect, device number 71 [ 803.381663][ T5704] usblcd 1-1:6.0: USBLCD model not supported. [ 803.411678][ T5704] usb 1-1: USB disconnect, device number 73 [ 803.795299][T14169] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2251'. [ 804.921384][T14176] (syz.4.2253,14176,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 804.930233][T14176] (syz.4.2253,14176,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 805.625753][ T5718] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 805.768627][ T187] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 805.806924][T14192] random: crng reseeded on system resumption [ 805.959547][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2257'. [ 806.215902][ T5718] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 806.224206][ T5718] usb 1-1: config 0 has no interface number 0 [ 806.230336][ T5718] usb 1-1: config 0 interface 41 has no altsetting 0 [ 806.238735][ T5718] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 806.248088][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.256167][ T5718] usb 1-1: Product: syz [ 806.260329][ T5718] usb 1-1: Manufacturer: syz [ 806.265341][ T5718] usb 1-1: SerialNumber: syz [ 806.270494][T14192] Restarting kernel threads ... [ 806.275769][T14192] Done restarting kernel threads. [ 806.296091][ T5718] usb 1-1: config 0 descriptor?? [ 806.304631][ T187] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 806.316207][ T187] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 806.325637][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.343508][ T187] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 806.523249][ T5704] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 806.570611][ T5728] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 806.619250][ T187] usb 3-1: USB disconnect, device number 76 [ 806.733995][ T5704] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 806.743868][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.756842][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 806.767558][ T5728] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 806.779984][ T5704] usb 4-1: config 0 descriptor?? [ 806.787370][ T5704] cp210x 4-1:0.0: cp210x converter detected [ 806.794087][ T5728] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 806.805856][ T5728] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 806.815179][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.823279][ T5728] usb 2-1: Product: syz [ 806.830857][ T5728] usb 2-1: Manufacturer: syz [ 806.836674][ T5728] usb 2-1: SerialNumber: syz [ 806.845680][ T5728] usb 2-1: config 0 descriptor?? [ 806.851399][T14195] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 806.858877][T14195] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 806.868300][T14201] tmpfs: Bad value for 'mpol' [ 806.873388][ T5728] usb 2-1: ucan: probing device on interface #0 [ 806.987670][ T5704] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 806.995283][ T5704] cp210x 4-1:0.0: querying part number failed [ 807.008078][ T5704] usb 4-1: cp210x converter now attached to ttyUSB0 [ 807.854359][T14207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=14207 comm=syz.2.2261 [ 808.092075][ T5728] usb 2-1: ucan: failed to retrieve device info [ 808.665452][ T5728] usb 2-1: ucan: probe failed; try to update the device firmware [ 808.828551][ T5718] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 808.860380][ T5718] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 808.878844][ T5728] usb 4-1: USB disconnect, device number 74 [ 808.977399][ T187] usb 2-1: USB disconnect, device number 66 [ 809.001697][ T5718] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 809.019056][ T5728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 809.046467][ T5728] cp210x 4-1:0.0: device disconnected [ 809.054090][ T5718] usb 1-1: USB disconnect, device number 74 [ 809.281838][ T5704] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 809.445396][ T5704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 809.471485][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 809.495191][ T5704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 809.530627][ T5704] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 809.552138][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.571818][ T5704] usb 5-1: Product: syz [ 809.576024][ T5704] usb 5-1: Manufacturer: syz [ 809.580619][ T5704] usb 5-1: SerialNumber: syz [ 809.633128][ T5704] usb 5-1: config 0 descriptor?? [ 809.662437][T14214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 809.670181][T14214] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 809.695920][ T5704] usb 5-1: ucan: probing device on interface #0 [ 809.720710][T11905] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 809.861911][ T29] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 810.316857][T11905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 810.327292][T11905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 810.339290][T11905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 810.354089][T11905] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 810.371954][T11905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.380126][T11905] usb 4-1: Product: syz [ 810.389508][T11905] usb 4-1: Manufacturer: syz [ 810.404646][T11905] usb 4-1: SerialNumber: syz [ 810.418356][T11905] usb 4-1: config 0 descriptor?? [ 810.441013][T14223] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 810.448886][T14223] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 810.457473][T11905] usb 4-1: ucan: probing device on interface #0 [ 810.483708][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 810.505153][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 810.514991][ T29] usb 3-1: config 9 has an invalid interface number: 5 but max is 1 [ 810.531815][ T29] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 810.543971][ T29] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 810.553258][ T29] usb 3-1: config 9 has no interface number 0 [ 810.560598][ T29] usb 3-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 810.571403][ T29] usb 3-1: config 9 interface 5 has no altsetting 0 [ 810.588476][ T29] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 810.597807][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.607450][ T29] usb 3-1: Product: syz [ 810.623954][ T29] usb 3-1: Manufacturer: syz [ 810.629110][ T29] usb 3-1: SerialNumber: syz [ 811.536451][ T5704] usb 5-1: ucan: failed to retrieve device info [ 811.545390][T11905] usb 4-1: ucan: could not read protocol version, ret=-110 [ 811.551181][ T5704] usb 5-1: ucan: probe failed; try to update the device firmware [ 811.553767][T11905] usb 4-1: ucan: probe failed; try to update the device firmware [ 812.317143][T11905] usb 5-1: USB disconnect, device number 72 [ 812.627612][T14248] syzkaller0: entered promiscuous mode [ 813.956541][ T5728] usb 4-1: USB disconnect, device number 75 [ 814.031504][T14275] random: crng reseeded on system resumption [ 814.861888][T11905] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 815.111764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 815.129498][T11905] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 815.147464][T11905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.266126][T11905] usb 1-1: config 0 descriptor?? [ 815.282139][T11905] cp210x 1-1:0.0: cp210x converter detected [ 815.389100][ T29] usb 3-1: USB disconnect, device number 77 [ 815.491294][T11905] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 815.500360][T11905] cp210x 1-1:0.0: querying part number failed [ 815.868992][T11905] usb 1-1: cp210x converter now attached to ttyUSB0 [ 815.912603][T14280] Restarting kernel threads ... [ 815.918018][T14280] Done restarting kernel threads. [ 816.605958][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'. [ 818.097734][T11905] usb 1-1: USB disconnect, device number 75 [ 818.224601][T14320] siw: device registration error -23 [ 819.144704][T11905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 819.190945][T11905] cp210x 1-1:0.0: device disconnected [ 819.425189][T14319] (syz.4.2289,14319,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 819.433905][T14319] (syz.4.2289,14319,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 820.163360][T14325] (syz.0.2290,14325,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 820.172888][T14325] (syz.0.2290,14325,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 820.197520][T14339] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2293'. [ 820.495835][T14343] syzkaller0: entered promiscuous mode [ 821.103230][ T5779] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 821.228917][T14358] random: crng reseeded on system resumption [ 821.305407][T14359] siw: device registration error -23 [ 821.405411][ T5779] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 821.434765][T14358] Restarting kernel threads ... [ 821.439914][T14358] Done restarting kernel threads. [ 821.445359][ T5779] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 821.482842][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.698329][ T5779] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 822.590576][ T5718] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 822.775657][ T5718] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 822.790708][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.813951][ T5718] usb 1-1: config 0 descriptor?? [ 822.831154][ T5718] cp210x 1-1:0.0: cp210x converter detected [ 822.931946][ T5779] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 823.038371][ T5718] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 823.054093][ T5718] cp210x 1-1:0.0: querying part number failed [ 823.072733][ T5718] usb 1-1: cp210x converter now attached to ttyUSB0 [ 823.103694][ T5779] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 823.140572][ T5779] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 823.176592][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.218478][ T5779] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 823.360233][ T5718] usb 4-1: USB disconnect, device number 76 [ 823.422578][ T5704] usb 3-1: USB disconnect, device number 78 [ 824.212730][ T5704] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 824.276383][T14385] syzkaller0: entered promiscuous mode [ 824.286241][T14385] syzkaller0: entered allmulticast mode [ 824.392900][ T5718] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 824.418952][ T5704] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 824.490881][ T5704] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 824.514173][T14389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=14389 comm=syz.3.2305 [ 824.561973][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.611900][ T5718] usb 3-1: Using ep0 maxpacket: 16 [ 824.645117][ T5718] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 824.700406][ T5718] usb 3-1: config 0 has no interface number 0 [ 824.745828][ T5718] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 143, changing to 11 [ 824.810656][ T5704] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 824.845955][ T5718] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid maxpacket 25006, setting to 1024 [ 824.890765][ T5728] usb 1-1: USB disconnect, device number 76 [ 824.990806][ T5718] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 825.060472][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.147250][ T5718] usb 3-1: Product: syz [ 825.180467][ T5728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 825.202360][ T5718] usb 3-1: Manufacturer: syz [ 825.252326][ T5718] usb 3-1: SerialNumber: syz [ 825.292631][ T5728] cp210x 1-1:0.0: device disconnected [ 825.353304][ T5718] usb 3-1: config 0 descriptor?? [ 825.449525][ T5718] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 825.724972][T14388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2307'. [ 825.914043][ T5718] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 826.027265][ T5718] usb 3-1: USB disconnect, device number 79 [ 826.083310][T14398] FAULT_INJECTION: forcing a failure. [ 826.083310][T14398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.116355][ T5718] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 826.133904][T14398] CPU: 0 UID: 0 PID: 14398 Comm: syz.4.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.133923][T14398] Tainted: [L]=SOFTLOCKUP [ 826.133927][T14398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 826.133933][T14398] Call Trace: [ 826.133937][T14398] [ 826.133942][T14398] dump_stack_lvl+0x100/0x190 [ 826.133961][T14398] should_fail_ex.cold+0x5/0xa [ 826.133976][T14398] _copy_from_iter+0x1f4/0x1690 [ 826.133990][T14398] ? __pfx__copy_from_iter+0x10/0x10 [ 826.134001][T14398] ? _parse_integer_limit+0x1ac/0x220 [ 826.134017][T14398] ? _kstrtoull+0x13c/0x1f0 [ 826.134029][T14398] ? __pfx__kstrtoull+0x10/0x10 [ 826.134046][T14398] tun_get_user+0x265/0x3c20 [ 826.134062][T14398] ? __lock_acquire+0x49f/0x1a40 [ 826.134078][T14398] ? __pfx_tun_get_user+0x10/0x10 [ 826.134091][T14398] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 826.134107][T14398] ? find_held_lock+0x2b/0x80 [ 826.134117][T14398] ? tun_get+0x191/0x370 [ 826.134127][T14398] ? tun_get+0x191/0x370 [ 826.134141][T14398] tun_chr_write_iter+0xdc/0x200 [ 826.134154][T14398] vfs_write+0x6ac/0x1050 [ 826.134171][T14398] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 826.134185][T14398] ? __pfx_vfs_write+0x10/0x10 [ 826.134200][T14398] ? find_held_lock+0x2b/0x80 [ 826.134218][T14398] ksys_write+0x12a/0x250 [ 826.134234][T14398] ? __pfx_ksys_write+0x10/0x10 [ 826.134254][T14398] do_syscall_64+0x115/0x870 [ 826.134265][T14398] ? clear_bhb_loop+0x40/0x90 [ 826.134277][T14398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.134288][T14398] RIP: 0033:0x7f39c0b9ce59 [ 826.134298][T14398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.134308][T14398] RSP: 002b:00007f39c19b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 826.134319][T14398] RAX: ffffffffffffffda RBX: 00007f39c0e15fa0 RCX: 00007f39c0b9ce59 [ 826.134326][T14398] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 826.134333][T14398] RBP: 00007f39c19b7090 R08: 0000000000000000 R09: 0000000000000000 [ 826.134339][T14398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.134345][T14398] R13: 00007f39c0e16038 R14: 00007f39c0e15fa0 R15: 00007fff5e11cd18 [ 826.134359][T14398] [ 826.366386][ T5718] cypress_m8 3-1:0.35: device disconnected [ 826.520375][T14402] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2310'. [ 826.530007][ T5728] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 826.540903][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2310'. [ 826.683072][ T5728] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 826.701362][ T5728] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 826.718931][ T5728] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 826.737375][ T5728] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 826.767702][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.791812][ T5728] usb 1-1: Product: syz [ 826.802766][ T5728] usb 1-1: Manufacturer: syz [ 826.819671][ T5728] usb 1-1: SerialNumber: syz [ 826.845590][ T5728] usb 1-1: config 0 descriptor?? [ 826.860276][T14400] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 826.887237][T14400] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 826.921919][ T5728] usb 1-1: ucan: probing device on interface #0 [ 826.991928][ T5718] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 827.080580][ T5779] usb 2-1: USB disconnect, device number 67 [ 827.119740][T14416] hub 8-0:1.0: USB hub found [ 827.147678][ T5718] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 827.160574][T14416] hub 8-0:1.0: 1 port detected [ 827.173422][ T5718] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 827.193196][T14419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14419 comm=syz.3.2314 [ 827.205804][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.228326][ T5718] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 827.679505][ T5728] usb 1-1: ucan: failed to retrieve device info [ 827.701265][ T5728] usb 1-1: ucan: probe failed; try to update the device firmware [ 827.752545][ T5728] usb 1-1: USB disconnect, device number 77 [ 828.175285][ T5728] usb 3-1: USB disconnect, device number 80 [ 828.312443][T14424] syzkaller0: entered promiscuous mode [ 828.580834][T14434] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2318'. [ 828.687606][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2318'. [ 829.062629][ T5728] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 829.629325][T14443] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2322'. [ 829.638482][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 829.652455][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2322'. [ 829.687471][ T5728] usb 1-1: unable to get BOS descriptor or descriptor too short [ 829.703256][ T5728] usb 1-1: config 9 has an invalid interface number: 5 but max is 1 [ 829.721115][ T5728] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 829.733316][ T5728] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 829.748915][ T5728] usb 1-1: config 9 has no interface number 0 [ 829.762200][ T5728] usb 1-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 829.772967][ T5728] usb 1-1: config 9 interface 5 has no altsetting 0 [ 829.870540][ T5728] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 829.900013][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.908954][T14451] random: crng reseeded on system resumption [ 829.916102][ T5728] usb 1-1: Product: syz [ 829.921427][ T5728] usb 1-1: Manufacturer: syz [ 829.934530][ T5728] usb 1-1: SerialNumber: syz [ 830.440951][ T5779] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 830.461864][ T5718] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 830.612341][ T5779] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 830.642978][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.684150][ T5779] usb 5-1: config 0 descriptor?? [ 830.697079][ T5718] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 830.716315][ T5718] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 830.734579][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.736257][ T5779] cp210x 5-1:0.0: cp210x converter detected [ 830.779320][ T5718] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 830.932943][ T5779] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 830.940997][ T5779] cp210x 5-1:0.0: querying part number failed [ 830.981624][ T5779] usb 5-1: cp210x converter now attached to ttyUSB0 [ 831.633977][ T5718] usb 4-1: USB disconnect, device number 77 [ 831.871336][T14455] Restarting kernel threads ... [ 831.878695][ T5728] usb 1-1: USB disconnect, device number 78 [ 831.892590][T14455] Done restarting kernel threads. [ 832.273346][T14464] siw: device registration error -23 [ 833.133008][ T5728] usb 5-1: USB disconnect, device number 73 [ 833.161252][ T5728] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 833.219703][ T5728] cp210x 5-1:0.0: device disconnected [ 833.626040][T14466] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2327'. [ 833.644233][T14476] FAULT_INJECTION: forcing a failure. [ 833.644233][T14476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.671615][T14476] CPU: 1 UID: 0 PID: 14476 Comm: syz.2.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 833.671635][T14476] Tainted: [L]=SOFTLOCKUP [ 833.671639][T14476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.671646][T14476] Call Trace: [ 833.671650][T14476] [ 833.671655][T14476] dump_stack_lvl+0x100/0x190 [ 833.671673][T14476] should_fail_ex.cold+0x5/0xa [ 833.671690][T14476] _copy_from_iter+0x1f4/0x1690 [ 833.671704][T14476] ? __pfx__copy_from_iter+0x10/0x10 [ 833.671714][T14476] ? _parse_integer_limit+0x1ac/0x220 [ 833.671736][T14476] ? _kstrtoull+0x13c/0x1f0 [ 833.671754][T14476] ? __pfx__kstrtoull+0x10/0x10 [ 833.671776][T14476] tun_get_user+0x265/0x3c20 [ 833.671800][T14476] ? __lock_acquire+0x49f/0x1a40 [ 833.671826][T14476] ? __pfx_tun_get_user+0x10/0x10 [ 833.671847][T14476] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 833.671874][T14476] ? find_held_lock+0x2b/0x80 [ 833.671890][T14476] ? tun_get+0x191/0x370 [ 833.671906][T14476] ? tun_get+0x191/0x370 [ 833.671931][T14476] tun_chr_write_iter+0xdc/0x200 [ 833.671954][T14476] vfs_write+0x6ac/0x1050 [ 833.671981][T14476] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 833.672008][T14476] ? __pfx_vfs_write+0x10/0x10 [ 833.672025][T14476] ? find_held_lock+0x2b/0x80 [ 833.672043][T14476] ksys_write+0x12a/0x250 [ 833.672059][T14476] ? __pfx_ksys_write+0x10/0x10 [ 833.672079][T14476] do_syscall_64+0x115/0x870 [ 833.672091][T14476] ? clear_bhb_loop+0x40/0x90 [ 833.672104][T14476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.672115][T14476] RIP: 0033:0x7f6bf039ce59 [ 833.672126][T14476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.672137][T14476] RSP: 002b:00007f6bf1333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 833.672149][T14476] RAX: ffffffffffffffda RBX: 00007f6bf0615fa0 RCX: 00007f6bf039ce59 [ 833.672156][T14476] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000003 [ 833.672162][T14476] RBP: 00007f6bf1333090 R08: 0000000000000000 R09: 0000000000000000 [ 833.672169][T14476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.672175][T14476] R13: 00007f6bf0616038 R14: 00007f6bf0615fa0 R15: 00007ffdf08362e8 [ 833.672189][T14476] [ 834.465466][T14491] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2334'. [ 834.570049][T14489] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 834.664145][T14502] random: crng reseeded on system resumption [ 834.773864][T14502] Restarting kernel threads ... [ 834.778959][T14502] Done restarting kernel threads. [ 835.021861][ T5779] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 835.123509][ T5728] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 835.193315][ T5779] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 835.218398][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.249092][ T5779] usb 1-1: config 0 descriptor?? [ 835.271619][ T5779] cp210x 1-1:0.0: cp210x converter detected [ 835.291931][ T5728] usb 2-1: Using ep0 maxpacket: 32 [ 835.304086][ T5728] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 835.317421][ T5728] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 835.327834][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.335977][ T5728] usb 2-1: Product: syz [ 835.340275][ T5728] usb 2-1: Manufacturer: syz [ 835.345198][ T5728] usb 2-1: SerialNumber: syz [ 835.354473][ T5728] usb 2-1: config 0 descriptor?? [ 835.409245][T14507] syzkaller0: entered promiscuous mode [ 835.471882][ T5779] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 835.486797][ T5779] cp210x 1-1:0.0: querying part number failed [ 835.522538][ T5779] usb 1-1: cp210x converter now attached to ttyUSB0 [ 836.352022][T14529] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2346'. [ 836.901863][ T5728] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 837.058790][ T5728] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 837.084213][ T5728] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 837.105860][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.125216][ T5728] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 837.740489][ T5779] usb 1-1: USB disconnect, device number 79 [ 837.781470][ T5779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 837.805129][ T5779] cp210x 1-1:0.0: device disconnected [ 837.918920][T11905] usb 3-1: USB disconnect, device number 81 [ 837.991588][ T30] audit: type=1400 audit(1782321210.741:1241): avc: denied { setopt } for pid=14544 comm="syz.0.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 838.236275][ T30] audit: type=1400 audit(1782321210.991:1242): avc: denied { write } for pid=14544 comm="syz.0.2352" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 840.588098][T14577] hub 8-0:1.0: USB hub found [ 840.622444][T14577] hub 8-0:1.0: 1 port detected [ 840.670384][T14576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14576 comm=syz.4.2361 [ 841.902412][T14570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=14570 comm=syz.2.2359 [ 841.923347][ T5728] usb 2-1: USB disconnect, device number 68 [ 842.578458][T11905] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 842.763290][T11905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 842.773481][T11905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 842.791941][T11905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 842.806011][T11905] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 842.816154][T11905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.824427][T11905] usb 4-1: Product: syz [ 842.828682][T11905] usb 4-1: Manufacturer: syz [ 842.833612][T11905] usb 4-1: SerialNumber: syz [ 842.843642][T11905] usb 4-1: config 0 descriptor?? [ 842.851498][T14585] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 842.873924][T14585] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 842.954354][T11905] usb 4-1: ucan: probing device on interface #0 [ 842.995968][T14594] FAULT_INJECTION: forcing a failure. [ 842.995968][T14594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.016986][T14594] CPU: 1 UID: 0 PID: 14594 Comm: syz.4.2366 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.017018][T14594] Tainted: [L]=SOFTLOCKUP [ 843.017024][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 843.017033][T14594] Call Trace: [ 843.017039][T14594] [ 843.017046][T14594] dump_stack_lvl+0x100/0x190 [ 843.017075][T14594] should_fail_ex.cold+0x5/0xa [ 843.017098][T14594] _copy_from_user+0x2e/0xd0 [ 843.017117][T14594] copy_msghdr_from_user+0x9f/0x4c0 [ 843.017136][T14594] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 843.017158][T14594] ? __pfx__kstrtoull+0x10/0x10 [ 843.017184][T14594] ___sys_sendmsg+0x106/0x1e0 [ 843.017203][T14594] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.017232][T14594] ? find_held_lock+0x2b/0x80 [ 843.017265][T14594] __sys_sendmmsg+0x20c/0x440 [ 843.017288][T14594] ? __pfx___sys_sendmmsg+0x10/0x10 [ 843.017309][T14594] ? ksys_write+0x190/0x250 [ 843.017350][T14594] ? fput+0x79/0x100 [ 843.017370][T14594] ? ksys_write+0x1ac/0x250 [ 843.017392][T14594] ? __pfx_ksys_write+0x10/0x10 [ 843.017420][T14594] __x64_sys_sendmmsg+0x9c/0x100 [ 843.017442][T14594] ? lockdep_hardirqs_on+0x78/0x100 [ 843.017459][T14594] do_syscall_64+0x115/0x870 [ 843.017474][T14594] ? clear_bhb_loop+0x40/0x90 [ 843.017496][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.017512][T14594] RIP: 0033:0x7f39c0b9ce59 [ 843.017527][T14594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.017543][T14594] RSP: 002b:00007f39c19b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 843.017561][T14594] RAX: ffffffffffffffda RBX: 00007f39c0e15fa0 RCX: 00007f39c0b9ce59 [ 843.017572][T14594] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000007 [ 843.017582][T14594] RBP: 00007f39c19b7090 R08: 0000000000000000 R09: 0000000000000000 [ 843.017591][T14594] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.017602][T14594] R13: 00007f39c0e16038 R14: 00007f39c0e15fa0 R15: 00007fff5e11cd18 [ 843.017624][T14594] [ 843.500729][T14601] siw: device registration error -23 [ 844.251766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 844.417688][T11905] usb 4-1: ucan: failed to retrieve device info [ 844.432322][T11905] usb 4-1: ucan: probe failed; try to update the device firmware [ 844.843876][ T5728] usb 4-1: USB disconnect, device number 78 [ 844.943484][T14610] FAULT_INJECTION: forcing a failure. [ 844.943484][T14610] name failslab, interval 1, probability 0, space 0, times 0 [ 844.956234][T14610] CPU: 1 UID: 0 PID: 14610 Comm: syz.1.2370 Tainted: G L syzkaller #0 PREEMPT(full) [ 844.956265][T14610] Tainted: [L]=SOFTLOCKUP [ 844.956272][T14610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 844.956283][T14610] Call Trace: [ 844.956290][T14610] [ 844.956297][T14610] dump_stack_lvl+0x100/0x190 [ 844.956329][T14610] should_fail_ex.cold+0x5/0xa [ 844.956355][T14610] should_failslab+0xc2/0x120 [ 844.956379][T14610] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 844.956402][T14610] ? sock_alloc_inode+0x26/0x2c0 [ 844.956431][T14610] ? __pfx_sock_alloc_inode+0x10/0x10 [ 844.956459][T14610] sock_alloc_inode+0x26/0x2c0 [ 844.956484][T14610] ? __pfx_sock_alloc_inode+0x10/0x10 [ 844.956514][T14610] alloc_inode+0x68/0x250 [ 844.956537][T14610] sock_alloc+0x44/0x280 [ 844.956564][T14610] do_accept+0xf9/0x530 [ 844.956583][T14610] ? do_raw_spin_lock+0x128/0x260 [ 844.956608][T14610] ? __pfx_do_accept+0x10/0x10 [ 844.956644][T14610] __sys_accept4+0x108/0x200 [ 844.956665][T14610] ? __pfx___sys_accept4+0x10/0x10 [ 844.956686][T14610] ? __pfx_ksys_write+0x10/0x10 [ 844.956719][T14610] __x64_sys_accept4+0x96/0x100 [ 844.956739][T14610] ? lockdep_hardirqs_on+0x78/0x100 [ 844.956758][T14610] do_syscall_64+0x115/0x870 [ 844.956775][T14610] ? clear_bhb_loop+0x40/0x90 [ 844.956797][T14610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.956816][T14610] RIP: 0033:0x7fc85099ce59 [ 844.956831][T14610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.956849][T14610] RSP: 002b:00007fc85186f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 844.956868][T14610] RAX: ffffffffffffffda RBX: 00007fc850c16090 RCX: 00007fc85099ce59 [ 844.956880][T14610] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 844.956891][T14610] RBP: 00007fc85186f090 R08: 0000000000000000 R09: 0000000000000000 [ 844.956902][T14610] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 844.956912][T14610] R13: 00007fc850c16128 R14: 00007fc850c16090 R15: 00007ffe13debea8 [ 844.956937][T14610] [ 844.957792][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 845.219859][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.219895][ T5616] Tainted: [L]=SOFTLOCKUP [ 845.219903][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.219917][ T5616] Workqueue: hci0 hci_rx_work [ 845.219940][ T5616] Call Trace: [ 845.219948][ T5616] [ 845.219957][ T5616] dump_stack_lvl+0x100/0x190 [ 845.219987][ T5616] sysfs_warn_dup.cold+0x1c/0x28 [ 845.220017][ T5616] sysfs_create_dir_ns+0x24b/0x2b0 [ 845.220057][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 845.220086][ T5616] ? find_held_lock+0x2b/0x80 [ 845.220107][ T5616] ? kobject_add_internal+0x25f/0x930 [ 845.220134][ T5616] ? kobject_add_internal+0x25f/0x930 [ 845.220163][ T5616] ? do_raw_spin_unlock+0x145/0x1e0 [ 845.220192][ T5616] kobject_add_internal+0x2c8/0x930 [ 845.220223][ T5616] kobject_add+0x16a/0x1e0 [ 845.220248][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 845.220274][ T5616] ? class_to_subsys+0x10f/0x150 [ 845.220299][ T5616] ? kobject_put+0xb9/0x640 [ 845.220320][ T5616] ? _raw_spin_unlock+0x28/0x50 [ 845.220354][ T5616] device_add+0x294/0x1970 [ 845.220372][ T5616] ? __pfx_dev_set_name+0x10/0x10 [ 845.220394][ T5616] ? __pfx_device_add+0x10/0x10 [ 845.220413][ T5616] ? mgmt_send_event_skb+0x2fb/0x460 [ 845.220440][ T5616] hci_conn_add_sysfs+0x1a3/0x260 [ 845.220464][ T5616] le_conn_complete_evt+0x11eb/0x1f60 [ 845.220493][ T5616] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 845.220512][ T5616] ? hci_event_packet+0x186/0xcd0 [ 845.220538][ T5616] hci_le_conn_complete_evt+0x23c/0x3a0 [ 845.220559][ T5616] ? skb_pull_data+0x15f/0x1e0 [ 845.220593][ T5616] hci_le_meta_evt+0x34a/0x5f0 [ 845.220615][ T5616] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 845.220640][ T5616] hci_event_packet+0x51c/0xcd0 [ 845.220660][ T5616] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 845.220682][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 845.220707][ T5616] ? kcov_remote_start+0x394/0x670 [ 845.220736][ T5616] hci_rx_work+0x451/0xfc0 [ 845.220759][ T5616] process_one_work+0xa23/0x1940 [ 845.220792][ T5616] ? __pfx_process_one_work+0x10/0x10 [ 845.220821][ T5616] ? __pfx_hci_rx_work+0x10/0x10 [ 845.220843][ T5616] worker_thread+0x5ef/0xe50 [ 845.220875][ T5616] ? kthread+0x13a/0x450 [ 845.220893][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 845.220912][ T5616] kthread+0x370/0x450 [ 845.220930][ T5616] ? __pfx_kthread+0x10/0x10 [ 845.220951][ T5616] ret_from_fork+0x72b/0xd50 [ 845.220979][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 845.221008][ T5616] ? __switch_to+0x800/0x10f0 [ 845.221029][ T5616] ? __pfx_kthread+0x10/0x10 [ 845.221056][ T5616] ret_from_fork_asm+0x1a/0x30 [ 845.221088][ T5616] [ 845.221137][ T5616] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 845.494232][ T5616] Bluetooth: hci0: failed to register connection device [ 845.512950][T14616] binder: 14615:14616 ioctl c018620c 0 returned -14 [ 845.600231][T14625] random: crng reseeded on system resumption [ 846.774786][T14618] syzkaller0: entered promiscuous mode [ 846.935901][T14625] Restarting kernel threads ... [ 846.941156][T14625] Done restarting kernel threads. [ 847.130291][T14634] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2376'. [ 847.301920][ T5718] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 847.463534][ T5718] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 847.493104][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.516299][ T5718] usb 2-1: config 0 descriptor?? [ 847.537897][ T5718] cp210x 2-1:0.0: cp210x converter detected [ 847.721951][ T30] audit: type=1400 audit(1782321220.471:1243): avc: denied { listen } for pid=14635 comm="syz.2.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 847.740619][ T5718] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 847.775150][ T5718] cp210x 2-1:0.0: querying part number failed [ 847.804943][ T5718] usb 2-1: cp210x converter now attached to ttyUSB0 [ 847.833828][T14614] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 847.845965][T14614] CPU: 0 UID: 0 PID: 14614 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.845997][T14614] Tainted: [L]=SOFTLOCKUP [ 847.846004][T14614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 847.846016][T14614] Workqueue: hci4 hci_rx_work [ 847.846041][T14614] Call Trace: [ 847.846047][T14614] [ 847.846054][T14614] dump_stack_lvl+0x100/0x190 [ 847.846082][T14614] sysfs_warn_dup.cold+0x1c/0x28 [ 847.846110][T14614] sysfs_create_dir_ns+0x24b/0x2b0 [ 847.846141][T14614] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 847.846169][T14614] ? find_held_lock+0x2b/0x80 [ 847.846188][T14614] ? kobject_add_internal+0x25f/0x930 [ 847.846215][T14614] ? kobject_add_internal+0x25f/0x930 [ 847.846242][T14614] ? do_raw_spin_unlock+0x145/0x1e0 [ 847.846271][T14614] kobject_add_internal+0x2c8/0x930 [ 847.846301][T14614] kobject_add+0x16a/0x1e0 [ 847.846326][T14614] ? __pfx_kobject_add+0x10/0x10 [ 847.846349][T14614] ? class_to_subsys+0x10f/0x150 [ 847.846374][T14614] ? kobject_put+0xb9/0x640 [ 847.846395][T14614] ? _raw_spin_unlock+0x28/0x50 [ 847.846430][T14614] device_add+0x294/0x1970 [ 847.846449][T14614] ? __pfx_dev_set_name+0x10/0x10 [ 847.846478][T14614] ? __pfx_device_add+0x10/0x10 [ 847.846498][T14614] ? mgmt_send_event_skb+0x2fb/0x460 [ 847.846527][T14614] hci_conn_add_sysfs+0x1a3/0x260 [ 847.846553][T14614] le_conn_complete_evt+0x11eb/0x1f60 [ 847.846582][T14614] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 847.846602][T14614] ? hci_event_packet+0x186/0xcd0 [ 847.846627][T14614] hci_le_conn_complete_evt+0x23c/0x3a0 [ 847.846649][T14614] ? skb_pull_data+0x15f/0x1e0 [ 847.846682][T14614] hci_le_meta_evt+0x34a/0x5f0 [ 847.846701][T14614] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 847.846722][T14614] hci_event_packet+0x51c/0xcd0 [ 847.846740][T14614] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 847.846762][T14614] ? __pfx_hci_event_packet+0x10/0x10 [ 847.846784][T14614] ? kcov_remote_start+0x384/0x670 [ 847.846806][T14614] ? lockdep_hardirqs_on+0x78/0x100 [ 847.846829][T14614] hci_rx_work+0x451/0xfc0 [ 847.846852][T14614] process_one_work+0xa23/0x1940 [ 847.846887][T14614] ? __pfx_process_one_work+0x10/0x10 [ 847.846911][T14614] ? __pfx_hci_rx_work+0x10/0x10 [ 847.846930][T14614] worker_thread+0x5ef/0xe50 [ 847.846957][T14614] ? __pfx_worker_thread+0x10/0x10 [ 847.846976][T14614] ? kthread+0x13a/0x450 [ 847.846993][T14614] ? __pfx_worker_thread+0x10/0x10 [ 847.847011][T14614] kthread+0x370/0x450 [ 847.847027][T14614] ? __pfx_kthread+0x10/0x10 [ 847.847047][T14614] ret_from_fork+0x72b/0xd50 [ 847.847075][T14614] ? __pfx_ret_from_fork+0x10/0x10 [ 847.847100][T14614] ? __switch_to+0x800/0x10f0 [ 847.847119][T14614] ? __pfx_kthread+0x10/0x10 [ 847.847138][T14614] ret_from_fork_asm+0x1a/0x30 [ 847.847166][T14614] [ 847.847239][T14614] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 848.210459][T14655] siw: device registration error -23 [ 849.088685][T14614] Bluetooth: hci4: failed to register connection device [ 849.573263][T11905] usb 2-1: USB disconnect, device number 69 [ 849.597108][T11905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 849.675274][T11905] cp210x 2-1:0.0: device disconnected [ 850.149642][T14666] binder: 14665:14666 ioctl c018620c 0 returned -14 [ 850.521365][ T5718] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 851.061850][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 851.068976][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 851.077050][ T5718] usb 2-1: can't read configurations, error -61 [ 851.216698][ T5718] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 851.452253][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 851.460414][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 851.527516][ T5718] usb 2-1: can't read configurations, error -61 [ 851.535452][ T5718] usb usb2-port1: attempt power cycle [ 852.721914][ T5718] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 852.773678][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 852.816069][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 852.866890][ T5718] usb 2-1: can't read configurations, error -61 [ 853.033036][ T5718] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 853.122354][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 853.653699][ T5718] usb 2-1: device descriptor read/all, error -71 [ 853.753670][ T5718] usb usb2-port1: unable to enumerate USB device [ 854.144113][T14705] FAULT_INJECTION: forcing a failure. [ 854.144113][T14705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.239186][T14705] CPU: 0 UID: 0 PID: 14705 Comm: syz.1.2396 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.239217][T14705] Tainted: [L]=SOFTLOCKUP [ 854.239224][T14705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 854.239235][T14705] Call Trace: [ 854.239242][T14705] [ 854.239250][T14705] dump_stack_lvl+0x100/0x190 [ 854.239280][T14705] should_fail_ex.cold+0x5/0xa [ 854.239307][T14705] _copy_from_user+0x2e/0xd0 [ 854.239327][T14705] copy_msghdr_from_user+0x9f/0x4c0 [ 854.239348][T14705] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 854.239378][T14705] ___sys_sendmsg+0x106/0x1e0 [ 854.239399][T14705] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.239421][T14705] ? __lock_acquire+0x49f/0x1a40 [ 854.239445][T14705] ? get_pid_task+0x106/0x250 [ 854.239489][T14705] __sys_sendmsg+0x160/0x210 [ 854.239514][T14705] ? __pfx___sys_sendmsg+0x10/0x10 [ 854.239556][T14705] do_syscall_64+0x115/0x870 [ 854.239575][T14705] ? clear_bhb_loop+0x40/0x90 [ 854.239596][T14705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.239615][T14705] RIP: 0033:0x7fc85099ce59 [ 854.239631][T14705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.239648][T14705] RSP: 002b:00007fc851890028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.239667][T14705] RAX: ffffffffffffffda RBX: 00007fc850c15fa0 RCX: 00007fc85099ce59 [ 854.239679][T14705] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 854.239690][T14705] RBP: 00007fc851890090 R08: 0000000000000000 R09: 0000000000000000 [ 854.239701][T14705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.239712][T14705] R13: 00007fc850c16038 R14: 00007fc850c15fa0 R15: 00007ffe13debea8 [ 854.239736][T14705] [ 855.034939][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 855.231839][ T187] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 855.382032][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 855.387926][ T187] usb 2-1: no configurations [ 855.393497][ T187] usb 2-1: can't read configurations, error -22 [ 855.531983][ T187] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 855.656124][T11905] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 855.692069][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 855.699287][ T187] usb 2-1: no configurations [ 855.704434][ T187] usb 2-1: can't read configurations, error -22 [ 855.711095][ T187] usb usb2-port1: attempt power cycle [ 855.845479][T11905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 855.862945][T11905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 855.882500][T11905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 855.939248][T11905] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 855.948452][T11905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.956668][T11905] usb 5-1: Product: syz [ 855.960917][T11905] usb 5-1: Manufacturer: syz [ 855.965664][T11905] usb 5-1: SerialNumber: syz [ 855.981811][T11905] usb 5-1: config 0 descriptor?? [ 855.987546][T14718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 855.995011][T14718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 856.004339][T11905] usb 5-1: ucan: probing device on interface #0 [ 856.052035][ T187] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 856.090518][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 856.096332][ T187] usb 2-1: no configurations [ 856.101088][ T187] usb 2-1: can't read configurations, error -22 [ 856.233332][ T187] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 856.275686][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 856.281421][ T187] usb 2-1: no configurations [ 856.289805][T14699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=14699 comm=syz.3.2394 [ 856.311818][ T187] usb 2-1: can't read configurations, error -22 [ 856.319446][ T187] usb usb2-port1: unable to enumerate USB device [ 856.880416][T11905] usb 5-1: ucan: failed to retrieve device info [ 856.892390][T11905] usb 5-1: ucan: probe failed; try to update the device firmware [ 856.907512][T11905] usb 5-1: USB disconnect, device number 74 [ 856.912357][ T187] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 857.073168][ T187] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 857.083226][ T187] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 857.094783][ T187] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 857.106151][ T187] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 857.116136][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.124220][ T187] usb 3-1: Product: syz [ 857.128417][ T187] usb 3-1: Manufacturer: syz [ 857.133175][ T187] usb 3-1: SerialNumber: syz [ 857.139261][ T187] usb 3-1: config 0 descriptor?? [ 857.145537][T14724] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 857.152864][T14724] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 857.161333][ T187] usb 3-1: ucan: probing device on interface #0 [ 857.172012][ T5779] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 857.385963][ T5779] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 857.396361][ T5779] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 857.405441][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.423380][ T5779] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 858.471533][ T5779] usb 4-1: USB disconnect, device number 79 [ 858.808615][ T187] usb 3-1: ucan: failed to retrieve device info [ 859.834144][ T187] usb 3-1: ucan: probe failed; try to update the device firmware [ 859.846231][ T187] usb 3-1: USB disconnect, device number 82 [ 860.131851][ T5728] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 860.175827][T14751] syzkaller0: entered promiscuous mode [ 860.301880][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 860.310466][ T5728] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 860.318387][ T5728] usb 5-1: can't read configurations, error -61 [ 860.451887][ T5728] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 861.183806][ T5728] usb 5-1: Using ep0 maxpacket: 32 [ 861.208878][ T5728] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 861.217128][ T5728] usb 5-1: can't read configurations, error -61 [ 861.233974][ T5728] usb usb5-port1: attempt power cycle [ 861.506879][T14771] siw: device registration error -23 [ 861.625420][ T5728] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 862.423214][T14770] (syz.1.2413,14770,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 862.432032][T14770] (syz.1.2413,14770,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 862.682101][ T5728] usb 5-1: device descriptor read/8, error -71 [ 863.050259][T14786] siw: device registration error -23 [ 864.214389][T14802] hub 8-0:1.0: USB hub found [ 864.219778][T14802] hub 8-0:1.0: 1 port detected [ 864.249560][T14802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14802 comm=syz.0.2418 [ 864.580537][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.586921][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.296447][T14781] tipc: Enabled bearer , priority 0 [ 865.397858][T14785] syzkaller0: entered promiscuous mode [ 865.412113][T14785] syzkaller0: entered allmulticast mode [ 865.688934][T14813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=14813 comm=syz.4.2421 [ 866.078042][T14785] tipc: Resetting bearer [ 866.308726][T14785] tipc: Disabling bearer [ 867.057864][ T29] tipc: Node number set to 2880781741 [ 868.470957][T14832] (syz.3.2425,14832,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 868.479712][T14832] (syz.3.2425,14832,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 868.629549][ T30] audit: type=1326 audit(1782321241.381:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14844 comm="syz.2.2428" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bf039ce59 code=0x0 [ 868.705579][T14848] random: crng reseeded on system resumption [ 868.732844][ T187] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 868.821674][T14848] Restarting kernel threads ... [ 868.826867][T14848] Done restarting kernel threads. [ 869.002425][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 869.012879][ T187] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 869.025486][ T187] usb 1-1: can't read configurations, error -61 [ 869.062773][T14853] hub 8-0:1.0: USB hub found [ 869.069869][T14853] hub 8-0:1.0: 1 port detected [ 869.088826][T14853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14853 comm=syz.4.2430 [ 869.102190][ T29] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 869.167161][ T187] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 869.263214][ T29] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 869.286248][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.312118][ T29] usb 4-1: config 0 descriptor?? [ 869.321783][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 869.331502][ T187] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 869.331885][ T29] cp210x 4-1:0.0: cp210x converter detected [ 869.345860][ T187] usb 1-1: can't read configurations, error -61 [ 869.352717][ T187] usb usb1-port1: attempt power cycle [ 869.531918][ T29] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 869.547561][ T29] cp210x 4-1:0.0: querying part number failed [ 869.570485][ T29] usb 4-1: cp210x converter now attached to ttyUSB0 [ 869.693492][ T187] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 869.722455][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 869.733982][ T187] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 869.755777][ T187] usb 1-1: can't read configurations, error -61 [ 869.901916][ T187] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 869.923178][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 869.930545][ T187] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 869.942953][ T187] usb 1-1: can't read configurations, error -61 [ 869.950073][ T187] usb usb1-port1: unable to enumerate USB device [ 870.098569][ T29] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 870.276806][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 870.315127][T14875] (syz.4.2436,14875,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 870.328780][T14875] (syz.4.2436,14875,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 870.372060][ T29] usb 2-1: config 0 has no interfaces? [ 870.385186][ T29] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 870.394410][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.402514][ T29] usb 2-1: Product: syz [ 870.406772][ T29] usb 2-1: Manufacturer: syz [ 870.411418][ T29] usb 2-1: SerialNumber: syz [ 870.424590][ T29] usb 2-1: config 0 descriptor?? [ 871.832503][T14894] siw: device registration error -23 [ 873.091098][ T187] usb 4-1: USB disconnect, device number 80 [ 873.100075][ T187] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 873.116216][ T187] cp210x 4-1:0.0: device disconnected [ 873.134523][ T29] usb 2-1: USB disconnect, device number 78 [ 873.392767][T14614] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 874.261831][ T187] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 874.422594][T14917] (syz.2.2447,14917,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 874.442072][T14917] (syz.2.2447,14917,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 874.456914][ T187] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 874.491457][ T187] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 874.537613][ T187] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 874.583508][ T187] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 874.615236][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.638717][ T187] usb 4-1: Product: syz [ 874.649458][ T187] usb 4-1: Manufacturer: syz [ 874.671786][ T187] usb 4-1: SerialNumber: syz [ 874.680854][ T187] usb 4-1: config 0 descriptor?? [ 874.693193][T14915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 874.702054][ T29] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 874.716599][T14915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 874.743337][ T187] usb 4-1: ucan: probing device on interface #0 [ 874.881930][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 874.887192][ T5779] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 874.898555][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 874.906814][ T29] usb 2-1: can't read configurations, error -61 [ 875.005952][T14939] cgroup: Bad value for 'name' [ 875.043424][ T5779] usb 3-1: config 0 has no interfaces? [ 875.048977][ T5779] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 875.058391][ T29] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 875.067342][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.078770][ T5779] usb 3-1: config 0 descriptor?? [ 875.222135][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 875.237107][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 875.245900][ T29] usb 2-1: can't read configurations, error -61 [ 875.254679][ T29] usb usb2-port1: attempt power cycle [ 875.359172][T11905] usb 3-1: USB disconnect, device number 83 [ 875.461882][ T5779] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 875.592977][ T29] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 875.613877][ T187] usb 4-1: ucan: failed to retrieve device info [ 875.622955][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 875.624040][ T187] usb 4-1: ucan: probe failed; try to update the device firmware [ 875.630921][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 875.656539][ T187] usb 4-1: USB disconnect, device number 81 [ 875.656765][ T29] usb 2-1: can't read configurations, error -61 [ 875.669001][ T5779] usb 5-1: Using ep0 maxpacket: 32 [ 875.675783][ T7514] udevd[7514]: setting owner of /dev/bus/usb/004/081 to uid=0, gid=0 failed: No such file or directory [ 875.700154][ T5779] usb 5-1: config 0 has no interfaces? [ 875.709226][ T5779] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 875.724615][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.736477][ T5779] usb 5-1: Product: syz [ 875.743892][ T5779] usb 5-1: Manufacturer: syz [ 875.749029][ T5779] usb 5-1: SerialNumber: syz [ 875.766120][ T5779] usb 5-1: config 0 descriptor?? [ 875.851909][ T29] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 875.892452][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 875.899134][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 875.906814][ T29] usb 2-1: can't read configurations, error -61 [ 875.913273][ T29] usb usb2-port1: unable to enumerate USB device [ 875.972036][T14949] tmpfs: Bad value for 'mpol' [ 876.262955][T14952] random: crng reseeded on system resumption [ 876.443434][T14952] Restarting kernel threads ... [ 876.448565][T14952] Done restarting kernel threads. [ 877.121877][ T29] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 877.304951][ T29] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 877.314073][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.325769][ T29] usb 4-1: config 0 descriptor?? [ 877.334538][ T29] cp210x 4-1:0.0: cp210x converter detected [ 877.435992][T11905] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 877.447009][T14966] (syz.0.2462,14966,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 877.462154][T14966] (syz.0.2462,14966,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 877.536523][ T29] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 877.547800][ T29] cp210x 4-1:0.0: querying part number failed [ 877.558232][ T29] usb 4-1: cp210x converter now attached to ttyUSB0 [ 877.680326][T14973] erofs (device loop0): cannot find valid erofs superblock [ 877.702485][T11905] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 877.712899][T11905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 877.723312][T11905] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 877.817008][T11905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 878.300307][T11905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.310394][T11905] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.324422][T11905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 878.340647][ T187] usb 5-1: USB disconnect, device number 79 [ 878.341296][T11905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.356799][T11905] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.380457][T11905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 878.390614][T11905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.440290][T11905] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.469577][T11905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 878.484918][T11905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.494485][T11905] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.523450][T11905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 878.541334][ T30] audit: type=1326 audit(1782321251.291:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14983 comm="syz.0.2466" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f899679ce59 code=0x0 [ 878.549531][T11905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.567678][ T30] audit: type=1400 audit(1782321251.281:1245): avc: denied { mount } for pid=14980 comm="syz.4.2465" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 878.602092][T11905] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.632418][T11905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 878.651637][T11905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.662699][T11905] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.680271][T14987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2467'. [ 878.684998][T11905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 878.691425][T14987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2467'. [ 878.707130][T11905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 878.717201][T11905] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.741795][T11905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 878.752486][T11905] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 878.761935][T11905] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 878.770370][T11905] usb 3-1: Product: syz [ 878.774969][T11905] usb 3-1: Manufacturer: syz [ 878.779998][T11905] usb 3-1: SerialNumber: syz [ 878.787117][T11905] usb 3-1: config 0 descriptor?? [ 878.801213][T11905] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 878.957124][ T30] audit: type=1400 audit(1782321251.711:1247): avc: denied { create } for pid=14989 comm="syz.4.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 879.011314][ T30] audit: type=1400 audit(1782321251.751:1248): avc: denied { write } for pid=14989 comm="syz.4.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 880.231839][ T187] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 880.383392][ T187] usb 5-1: unable to get BOS descriptor or descriptor too short [ 880.391621][ T187] usb 5-1: not running at top speed; connect to a high speed hub [ 880.400577][ T187] usb 5-1: config 6 has an invalid interface number: 252 but max is 0 [ 880.409124][ T187] usb 5-1: config 6 has no interface number 0 [ 880.415563][ T187] usb 5-1: config 6 interface 252 has no altsetting 0 [ 880.469039][T11905] usb 4-1: USB disconnect, device number 82 [ 880.730954][T11905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 880.928859][T11905] cp210x 4-1:0.0: device disconnected [ 881.006553][ T187] usb 5-1: language id specifier not provided by device, defaulting to English [ 881.017291][ T187] usb 5-1: New USB device found, idVendor=07b8, idProduct=4104, bcdDevice=7b.89 [ 881.026744][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.035007][ T187] usb 5-1: Product: క [ 881.039237][ T187] usb 5-1: Manufacturer: 뚰笞⼭킘끫뱦ꈢ踗役渚䧺埨刁筪骯镣롎푝긃䝑海祖 [ 881.067116][ T187] usb 5-1: SerialNumber: ࡃ [ 881.463933][T15002] FAULT_INJECTION: forcing a failure. [ 881.463933][T15002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.714524][T15002] CPU: 1 UID: 0 PID: 15002 Comm: syz.3.2472 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.714556][T15002] Tainted: [L]=SOFTLOCKUP [ 881.714566][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.714577][T15002] Call Trace: [ 881.714583][T15002] [ 881.714591][T15002] dump_stack_lvl+0x100/0x190 [ 881.714620][T15002] should_fail_ex.cold+0x5/0xa [ 881.714646][T15002] _copy_from_user+0x2e/0xd0 [ 881.714666][T15002] copy_msghdr_from_user+0x9f/0x4c0 [ 881.714686][T15002] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 881.714707][T15002] ? hrtimer_reprogram+0x165/0x6c0 [ 881.714734][T15002] ? find_held_lock+0x2b/0x80 [ 881.714750][T15002] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 881.714775][T15002] ? finish_task_switch.isra.0+0x2c0/0x1010 [ 881.714802][T15002] ___sys_sendmsg+0x106/0x1e0 [ 881.714821][T15002] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.714837][T15002] ? __lock_acquire+0x49f/0x1a40 [ 881.714858][T15002] ? rcu_is_watching+0x12/0xc0 [ 881.714913][T15002] __sys_sendmsg+0x160/0x210 [ 881.714936][T15002] ? __pfx___sys_sendmsg+0x10/0x10 [ 881.714972][T15002] do_syscall_64+0x115/0x870 [ 881.714990][T15002] ? clear_bhb_loop+0x40/0x90 [ 881.715011][T15002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.715029][T15002] RIP: 0033:0x7f861179ce59 [ 881.715045][T15002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.715062][T15002] RSP: 002b:00007f8612715028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.715081][T15002] RAX: ffffffffffffffda RBX: 00007f8611a15fa0 RCX: 00007f861179ce59 [ 881.715092][T15002] RDX: 00000000240048c0 RSI: 0000200000000100 RDI: 0000000000000004 [ 881.715104][T15002] RBP: 00007f8612715090 R08: 0000000000000000 R09: 0000000000000000 [ 881.715115][T15002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.715126][T15002] R13: 00007f8611a16038 R14: 00007f8611a15fa0 R15: 00007ffc20884608 [ 881.715151][T15002] [ 881.743557][ T187] pegasus 5-1:6.252: Missing or invalid endpoints [ 881.961910][ T187] usb 5-1: USB disconnect, device number 80 [ 882.112569][ T29] usb 3-1: USB disconnect, device number 84 [ 882.132963][ T29] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 882.720206][T14614] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 883.014837][T15037] random: crng reseeded on system resumption [ 883.250146][T15037] Restarting kernel threads ... [ 883.255445][T15037] Done restarting kernel threads. [ 883.496954][T15045] erofs (device loop2): cannot find valid erofs superblock [ 884.029092][ T5718] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 884.277610][ T5718] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 884.383488][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.575499][ T5718] usb 4-1: config 0 descriptor?? [ 884.592696][T15054] FAULT_INJECTION: forcing a failure. [ 884.592696][T15054] name failslab, interval 1, probability 0, space 0, times 0 [ 884.684270][ T5718] cp210x 4-1:0.0: cp210x converter detected [ 884.856450][ T5718] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 884.909295][T15054] CPU: 0 UID: 0 PID: 15054 Comm: syz.4.2486 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.909325][T15054] Tainted: [L]=SOFTLOCKUP [ 884.909332][T15054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 884.909343][T15054] Call Trace: [ 884.909350][T15054] [ 884.909357][T15054] dump_stack_lvl+0x100/0x190 [ 884.909389][T15054] should_fail_ex.cold+0x5/0xa [ 884.909416][T15054] should_failslab+0xc2/0x120 [ 884.909441][T15054] __kmalloc_noprof+0xfc/0x820 [ 884.909461][T15054] ? rcu_is_watching+0x12/0xc0 [ 884.909489][T15054] ? tomoyo_realpath_from_path+0xb6/0x690 [ 884.909519][T15054] tomoyo_realpath_from_path+0xb6/0x690 [ 884.909549][T15054] tomoyo_path_number_perm+0x23c/0x580 [ 884.909568][T15054] ? tomoyo_path_number_perm+0x22e/0x580 [ 884.909589][T15054] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 884.909610][T15054] ? find_held_lock+0x2b/0x80 [ 884.909651][T15054] ? find_held_lock+0x2b/0x80 [ 884.909667][T15054] ? __fget_files+0x215/0x3d0 [ 884.909685][T15054] ? hook_file_ioctl_common+0x140/0x440 [ 884.909710][T15054] ? __fget_files+0x215/0x3d0 [ 884.909732][T15054] ? __fget_files+0x21f/0x3d0 [ 884.909755][T15054] security_file_ioctl+0xd3/0x230 [ 884.909778][T15054] __x64_sys_ioctl+0xb7/0x210 [ 884.909811][T15054] do_syscall_64+0x115/0x870 [ 884.909830][T15054] ? clear_bhb_loop+0x40/0x90 [ 884.909853][T15054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.909871][T15054] RIP: 0033:0x7f39c0b9ce59 [ 884.909888][T15054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.909906][T15054] RSP: 002b:00007f39c1996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.909927][T15054] RAX: ffffffffffffffda RBX: 00007f39c0e16090 RCX: 00007f39c0b9ce59 [ 884.909939][T15054] RDX: 00002000000007c0 RSI: 0000000000003b85 RDI: 0000000000000003 [ 884.909951][T15054] RBP: 00007f39c1996090 R08: 0000000000000000 R09: 0000000000000000 [ 884.909962][T15054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.909973][T15054] R13: 00007f39c0e16128 R14: 00007f39c0e16090 R15: 00007fff5e11cd18 [ 884.909998][T15054] [ 885.139590][T15053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 885.164362][T15054] ERROR: Out of memory at tomoyo_realpath_from_path. [ 885.254013][ T5718] cp210x 4-1:0.0: querying part number failed [ 885.291981][ T5718] usb 4-1: cp210x converter now attached to ttyUSB0 [ 885.510361][T15057] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 885.672500][T15049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=15049 comm=syz.1.2484 [ 886.027835][T15069] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 886.757514][ T29] usb 4-1: USB disconnect, device number 83 [ 886.774280][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 886.800930][ T29] cp210x 4-1:0.0: device disconnected [ 886.953504][T15081] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2493'. [ 887.012815][ T30] audit: type=1400 audit(1782321259.751:1249): avc: denied { name_connect } for pid=15085 comm="syz.0.2495" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 887.477308][ T30] audit: type=1400 audit(1782321260.181:1250): avc: denied { name_bind } for pid=15085 comm="syz.0.2495" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 887.731909][T15094] syzkaller0: entered promiscuous mode [ 887.918111][T15109] fuse: Invalid rootmode [ 888.744316][T11905] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 889.704811][T11905] usb 5-1: Using ep0 maxpacket: 8 [ 889.721633][T15132] random: crng reseeded on system resumption [ 889.751738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 889.842902][T15134] siw: device registration error -23 [ 890.816959][T15132] Restarting kernel threads ... [ 890.851260][T15132] Done restarting kernel threads. [ 890.952801][T11905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 890.962867][ T30] audit: type=1400 audit(1782321263.721:1251): avc: denied { ioctl } for pid=15137 comm="syz.3.2510" path="socket:[48472]" dev="sockfs" ino=48472 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 890.990355][T11905] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 891.008495][T11905] usb 5-1: can't read configurations, error -71 [ 891.112777][ T5779] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 891.270816][ T5779] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 891.281701][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.305282][ T5779] usb 3-1: config 0 descriptor?? [ 891.312653][ T5779] cp210x 3-1:0.0: cp210x converter detected [ 891.522796][ T5779] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 891.530499][ T5779] cp210x 3-1:0.0: querying part number failed [ 891.554004][ T5779] usb 3-1: cp210x converter now attached to ttyUSB0 [ 892.753243][T11905] usb 3-1: USB disconnect, device number 85 [ 892.794104][T11905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 892.815655][T11905] cp210x 3-1:0.0: device disconnected [ 893.660528][ T30] audit: type=1400 audit(1782321266.411:1252): avc: denied { bind } for pid=15178 comm="syz.3.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 893.690351][ T30] audit: type=1400 audit(1782321266.431:1253): avc: denied { listen } for pid=15178 comm="syz.3.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 893.730809][T15179] [ 893.733160][T15179] ====================================================== [ 893.740163][T15179] WARNING: possible circular locking dependency detected [ 893.747171][T15179] syzkaller #0 Tainted: G L [ 893.753133][T15179] ------------------------------------------------------ [ 893.760128][T15179] syz.3.2517/15179 is trying to acquire lock: [ 893.766168][T15179] ffff888056cffae8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 893.777639][T15179] [ 893.777639][T15179] but task is already holding lock: [ 893.784982][T15179] ffff888036e48260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 893.793954][T15179] [ 893.793954][T15179] which lock already depends on the new lock. [ 893.793954][T15179] [ 893.804334][T15179] [ 893.804334][T15179] the existing dependency chain (in reverse order) is: [ 893.813326][T15179] [ 893.813326][T15179] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 893.821039][T15179] lock_acquire+0x1b9/0x370 [ 893.826051][T15179] lock_sock_nested+0x41/0xf0 [ 893.831230][T15179] smc_listen_out+0x1f5/0x4b0 [ 893.836413][T15179] smc_listen_work+0x767/0x50e0 [ 893.841762][T15179] process_one_work+0xa23/0x1940 [ 893.847205][T15179] worker_thread+0x5ef/0xe50 [ 893.852296][T15179] kthread+0x370/0x450 [ 893.856860][T15179] ret_from_fork+0x72b/0xd50 [ 893.861966][T15179] ret_from_fork_asm+0x1a/0x30 [ 893.867226][T15179] [ 893.867226][T15179] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 893.877369][T15179] check_prev_add+0xeb/0xe60 [ 893.882458][T15179] __lock_acquire+0x136c/0x1a40 [ 893.887810][T15179] lock_acquire+0x1b9/0x370 [ 893.892813][T15179] __flush_work+0x4de/0xcb0 [ 893.897827][T15179] cancel_work_sync+0xd1/0xf0 [ 893.903007][T15179] smc_clcsock_release+0x5f/0xe0 [ 893.908440][T15179] __smc_release+0x5c2/0x880 [ 893.913535][T15179] smc_close_non_accepted+0xda/0x200 [ 893.919315][T15179] smc_close_active+0x4ff/0x1070 [ 893.924746][T15179] __smc_release+0x634/0x880 [ 893.929838][T15179] smc_release+0x1fc/0x620 [ 893.934758][T15179] __sock_release+0xb3/0x260 [ 893.939851][T15179] sock_close+0x1c/0x30 [ 893.944507][T15179] __fput+0x3ff/0xb50 [ 893.948987][T15179] task_work_run+0x150/0x240 [ 893.954075][T15179] exit_to_user_mode_loop+0x1d8/0x6f0 [ 893.959962][T15179] do_syscall_64+0x666/0x870 [ 893.965050][T15179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.971442][T15179] [ 893.971442][T15179] other info that might help us debug this: [ 893.971442][T15179] [ 893.981641][T15179] Possible unsafe locking scenario: [ 893.981641][T15179] [ 893.989062][T15179] CPU0 CPU1 [ 893.994401][T15179] ---- ---- [ 893.999739][T15179] lock(sk_lock-AF_SMC/1); [ 894.004224][T15179] lock((work_completion)(&new_smc->smc_listen_work)); [ 894.013661][T15179] lock(sk_lock-AF_SMC/1); [ 894.020662][T15179] lock((work_completion)(&new_smc->smc_listen_work)); [ 894.027574][T15179] [ 894.027574][T15179] *** DEADLOCK *** [ 894.027574][T15179] [ 894.035690][T15179] 3 locks held by syz.3.2517/15179: [ 894.040859][T15179] #0: ffff8880581724c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 894.051379][T15179] #1: ffff888036e48260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 894.060759][T15179] #2: ffffffff8e7e60c0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 894.069884][T15179] [ 894.069884][T15179] stack backtrace: [ 894.075762][T15179] CPU: 1 UID: 0 PID: 15179 Comm: syz.3.2517 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.075789][T15179] Tainted: [L]=SOFTLOCKUP [ 894.075794][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 894.075803][T15179] Call Trace: [ 894.075811][T15179] [ 894.075817][T15179] dump_stack_lvl+0x100/0x190 [ 894.075841][T15179] print_circular_bug.cold+0x178/0x1c7 [ 894.075865][T15179] check_noncircular+0x146/0x160 [ 894.075884][T15179] check_prev_add+0xeb/0xe60 [ 894.075901][T15179] __lock_acquire+0x136c/0x1a40 [ 894.075921][T15179] lock_acquire+0x1b9/0x370 [ 894.075938][T15179] ? __flush_work+0x4ca/0xcb0 [ 894.075955][T15179] ? mark_held_locks+0x40/0x70 [ 894.075972][T15179] ? __flush_work+0x4ca/0xcb0 [ 894.075988][T15179] __flush_work+0x4de/0xcb0 [ 894.076003][T15179] ? __flush_work+0x4ca/0xcb0 [ 894.076019][T15179] ? __pfx___flush_work+0x10/0x10 [ 894.076034][T15179] ? __lock_acquire+0x49f/0x1a40 [ 894.076051][T15179] ? __pfx_wq_barrier_func+0x10/0x10 [ 894.076074][T15179] ? __pfx___might_resched+0x10/0x10 [ 894.076093][T15179] cancel_work_sync+0xd1/0xf0 [ 894.076111][T15179] smc_clcsock_release+0x5f/0xe0 [ 894.076127][T15179] __smc_release+0x5c2/0x880 [ 894.076156][T15179] ? __pfx_sock_def_readable+0x10/0x10 [ 894.076174][T15179] smc_close_non_accepted+0xda/0x200 [ 894.076188][T15179] smc_close_active+0x4ff/0x1070 [ 894.076203][T15179] __smc_release+0x634/0x880 [ 894.076224][T15179] smc_release+0x1fc/0x620 [ 894.076245][T15179] __sock_release+0xb3/0x260 [ 894.076264][T15179] ? __pfx_sock_close+0x10/0x10 [ 894.076282][T15179] sock_close+0x1c/0x30 [ 894.076299][T15179] __fput+0x3ff/0xb50 [ 894.076317][T15179] ? _raw_spin_unlock_irq+0x23/0x50 [ 894.076339][T15179] task_work_run+0x150/0x240 [ 894.076354][T15179] ? __pfx_task_work_run+0x10/0x10 [ 894.076372][T15179] exit_to_user_mode_loop+0x1d8/0x6f0 [ 894.076391][T15179] ? rcu_is_watching+0x12/0xc0 [ 894.076413][T15179] do_syscall_64+0x666/0x870 [ 894.076427][T15179] ? clear_bhb_loop+0x40/0x90 [ 894.076443][T15179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.076457][T15179] RIP: 0033:0x7f861179ce59 [ 894.076470][T15179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.076484][T15179] RSP: 002b:00007f8612715028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 894.076499][T15179] RAX: 0000000000000000 RBX: 00007f8611a15fa0 RCX: 00007f861179ce59 [ 894.076508][T15179] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 894.076517][T15179] RBP: 00007f8611832e6f R08: 0000000000000000 R09: 0000000000000000 [ 894.076526][T15179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.076534][T15179] R13: 00007f8611a16038 R14: 00007f8611a15fa0 R15: 00007ffc20884608 [ 894.076548][T15179]