last executing test programs: 13.261464947s ago: executing program 2 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1e3) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='0', 0x1) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r5, &(0x7f0000002240)=""/236, 0xec, 0x4eb) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r7, 0xaea3) process_vm_writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/38, 0x26}], 0x7, &(0x7f0000001840)=[{&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/249, 0xf9}, {&(0x7f0000001740)=""/222, 0xde}], 0x6, 0x0) 12.277548382s ago: executing program 2 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='0x567', 0x5) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd, 0x4a}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}], 0x54) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='0\n', 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000080)={[0xa, 0x1, 0xc876, 0x0, 0x6, 0xffffffff, 0x0, 0x9, 0x200, 0x7f5, 0xffff, 0x7, 0x3, 0x6, 0x7], 0xfec00000, 0x380800}) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r4, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) write(r4, &(0x7f0000000140)="bc463343a2fd9db310e7b53f37908c25884c6777ddfa6f95e098bd742832de4ea5221980162d7e988f33f6ae5f3ea2a22036b467c4ce73afaffa69eb58228689e9280a5643f14a4df5d980be3460f9f3526a555f38649b74f2137031320feeb9d3aba52157", 0x65) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f003, 0x5}) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f020}) syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff"], 0x0) 9.429491828s ago: executing program 1 (id=468): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x1, 0x1}, 0x1, 0x40, 0x0, 0x0, 0x3, 0x1, 0x0, 0x7ffd, 0xfffffffc, 0x0}) 9.152418357s ago: executing program 1 (id=470): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x25, &(0x7f0000000380)=0xffffffff, 0x4) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) 8.521748303s ago: executing program 0 (id=472): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000a"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000090) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r9, 0x2) 8.184388537s ago: executing program 1 (id=473): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 7.694746855s ago: executing program 1 (id=474): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 7.573259007s ago: executing program 0 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x92000410}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="00082d10422e259eb72a16a6bd7000ffdbdf25000000000800070000100000060006004e20000054000880500000801400040002004e240a01010200000000000001000000050009000000060005009a000000200004000a004e24fffffff7fc0200000000000000000000000000000000008006000500610000000800050000000000a7b6bf489e277026a20292c75734fef8d49817bf027185becb5954787318629bff6113e4ef528c0274c7478c3e37ba52f1d2f29a3a88e801bf33e11248643323e2d4a4e2a95ae10c712dff5d8673477c32ef330839b8802b9449aa7f676e11e95049648d49e07827be0e"], 0x80}, 0x1, 0x0, 0x0, 0x4008814}, 0x4010) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/delay_retrans\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x800040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x10800, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="ae573100"]) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x1, 0x7, 0x4}}, 0x28) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000"}], 0x18}, 0x0) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) close(r5) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$FUSE(r6, &(0x7f00000026c0)={0x2020}, 0x2020) 7.3057434s ago: executing program 0 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000580), 0x1000, r1}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r2, &(0x7f0000000080)="cf0df04c73", 0x5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f00000001c0)="a77c"}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000054}, 0x8c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SVE_SET_VL(0x32, 0x224d8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000100) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) 7.304624996s ago: executing program 4 (id=478): getitimer(0x2, &(0x7f0000000000)) 7.240023112s ago: executing program 2 (id=479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x7040, 0x0) write$tun(r1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r5, 0x100000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xf}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) 7.16298187s ago: executing program 4 (id=480): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000440)=""/124) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYRES16], 0x12c}}, 0x4008050) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x191540, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x50) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0xd4, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000005}, 0x4090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000006e000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b0000000000000100250a09"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000380)=ANY=[], 0x4000) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r7, &(0x7f0000012640)={0x2020}, 0x2020) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x800) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x14, r4, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x40040c0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xac, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x9, @local, 0x1}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x7}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0xbe4, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7}, @in6={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e21, 0xfffffff9, @local, 0x4da}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f00000002c0)=0x10) socketpair(0xf, 0x2, 0x1ff, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x5810c0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) 6.941241383s ago: executing program 0 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c041}, 0x0) 5.476330209s ago: executing program 3 (id=484): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000180)={0x8, r2}) 5.352589758s ago: executing program 4 (id=485): mprotect(&(0x7f00007f8000/0x4000)=nil, 0x4000, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x108000, 0x4) 5.257040236s ago: executing program 4 (id=486): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x45) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0xb, 0x300000b, 0x100012, r1, 0x8000000) syz_emit_ethernet(0x151, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(0xffffffffffffffff, &(0x7f0000000640)=""/158, 0x9e) r3 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r3, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000004c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETS(r4, 0x80044704, &(0x7f0000000040)={0x8, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) 5.205640622s ago: executing program 3 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x88}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xfffffffffffffffe}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d1f2b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x9}, 0x1c, 0x0}}], 0x1, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 5.08864779s ago: executing program 0 (id=488): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x108000, 0x4) (fail_nth: 3) 3.935781478s ago: executing program 1 (id=489): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) fcntl$dupfd(r1, 0x406, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000400), 0x0, 0x0, 0xfd59}}], 0x4000000000003d6, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7}}, './config/nullb/nullb1/zone_nr_conv\x00'}) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x28}}, 0x40804) shutdown(r2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) unlinkat(r3, &(0x7f0000000280)='./config/nullb/nullb1/zone_nr_conv\x00', 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='1', 0x1) write$P9_RSTATFS(r5, &(0x7f0000000200)={0x43, 0x9, 0x1, {0x3, 0x8, 0x2, 0x6, 0x0, 0x5, 0x7fffffffffffffff, 0x3, 0x2722}}, 0x43) 3.934526299s ago: executing program 0 (id=490): syz_emit_ethernet(0xb6, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="008212924e1f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x64, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x7, "14d4fd6bda784c09766b758f73aad66782d0a236ea182d0200000000000000d4e297ca834b982128397ac8e380b10000000ae059d92c4d54d22294122d6d47378da88d3606bf23dbeea3fc4f577316d5c35b084c36ce1dc8f445c00ec2ae6612c5ecec42f87447474a7c25690bbafb9bc62327252eabf0d6417553ecd420ae55cc88d7f1b0198be9e0c869de"}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @void}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r2, 0x4b46, &(0x7f0000000140)) sendmsg$nl_route(r1, 0x0, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) ioctl$VIDIOC_S_FBUF(r6, 0x402c560b, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)="bbf6e3f524ec28b878e95edca4a2b40f8938430f84a67915d0380e55597ba1e0a02c550422c411476ef514aa2515c2284b95c83ad71abd152ce2591586ec", {0x3, 0x1, 0x38416761, 0x2, 0x5, 0x16db, 0x6, 0x1ff}}) syz_usb_connect$uac3(0x5, 0x9c, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4064, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x7e, 0x20, 0xf1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x9c}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x1, 0x5, {0xa, 0x25, 0x25, 0x9, 0x91, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x34}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0xa, 0x5, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x6, 0x16, {0xa, 0x25, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x7, 0x81, 0x9, 0x40, 0x37}, 0x0, 0x0, 0x6, [{0x8d, &(0x7f0000000380)=ANY=[@ANYBLOB="8d037f64bd858ec4c174fa9e5ada381c609dadb6fe607a96016afc5302596662de3cc1ec4e70a4aa9e0e28440131c9b6e0f4571d861b1f72a7ec603d38e2f42edcde520dee10a7a071752c99a1b3d22544e431ec23eb4011b8aa0d49dec47f00bc766367f51f1f7631f39ca049a2cf5b0049747c000000003d5564920e2f508e000000000000"]}, {0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x48}}, {0xb, &(0x7f00000005c0)=@string={0xb, 0x3, "5a1c41342fec266888"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1407}}]}) write(r6, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) 3.744348278s ago: executing program 3 (id=491): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10041, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) 3.667242754s ago: executing program 2 (id=492): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x8008af26, &(0x7f0000000040)) socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100), 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() prlimit64(r3, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 3.614833158s ago: executing program 4 (id=493): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r1, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10041, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 3.459440018s ago: executing program 3 (id=494): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800) syz_io_uring_setup(0xf00, &(0x7f0000000040)={0x0, 0x595e, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='exfat\x00', 0x8000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x40c0080) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xf4000000}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd=r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x3, 0x0, 0x0, '\x00', 0x0}}) 3.292799456s ago: executing program 2 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1e3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='0', 0x1) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r6, &(0x7f0000002240)=""/236, 0xec, 0x4eb) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r8, 0xaea3) process_vm_writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/38, 0x26}], 0x7, &(0x7f0000001840)=[{&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/249, 0xf9}, {&(0x7f0000001740)=""/222, 0xde}], 0x6, 0x0) 3.116379802s ago: executing program 1 (id=496): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @empty}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x6, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) socket$inet_udp(0x2, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000005000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.41605345s ago: executing program 2 (id=497): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x23, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x25}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0xf, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000605000100070000000900020073797a30000000101400078008000600000000000800114000000000050005000200000005000400040000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x84) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB="40233a0000003a23d637ad092b9009d692"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.197537248s ago: executing program 3 (id=498): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000040)=0x108000, 0x4) 1.037964021s ago: executing program 3 (id=499): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="3000000009000000000000000000000002"], 0x30) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) writev(r3, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000540)="518031202cf03c2405afe1fc9234647d5716cdc3bb6f0f8764c86a57c2b12564934e16f99d2c034443877f248f7c7070a9", 0x31}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) lsetxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_io_uring_setup(0x108e, &(0x7f00000001c0)={0x0, 0x5b62, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r12 = socket(0x18, 0x6, 0x1) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_BIND=@ipv4={0x38, 0x0, 0x0, r12, 0x0, 0x0}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10200040}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000020303000000000000000000040000030900020000000000050000001800044000000001090002000000007f00000000"], 0x34}, 0x1, 0x0, 0x0, 0x8844}, 0x4000000) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x1, 0x2, @thr={0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r13, &(0x7f0000000000), 0xd) 0s ago: executing program 4 (id=500): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x3, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x200000000000008, 0x0) read$msr(r3, &(0x7f0000000f00)=""/102400, 0x19000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) fsmount(r5, 0x0, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x2, 0x10}, {0x1, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90000}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kernel console output (not intermixed with test programs): 2][ T5704] usb 4-1: device descriptor read/8, error -71 [ 94.427553][ T5704] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.532910][ T5704] usb 4-1: device descriptor read/8, error -71 [ 94.673952][ T5704] usb usb4-port1: unable to enumerate USB device [ 95.393068][ T5937] capability: warning: `syz.1.42' uses 32-bit capabilities (legacy support in use) [ 95.470481][ T5936] syzkaller0: entered promiscuous mode [ 95.496064][ T5936] syzkaller0: entered allmulticast mode [ 96.039366][ T5944] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 96.573724][ T5939] tipc: Started in network mode [ 97.514763][ T5939] tipc: Node identity 52bec0539659, cluster identity 4711 [ 97.594648][ T5939] tipc: Enabled bearer , priority 0 [ 97.658834][ T5933] tipc: Resetting bearer [ 97.759377][ T5933] tipc: Disabling bearer [ 97.781724][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 97.781739][ T31] audit: type=1400 audit(1787213358.164:401): avc: denied { setopt } for pid=5954 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.796343][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 97.808837][ T31] audit: type=1400 audit(1787213358.174:402): avc: denied { ioctl } for pid=5955 comm="syz.1.46" path="socket:[9646]" dev="sockfs" ino=9646 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.847435][ T31] audit: type=1400 audit(1787213358.194:403): avc: denied { connect } for pid=5955 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.899026][ T31] audit: type=1400 audit(1787213358.224:404): avc: denied { mount } for pid=5955 comm="syz.1.46" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 97.963543][ T5961] netlink: 'syz.1.46': attribute type 4 has an invalid length. [ 97.990053][ T31] audit: type=1400 audit(1787213358.254:405): avc: denied { name_bind } for pid=5955 comm="syz.1.46" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 98.056864][ T31] audit: type=1400 audit(1787213358.254:406): avc: denied { node_bind } for pid=5955 comm="syz.1.46" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 98.080548][ T5967] usb usb8: usbfs: process 5967 (syz.4.49) did not claim interface 0 before use [ 99.168705][ T31] audit: type=1400 audit(1787213358.434:407): avc: denied { search } for pid=5955 comm="syz.1.46" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.242744][ T31] audit: type=1400 audit(1787213358.434:408): avc: denied { write } for pid=5963 comm="syz.4.49" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.306575][ T31] audit: type=1400 audit(1787213358.434:409): avc: denied { search } for pid=5955 comm="syz.1.46" name="events" dev="tracefs" ino=3754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.500769][ T31] audit: type=1400 audit(1787213358.944:410): avc: denied { create } for pid=5964 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.496317][ T5987] 9p: Bad value for 'wfdno' [ 100.752580][ T5998] Zero length message leads to an empty skb [ 101.567425][ T5697] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.762065][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.826809][ T5697] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.40 [ 101.882653][ T5697] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.936790][ T5697] usb 3-1: config 1 interface 0 has no altsetting 0 [ 101.956085][ T5697] usb 3-1: string descriptor 0 read error: -22 [ 101.972766][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.097608][ T6039] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.262083][ T6047] binder: 6043:6047 ioctl c0306201 0 returned -14 [ 102.651007][ T5697] hid (null): report_id 2275153989 is invalid [ 102.675778][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.706589][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.723445][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.731812][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.745360][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.753552][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.761531][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.792942][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 102.792981][ T31] audit: type=1400 audit(1787213363.174:471): avc: denied { create } for pid=6063 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.836262][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.859722][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.898174][ T5697] itetech 0003:06CB:73F6.0002: unknown main item tag 0x0 [ 102.948668][ T5697] itetech 0003:06CB:73F6.0002: reserved main item tag 0xe [ 102.976741][ T5697] itetech 0003:06CB:73F6.0002: collection stack underflow [ 103.017745][ T5697] itetech 0003:06CB:73F6.0002: item 0 0 0 12 parsing failed [ 103.083894][ T5697] itetech 0003:06CB:73F6.0002: probe with driver itetech failed with error -22 [ 103.114219][ T31] audit: type=1400 audit(1787213363.494:472): avc: denied { create } for pid=6003 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.624599][ T5697] usb 3-1: USB disconnect, device number 2 [ 104.888472][ T31] audit: type=1400 audit(1787213364.754:473): avc: denied { prog_load } for pid=6069 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.951774][ T31] audit: type=1400 audit(1787213365.084:474): avc: denied { prog_run } for pid=6069 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.315698][ T31] audit: type=1400 audit(1787213365.694:475): avc: denied { map_create } for pid=6083 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.407108][ T31] audit: type=1400 audit(1787213365.694:476): avc: denied { map_read map_write } for pid=6083 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.467144][ T31] audit: type=1400 audit(1787213365.794:477): avc: denied { read } for pid=6083 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.633779][ T31] audit: type=1400 audit(1787213365.994:478): avc: denied { append } for pid=6087 comm="syz.3.79" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.950541][ T31] audit: type=1400 audit(1787213366.324:479): avc: denied { setopt } for pid=6100 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.152662][ T31] audit: type=1400 audit(1787213366.534:480): avc: denied { bind } for pid=6100 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.722951][ T6097] loop5: detected capacity change from 0 to 7 [ 106.837837][ T6097] Dev loop5: unable to read RDB block 7 [ 106.854533][ T6097] loop5: AHDI p1 p2 p3 [ 106.870115][ T6097] loop5: partition table partially beyond EOD, truncated [ 107.004784][ T6097] loop5: p1 start 1601398130 is beyond EOD, truncated [ 107.028135][ T5719] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.042684][ T6097] loop5: p2 start 1702059890 is beyond EOD, truncated [ 107.279934][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 107.305674][ T5719] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 107.397760][ T5719] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 107.416988][ T5719] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.432098][ T5719] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.460232][ T5719] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 107.492805][ T5719] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.526645][ T5719] usb 5-1: config 0 has no interface number 0 [ 107.541038][ T5719] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 107.564102][ T5719] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 107.580252][ T5719] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.592841][ T5719] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.606409][ T5719] usb 5-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 107.622705][ T5719] usb 5-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 107.637494][ T5719] usb 5-1: config 0 interface 125 has no altsetting 0 [ 107.664502][ T5719] usb 5-1: config 0 interface 125 has no altsetting 2 [ 107.677145][ T5784] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.679722][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.703667][ T5719] usb 5-1: Product: syz [ 107.710465][ T5719] usb 5-1: Manufacturer: syz [ 107.721190][ T5719] usb 5-1: SerialNumber: syz [ 107.770143][ T5719] usb 5-1: config 0 descriptor?? [ 107.794895][ T5719] usb 5-1: selecting invalid altsetting 2 [ 107.809100][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 107.809115][ T31] audit: type=1400 audit(1787213368.194:484): avc: denied { read write } for pid=6130 comm="syz.1.90" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.842263][ T5784] usb 3-1: device descriptor read/64, error -71 [ 107.864568][ T31] audit: type=1400 audit(1787213368.224:485): avc: denied { open } for pid=6130 comm="syz.1.90" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.889184][ T31] audit: type=1400 audit(1787213368.234:486): avc: denied { ioctl } for pid=6130 comm="syz.1.90" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.915030][ T31] audit: type=1400 audit(1787213368.254:487): avc: denied { block_suspend } for pid=6126 comm="syz.3.89" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.997407][ T31] audit: type=1400 audit(1787213368.384:488): avc: denied { ioctl } for pid=6126 comm="syz.3.89" path="socket:[10268]" dev="sockfs" ino=10268 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.072623][ T6136] FAULT_INJECTION: forcing a failure. [ 108.072623][ T6136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.086872][ T6136] CPU: 0 UID: 0 PID: 6136 Comm: syz.1.91 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.086903][ T6136] Tainted: [L]=SOFTLOCKUP [ 108.086909][ T6136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 108.086919][ T6136] Call Trace: [ 108.086930][ T6136] [ 108.086938][ T6136] dump_stack_lvl+0x100/0x190 [ 108.086966][ T6136] should_fail_ex.cold+0x5/0xa [ 108.086989][ T6136] _copy_from_user+0x2e/0xd0 [ 108.087009][ T6136] kstrtouint_from_user+0xd6/0x1d0 [ 108.087035][ T6136] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 108.087062][ T6136] ? __lock_acquire+0x4c5/0x1ec0 [ 108.087089][ T6136] ? lock_acquire+0x1b9/0x370 [ 108.087114][ T6136] proc_fail_nth_write+0x83/0x220 [ 108.087137][ T6136] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.087166][ T6136] vfs_write+0x2aa/0x1050 [ 108.087185][ T6136] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.087209][ T6136] ? __pfx_vfs_write+0x10/0x10 [ 108.087225][ T6136] ? find_held_lock+0x2b/0x80 [ 108.087242][ T6136] ? __fget_files+0x215/0x3d0 [ 108.087268][ T6136] ? __fget_files+0x21f/0x3d0 [ 108.087297][ T6136] ksys_write+0x12a/0x250 [ 108.087316][ T6136] ? __pfx_ksys_write+0x10/0x10 [ 108.087344][ T6136] do_syscall_64+0x123/0x790 [ 108.087372][ T6136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.087388][ T6136] RIP: 0033:0x7fe2f3f5e90e [ 108.087403][ T6136] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.087419][ T6136] RSP: 002b:00007fe2f4ddffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.087437][ T6136] RAX: ffffffffffffffda RBX: 00007fe2f4de06c0 RCX: 00007fe2f3f5e90e [ 108.087448][ T6136] RDX: 0000000000000001 RSI: 00007fe2f4de00a0 RDI: 0000000000000004 [ 108.087457][ T6136] RBP: 00007fe2f4de0090 R08: 0000000000000000 R09: 0000000000000000 [ 108.087467][ T6136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.087476][ T6136] R13: 00007fe2f4226038 R14: 00007fe2f4225fa0 R15: 00007ffcdd6937d8 [ 108.087501][ T6136] [ 108.338684][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.351643][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.372229][ T6109] netlink: 164 bytes leftover after parsing attributes in process `syz.4.85'. [ 108.397553][ T5784] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.439329][ T6109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.85'. [ 108.527928][ T5784] usb 3-1: device descriptor read/64, error -71 [ 108.590951][ T6142] vivid-000: disconnect [ 108.607632][ T31] audit: type=1400 audit(1787213368.984:489): avc: denied { bind } for pid=6141 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.629038][ T31] audit: type=1400 audit(1787213368.984:490): avc: denied { listen } for pid=6141 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.649181][ T5784] usb usb3-port1: attempt power cycle [ 108.850580][ T5719] get_1284_register timeout [ 109.375415][ T6109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.414103][ T6141] vivid-000: reconnect [ 109.440395][ T5784] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.483045][ T6109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.594806][ T5784] usb 3-1: device descriptor read/8, error -71 [ 109.760106][ T6109] mmap: syz.4.85 (6109) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.937397][ T5784] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.040058][ T5784] usb 3-1: device descriptor read/8, error -71 [ 110.274213][ T5784] usb usb3-port1: unable to enumerate USB device [ 110.727946][ T31] audit: type=1400 audit(1787213371.094:491): avc: denied { mount } for pid=6154 comm="syz.3.97" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.266347][ T5719] usb 5-1: USB disconnect, device number 3 [ 111.290612][ T31] audit: type=1400 audit(1787213371.674:492): avc: denied { create } for pid=6157 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.447111][ T31] audit: type=1400 audit(1787213371.804:493): avc: denied { getopt } for pid=6157 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.066831][ T6176] ======================================================= [ 113.066831][ T6176] WARNING: The mand mount option has been deprecated and [ 113.066831][ T6176] and is ignored by this kernel. Remove the mand [ 113.066831][ T6176] option from the mount to silence this warning. [ 113.066831][ T6176] ======================================================= [ 113.587376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.600536][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 113.600548][ T31] audit: type=1400 audit(1787213373.544:495): avc: denied { mounton } for pid=6166 comm="syz.0.101" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 113.647132][ T31] audit: type=1400 audit(1787213374.024:496): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.862729][ T31] audit: type=1400 audit(1787213375.244:497): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 116.408947][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 117.466072][ T5784] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.297187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.727170][ T5784] usb 4-1: Using ep0 maxpacket: 16 [ 118.751717][ T5784] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 118.762525][ T5784] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 118.962296][ T5784] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 118.971099][ T5784] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 118.979325][ T5784] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 118.987855][ T5784] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.996752][ T5784] usb 4-1: config 0 has no interface number 0 [ 119.003254][ T5784] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 119.019052][ T5784] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 119.030748][ T5784] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.046366][ T5784] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.528311][ T5784] usb 4-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 120.543481][ T5784] usb 4-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 120.557695][ T5784] usb 4-1: config 0 interface 125 has no altsetting 0 [ 120.564832][ T5784] usb 4-1: config 0 interface 125 has no altsetting 2 [ 120.573214][ T5784] usb 4-1: string descriptor 0 read error: -71 [ 120.579932][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.602812][ T5784] usb 4-1: config 0 descriptor?? [ 120.609719][ T5784] usb 4-1: can't set config #0, error -71 [ 120.618189][ T5784] usb 4-1: USB disconnect, device number 6 [ 120.636547][ T31] audit: type=1400 audit(1787213380.994:498): avc: denied { read write } for pid=6219 comm="syz.0.116" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 120.781966][ T31] audit: type=1400 audit(1787213381.014:499): avc: denied { open } for pid=6219 comm="syz.0.116" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 120.850729][ T31] audit: type=1400 audit(1787213381.014:500): avc: denied { ioctl } for pid=6219 comm="syz.0.116" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 120.975235][ T31] audit: type=1400 audit(1787213381.104:501): avc: denied { read write } for pid=6221 comm="syz.3.117" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.017445][ T31] audit: type=1400 audit(1787213381.104:502): avc: denied { open } for pid=6221 comm="syz.3.117" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.233919][ T31] audit: type=1400 audit(1787213381.614:503): avc: denied { write } for pid=6235 comm="syz.0.119" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.312471][ T31] audit: type=1400 audit(1787213381.674:504): avc: denied { mounton } for pid=6223 comm="syz.1.106" path="/20/file0" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 121.341772][ T5704] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.384390][ T31] audit: type=1400 audit(1787213381.694:505): avc: denied { bind } for pid=6235 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.511601][ T5704] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.570377][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.581151][ T5704] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.594025][ T5704] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.607592][ T5704] usb 3-1: config 1 interface 0 has no altsetting 0 [ 123.618104][ T5704] usb 3-1: string descriptor 0 read error: -22 [ 123.629550][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.680346][ T6242] FAULT_INJECTION: forcing a failure. [ 123.680346][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 123.873841][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.3.120 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.873875][ T6242] Tainted: [L]=SOFTLOCKUP [ 123.873881][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.873890][ T6242] Call Trace: [ 123.873902][ T6242] [ 123.873909][ T6242] dump_stack_lvl+0x100/0x190 [ 123.873941][ T6242] should_fail_ex.cold+0x5/0xa [ 123.873966][ T6242] should_failslab+0xc2/0x120 [ 123.873994][ T6242] __kmalloc_noprof+0xfc/0x820 [ 123.874018][ T6242] ? tomoyo_encode2+0xfb/0x3c0 [ 123.874049][ T6242] tomoyo_encode2+0xfb/0x3c0 [ 123.874072][ T6242] tomoyo_encode+0x29/0x50 [ 123.874090][ T6242] tomoyo_realpath_from_path+0x18c/0x690 [ 123.874155][ T6242] tomoyo_path_number_perm+0x23c/0x580 [ 123.874181][ T6242] ? tomoyo_path_number_perm+0x22e/0x580 [ 123.874209][ T6242] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.874260][ T6242] ? find_held_lock+0x2b/0x80 [ 123.874278][ T6242] ? hook_file_ioctl_common+0x140/0x440 [ 123.874306][ T6242] ? __fget_files+0x21f/0x3d0 [ 123.874335][ T6242] security_file_ioctl+0xd3/0x230 [ 123.874354][ T6242] __x64_sys_ioctl+0xb7/0x210 [ 123.874376][ T6242] do_syscall_64+0x123/0x790 [ 123.874404][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.874422][ T6242] RIP: 0033:0x7f8c48d9e0d9 [ 123.874436][ T6242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.874456][ T6242] RSP: 002b:00007f8c49cef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.874474][ T6242] RAX: ffffffffffffffda RBX: 00007f8c49025fa0 RCX: 00007f8c48d9e0d9 [ 123.874485][ T6242] RDX: 0000200000000940 RSI: 00000000c0405668 RDI: 0000000000000003 [ 123.874495][ T6242] RBP: 00007f8c49cef090 R08: 0000000000000000 R09: 0000000000000000 [ 123.874505][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.874514][ T6242] R13: 00007f8c49026038 R14: 00007f8c49025fa0 R15: 00007ffdfe811c68 [ 123.874537][ T6242] [ 123.875737][ T6242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.175729][ T6247] usb usb7: check_ctrlrecip: process 6247 (syz.4.121) requesting ep 01 but needs 81 [ 124.463333][ T5704] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 124.557250][ T5704] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:0926:3333.0003/input/input5 [ 125.089964][ T6253] usb usb7: check_ctrlrecip: process 6253 (syz.3.123) requesting ep 01 but needs 81 [ 126.429875][ T31] audit: type=1400 audit(1787213386.814:506): avc: denied { bind } for pid=6256 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.478663][ T31] audit: type=1400 audit(1787213386.854:507): avc: denied { setopt } for pid=6256 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.512285][ T6259] ip6gretap1: entered allmulticast mode [ 126.541675][ T5704] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 126.574654][ T6259] batman_adv: batadv0: Adding interface: ip6gretap1 [ 126.587219][ T31] audit: type=1400 audit(1787213386.864:508): avc: denied { accept } for pid=6256 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.614457][ T5704] usb 3-1: USB disconnect, device number 7 [ 126.658854][ T6259] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.665542][ T31] audit: type=1400 audit(1787213386.914:509): avc: denied { write } for pid=6256 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.714223][ T6259] batman_adv: batadv0: Interface activated: ip6gretap1 [ 126.831174][ T31] audit: type=1400 audit(1787213386.924:510): avc: denied { read } for pid=6256 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.924073][ T6261] fido_id[6261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 126.933684][ T31] audit: type=1400 audit(1787213387.024:511): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 127.170361][ T31] audit: type=1400 audit(1787213387.554:512): avc: denied { execute } for pid=6269 comm="syz.2.131" path=2F6D656D66643A0241BBCCEB1416E86D146F536157202864656C6574656429 dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.865559][ T31] audit: type=1400 audit(1787213388.234:513): avc: denied { read append } for pid=6262 comm="syz.3.128" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.938381][ T31] audit: type=1400 audit(1787213388.234:514): avc: denied { open } for pid=6262 comm="syz.3.128" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.003655][ T31] audit: type=1400 audit(1787213388.374:515): avc: denied { read } for pid=6265 comm="syz.4.130" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 128.549362][ T6294] usb usb7: check_ctrlrecip: process 6294 (syz.1.136) requesting ep 01 but needs 81 [ 128.937808][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.117115][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 129.130090][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 129.155034][ T10] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 129.175426][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 129.194273][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 129.216065][ T10] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 129.234903][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.247066][ T10] usb 1-1: config 0 has no interface number 0 [ 129.265966][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 129.287774][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 129.307079][ T10] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.351761][ T10] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.405193][ T10] usb 1-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 129.978064][ T10] usb 1-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 129.991493][ T10] usb 1-1: config 0 interface 125 has no altsetting 0 [ 129.999001][ T10] usb 1-1: config 0 interface 125 has no altsetting 2 [ 130.144444][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.152664][ T10] usb 1-1: Product: syz [ 130.156934][ T10] usb 1-1: Manufacturer: syz [ 130.161698][ T10] usb 1-1: SerialNumber: syz [ 130.204034][ T10] usb 1-1: config 0 descriptor?? [ 130.219962][ T10] usb 1-1: selecting invalid altsetting 2 [ 130.393872][ T6302] futex_wake_op: syz.1.140 tries to shift op by -1; fix this program [ 130.404479][ T6302] usb usb7: check_ctrlrecip: process 6302 (syz.1.140) requesting ep 01 but needs 81 [ 130.629699][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.651905][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.674558][ T6287] netlink: 164 bytes leftover after parsing attributes in process `syz.0.127'. [ 130.714243][ T6287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.127'. [ 131.093376][ T6312] futex_wake_op: syz.2.143 tries to shift op by -1; fix this program [ 131.115231][ T6312] usb usb7: check_ctrlrecip: process 6312 (syz.2.143) requesting ep 01 but needs 81 [ 131.501521][ T6307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.595259][ T6307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.638955][ T5719] usb 1-1: USB disconnect, device number 2 [ 132.050679][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.145'. [ 132.072381][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 132.332638][ T6330] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 132.341786][ T6330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 133.059703][ T6334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=6334 comm=syz.4.142 [ 133.363756][ T6342] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 133.372895][ T6342] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 134.543771][ T5609] Bluetooth: hci0: ACL packet for unknown connection handle 174 [ 134.949660][ T6365] futex_wake_op: syz.2.156 tries to shift op by -1; fix this program [ 134.969172][ T6365] usb usb7: check_ctrlrecip: process 6365 (syz.2.156) requesting ep 01 but needs 81 [ 135.089658][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.167115][ T5719] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.207972][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.215545][ T5784] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.338864][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.346629][ T5719] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.40 [ 135.358814][ T5719] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.367887][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.372179][ T5719] usb 2-1: config 1 interface 0 has no altsetting 0 [ 135.381157][ T5784] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 135.390332][ T5719] usb 2-1: string descriptor 0 read error: -22 [ 135.405446][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.475814][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.504930][ T5784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.518549][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 135.539507][ T5784] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.568698][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.587288][ T10] usb 1-1: Product: syz [ 135.592468][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 135.606626][ T10] usb 1-1: Manufacturer: syz [ 135.624888][ T5784] usb 4-1: SerialNumber: syz [ 135.632565][ T10] usb 1-1: SerialNumber: syz [ 135.678287][ T10] cdc_mbim 1-1:1.0: skipping garbage [ 135.772702][ T6370] FAULT_INJECTION: forcing a failure. [ 135.772702][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 135.786120][ T6370] CPU: 1 UID: 0 PID: 6370 Comm: syz.4.159 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.786152][ T6370] Tainted: [L]=SOFTLOCKUP [ 135.786158][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.786168][ T6370] Call Trace: [ 135.786175][ T6370] [ 135.786182][ T6370] dump_stack_lvl+0x100/0x190 [ 135.786213][ T6370] should_fail_ex.cold+0x5/0xa [ 135.786238][ T6370] should_failslab+0xc2/0x120 [ 135.786265][ T6370] __kmalloc_noprof+0xfc/0x820 [ 135.786290][ T6370] ? tls_sw_sendmsg+0x11ee/0x2e00 [ 135.786318][ T6370] tls_sw_sendmsg+0x11ee/0x2e00 [ 135.786354][ T6370] ? __lock_acquire+0x4c5/0x1ec0 [ 135.786382][ T6370] ? sock_has_perm+0x25a/0x2f0 [ 135.786406][ T6370] ? __pfx_sock_has_perm+0x10/0x10 [ 135.786431][ T6370] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 135.786461][ T6370] ? __might_fault+0xc5/0x140 [ 135.786490][ T6370] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 135.786515][ T6370] inet6_sendmsg+0x11c/0x140 [ 135.786536][ T6370] __sys_sendto+0x36d/0x4e0 [ 135.786573][ T6370] ? __pfx___sys_sendto+0x10/0x10 [ 135.786624][ T6370] __x64_sys_sendto+0xe0/0x1c0 [ 135.786649][ T6370] ? __x64_sys_sendto+0x4/0x1c0 [ 135.786674][ T6370] do_syscall_64+0x123/0x790 [ 135.786703][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.786722][ T6370] RIP: 0033:0x7f4cdd35e90e [ 135.786737][ T6370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.786753][ T6370] RSP: 002b:00007f4cde2fde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 135.786772][ T6370] RAX: ffffffffffffffda RBX: 00007f4cde2ff6c0 RCX: 00007f4cdd35e90e [ 135.786783][ T6370] RDX: 000000000000001c RSI: 00007f4cde2fe000 RDI: 0000000000000004 [ 135.786792][ T6370] RBP: 0000000000000000 R08: 00007f4cde2fdf04 R09: 000000000000000c [ 135.786802][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 135.786811][ T6370] R13: 00007f4cde2fdf58 R14: 00007f4cde2fe000 R15: 0000000000000000 [ 135.786836][ T6370] [ 136.198444][ T6350] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.512314][ T5719] hid (null): report_id 2275153989 is invalid [ 136.641022][ T5719] hid_parser_main: 53 callbacks suppressed [ 136.641075][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 136.751804][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 136.823709][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 136.921746][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 137.009405][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 137.056428][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 137.113396][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 137.126320][ T6350] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.159164][ T5784] usb 4-1: 0:2 : does not exist [ 137.165358][ T5784] usb 4-1: unit 5: unexpected type 0x0c [ 137.195085][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 137.234164][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 137.254722][ T5784] usb 4-1: USB disconnect, device number 7 [ 137.262696][ T10] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 137.291343][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 137.313791][ T5719] itetech 0003:06CB:73F6.0004: unknown main item tag 0x0 [ 137.316028][ T10] wwan wwan0: port wwan0mbim0 attached [ 137.710113][ T6380] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 137.719240][ T6380] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 137.898204][ T5719] itetech 0003:06CB:73F6.0004: reserved main item tag 0xe [ 138.005134][ T5719] itetech 0003:06CB:73F6.0004: collection stack underflow [ 138.769939][ T5719] itetech 0003:06CB:73F6.0004: item 0 0 0 12 parsing failed [ 138.796164][ T5719] itetech 0003:06CB:73F6.0004: probe with driver itetech failed with error -22 [ 138.967875][ T10] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 72:ab:81:37:b3:86 [ 138.985598][ T10] usb 1-1: USB disconnect, device number 3 [ 138.993863][ T5719] usb 2-1: USB disconnect, device number 3 [ 139.028026][ T6384] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 139.034819][ T6384] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 139.053688][ T10] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 139.093856][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.159843][ T6384] vhci_hcd vhci_hcd.0: Device attached [ 139.487771][ T5837] usb 36-1: SetAddress Request (2) to port 0 [ 139.506315][ T5837] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 139.522525][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 140.252802][ T6387] vhci_hcd: connection closed [ 140.269216][ T6025] vhci_hcd vhci_hcd.1: stop threads [ 140.293700][ T6025] vhci_hcd vhci_hcd.1: release socket [ 140.322727][ T6025] vhci_hcd vhci_hcd.1: disconnect device [ 140.729791][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 140.729807][ T31] audit: type=1400 audit(1787213401.114:524): avc: denied { audit_write } for pid=6408 comm="syz.0.172" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 140.759347][ T31] audit: type=1107 audit(1787213401.144:525): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ba{y_㌷ePL,}T{c{xIL[vĊG%oEpq[,@Y\CgȈss2 AiM,qz`C3@_;CG' [ 140.821652][ T6410] futex_wake_op: syz.4.170 tries to shift op by -1; fix this program [ 140.865225][ T6410] usb usb7: check_ctrlrecip: process 6410 (syz.4.170) requesting ep 01 but needs 81 [ 141.017311][ T5712] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.077101][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 142.085758][ T5712] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 142.104896][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 142.121379][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.136570][ T5712] usb 1-1: config 0 descriptor?? [ 142.272896][ T6424] exFAT-fs (nullb0): invalid boot record signature [ 142.307973][ T6424] exFAT-fs (nullb0): failed to read boot sector [ 142.319274][ T6424] exFAT-fs (nullb0): failed to recognize exfat type [ 142.575325][ T5712] hid_parser_main: 53 callbacks suppressed [ 142.575347][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.607228][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.622072][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.638981][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.657111][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.664348][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.678072][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.685060][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.692479][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.699718][ T5712] apple 0003:05AC:027D.0005: unknown main item tag 0x0 [ 142.707427][ T5712] apple 0003:05AC:027D.0005: unexpected long global item [ 142.716879][ T5712] apple 0003:05AC:027D.0005: parse failed [ 142.723769][ T5712] apple 0003:05AC:027D.0005: probe with driver apple failed with error -22 [ 142.782543][ T5704] usb 1-1: USB disconnect, device number 4 [ 144.141021][ T31] audit: type=1400 audit(1787213404.464:526): avc: denied { write } for pid=6428 comm="syz.1.178" name="netlink" dev="proc" ino=4026533103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 145.118582][ T6441] FAULT_INJECTION: forcing a failure. [ 145.118582][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 145.159953][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.0.180 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.159982][ T6441] Tainted: [L]=SOFTLOCKUP [ 145.159988][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 145.159998][ T6441] Call Trace: [ 145.160004][ T6441] [ 145.160012][ T6441] dump_stack_lvl+0x100/0x190 [ 145.160041][ T6441] should_fail_ex.cold+0x5/0xa [ 145.160064][ T6441] should_failslab+0xc2/0x120 [ 145.160091][ T6441] __kvmalloc_node_noprof+0x116/0x970 [ 145.160117][ T6441] ? bpf_test_run_xdp_live+0x16f/0x760 [ 145.160200][ T6441] bpf_test_run_xdp_live+0x16f/0x760 [ 145.160222][ T6441] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 145.160243][ T6441] ? __mutex_unlock_slowpath+0x35d/0x930 [ 145.160277][ T6441] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 145.160297][ T6441] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 145.160327][ T6441] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 145.160362][ T6441] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 145.160390][ T6441] ? 0xffffffffa0205540 [ 145.160406][ T6441] ? 0xffffffffa0205540 [ 145.160419][ T6441] ? 0xffffffffa0205540 [ 145.160436][ T6441] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 145.160466][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 145.160491][ T6441] ? fput+0x7c/0x100 [ 145.160513][ T6441] ? __bpf_prog_get+0x97/0x2a0 [ 145.160538][ T6441] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 145.160559][ T6441] __sys_bpf+0x2a12/0x4e80 [ 145.160607][ T6441] ? __pfx___sys_bpf+0x10/0x10 [ 145.160629][ T6441] ? find_held_lock+0x2b/0x80 [ 145.160648][ T6441] ? get_pid_task+0xfc/0x250 [ 145.160667][ T6441] ? get_pid_task+0xfc/0x250 [ 145.160694][ T6441] ? find_held_lock+0x2b/0x80 [ 145.160719][ T6441] ? rcu_read_lock_any_held+0x6a/0x90 [ 145.160738][ T6441] ? find_held_lock+0x2b/0x80 [ 145.160755][ T6441] ? ksys_write+0x190/0x250 [ 145.160775][ T6441] ? ksys_write+0x190/0x250 [ 145.160810][ T6441] ? fput+0x7c/0x100 [ 145.160835][ T6441] ? ksys_write+0x1ac/0x250 [ 145.160857][ T6441] ? __x64_sys_bpf+0xce/0x140 [ 145.160881][ T6441] __x64_sys_bpf+0xce/0x140 [ 145.160903][ T6441] ? do_syscall_64+0xae/0x790 [ 145.160928][ T6441] do_syscall_64+0x123/0x790 [ 145.160954][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.160973][ T6441] RIP: 0033:0x7f008179e0d9 [ 145.160989][ T6441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.161005][ T6441] RSP: 002b:00007f0082657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.161022][ T6441] RAX: ffffffffffffffda RBX: 00007f0081a25fa0 RCX: 00007f008179e0d9 [ 145.161033][ T6441] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 145.161044][ T6441] RBP: 00007f0082657090 R08: 0000000000000000 R09: 0000000000000000 [ 145.161053][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.161063][ T6441] R13: 00007f0081a26038 R14: 00007f0081a25fa0 R15: 00007ffe6cc66188 [ 145.161085][ T6441] [ 145.455935][ T5837] usb 36-1: device descriptor read/8, error -110 [ 145.868859][ T5837] usb usb36-port1: attempt power cycle [ 147.507921][ T5837] usb usb36-port1: unable to enumerate USB device [ 147.597160][ T31] audit: type=1400 audit(1787213407.974:527): avc: denied { create } for pid=6457 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.678697][ T31] audit: type=1400 audit(1787213407.974:528): avc: denied { getopt } for pid=6457 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 148.131391][ T5837] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.779161][ T5837] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 148.800858][ T5837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.812792][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.857689][ T5837] snd-ua101 3-1:1.0: probe with driver snd-ua101 failed with error -2 [ 149.062041][ T5837] usb 3-1: USB disconnect, device number 8 [ 150.761609][ T6500] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 150.770755][ T6500] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 151.081682][ T31] audit: type=1400 audit(1787213411.464:529): avc: denied { create } for pid=6503 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 151.171266][ T31] audit: type=1400 audit(1787213411.544:530): avc: denied { accept } for pid=6503 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 151.293350][ T31] audit: type=1400 audit(1787213411.674:531): avc: denied { connect } for pid=6503 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 151.396084][ T31] audit: type=1400 audit(1787213411.774:532): avc: denied { accept } for pid=6505 comm="syz.0.196" lport=56729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.947927][ T5704] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.582363][ T5704] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 153.563826][ T5704] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 153.572209][ T5704] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.603121][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.621004][ T5704] usb 1-1: Product: syz [ 153.647932][ T5704] usb 1-1: Manufacturer: syz [ 153.652884][ T5704] usb 1-1: SerialNumber: syz [ 153.684756][ T5704] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 153.890395][ T6522] syzkaller1: entered promiscuous mode [ 153.909038][ T6522] syzkaller1: entered allmulticast mode [ 154.452544][ T5704] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 155.781771][ T5704] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 155.862005][ T5704] usb 1-1: USB disconnect, device number 5 [ 156.275719][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.697124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 157.821470][ T31] audit: type=1400 audit(1787213418.204:533): avc: denied { mount } for pid=6557 comm="syz.0.213" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 157.832606][ T6558] isofs_fill_super: bread failed, dev=mtdblock0, iso_blknum=64, block=128 [ 157.919207][ T31] audit: type=1400 audit(1787213418.204:534): avc: denied { mounton } for pid=6557 comm="syz.0.213" path="/43/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 157.975279][ T31] audit: type=1400 audit(1787213418.244:535): avc: denied { ioctl } for pid=6557 comm="syz.0.213" path="socket:[13571]" dev="sockfs" ino=13571 ioctlcmd=0xae92 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.100913][ T6560] dlm: non-version read from control device 36 [ 158.147273][ T5690] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.307963][ T5690] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 158.325813][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.337909][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.358203][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.999595][ T31] audit: type=1400 audit(1787213419.304:536): avc: denied { read } for pid=6566 comm="syz.2.216" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 159.031966][ T31] audit: type=1400 audit(1787213419.304:537): avc: denied { open } for pid=6566 comm="syz.2.216" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 159.147116][ T5712] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.197091][ T5704] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 159.307796][ T5712] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 159.340173][ T5712] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 159.348638][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 159.354423][ T5712] usb 2-1: config 0 has no interface number 0 [ 159.365142][ T5704] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 159.394777][ T5712] usb 2-1: config 0 interface 50 altsetting 77 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 159.420645][ T5704] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.439430][ T5704] usb 3-1: config 0 has no interface number 0 [ 159.464335][ T5712] usb 2-1: config 0 interface 50 has no altsetting 0 [ 159.483797][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.499677][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.516669][ T5704] usb 3-1: Product: syz [ 159.523292][ T5712] usb 2-1: Product: syz [ 159.535623][ T5704] usb 3-1: Manufacturer: syz [ 159.553390][ T5712] usb 2-1: Manufacturer: syz [ 159.569271][ T5704] usb 3-1: SerialNumber: syz [ 159.582526][ T5712] usb 2-1: SerialNumber: syz [ 159.602972][ T5704] usb 3-1: config 0 descriptor?? [ 159.615779][ T5712] usb 2-1: config 0 descriptor?? [ 159.642282][ T5704] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 159.697815][ T5704] usb 3-1: selecting invalid altsetting 1 [ 159.717789][ T5704] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 159.767367][ T5690] usb 1-1: config 0 descriptor?? [ 160.097050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.477049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 160.607051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 160.777048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 161.077047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 162.175704][ T5704] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 162.269959][ T5704] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 162.286771][ T5704] usb 3-1: media controller created [ 162.310827][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.344970][ T5690] usbhid 1-1:0.0: can't add hid device: -71 [ 162.369077][ T31] audit: type=1400 audit(1787213428.749:538): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 162.399738][ T5690] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 162.440201][ T5690] usb 1-1: USB disconnect, device number 6 [ 162.602852][ T6579] smpboot: CPU 1 is now offline [ 163.318815][ T5704] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 163.379443][ T5704] zl10353_read_register: readreg error (reg=127, ret==-71) [ 163.426937][ T5704] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 163.805167][ T5704] usb 3-1: USB disconnect, device number 9 [ 163.867960][ T31] audit: type=1400 audit(1787213430.239:539): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 163.894140][ T5712] usb 2-1: USB disconnect, device number 4 [ 164.407206][ T5690] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.581203][ T5690] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.364686][ T5690] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 165.549113][ T5690] usb 1-1: config 4 has an invalid interface number: 138 but max is 0 [ 165.597331][ T5690] usb 1-1: config 4 has no interface number 0 [ 165.661705][ T5690] usb 1-1: config 4 interface 138 has no altsetting 0 [ 165.715503][ T5690] usb 1-1: string descriptor 0 read error: -22 [ 166.158598][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.372085][ T5690] usb 1-1: can't set config #4, error -71 [ 168.170613][ T5690] usb 1-1: USB disconnect, device number 7 [ 168.208800][ T5697] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.423203][ T5697] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 169.191373][ T5697] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 169.240081][ T5697] usb 3-1: can't read configurations, error -71 [ 170.711518][ T6631] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 170.826079][ T31] audit: type=1326 audit(1787213437.199:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 170.984322][ T31] audit: type=1326 audit(1787213437.199:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 171.021229][ T6640] FAULT_INJECTION: forcing a failure. [ 171.021229][ T6640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.086014][ T31] audit: type=1326 audit(1787213437.239:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 171.121557][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.0.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.121576][ T6640] Tainted: [L]=SOFTLOCKUP [ 171.121580][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 171.121586][ T6640] Call Trace: [ 171.121590][ T6640] [ 171.121594][ T6640] dump_stack_lvl+0x100/0x190 [ 171.121614][ T6640] should_fail_ex.cold+0x5/0xa [ 171.121629][ T6640] _copy_from_user+0x2e/0xd0 [ 171.121641][ T6640] kstrtouint_from_user+0xd6/0x1d0 [ 171.121657][ T6640] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 171.121671][ T6640] ? __lock_acquire+0x4c5/0x1ec0 [ 171.121688][ T6640] ? lock_acquire+0x1b9/0x370 [ 171.121705][ T6640] proc_fail_nth_write+0x83/0x220 [ 171.121721][ T6640] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.121739][ T6640] vfs_write+0x2aa/0x1050 [ 171.121752][ T6640] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.121767][ T6640] ? __pfx_vfs_write+0x10/0x10 [ 171.121778][ T6640] ? find_held_lock+0x2b/0x80 [ 171.121790][ T6640] ? __fget_files+0x215/0x3d0 [ 171.121807][ T6640] ? __fget_files+0x21f/0x3d0 [ 171.121825][ T6640] ksys_write+0x12a/0x250 [ 171.121836][ T6640] ? __pfx_ksys_write+0x10/0x10 [ 171.121852][ T6640] do_syscall_64+0x123/0x790 [ 171.121871][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.121882][ T6640] RIP: 0033:0x7f008175e90e [ 171.121891][ T6640] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.121907][ T6640] RSP: 002b:00007f0082656fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.121919][ T6640] RAX: ffffffffffffffda RBX: 00007f00826576c0 RCX: 00007f008175e90e [ 171.121925][ T6640] RDX: 0000000000000001 RSI: 00007f00826570a0 RDI: 0000000000000004 [ 171.121931][ T6640] RBP: 00007f0082657090 R08: 0000000000000000 R09: 0000000000000000 [ 171.121937][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.121942][ T6640] R13: 00007f0081a26038 R14: 00007f0081a25fa0 R15: 00007ffe6cc66188 [ 171.121956][ T6640] [ 171.550631][ T31] audit: type=1326 audit(1787213437.239:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 171.609819][ T31] audit: type=1326 audit(1787213437.279:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 171.638285][ T31] audit: type=1326 audit(1787213437.279:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 171.670091][ T31] audit: type=1326 audit(1787213437.279:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 171.714203][ T6646] netlink: 'syz.2.238': attribute type 2 has an invalid length. [ 171.738095][ T31] audit: type=1326 audit(1787213437.279:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 171.779217][ T31] audit: type=1326 audit(1787213437.279:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 171.836830][ T31] audit: type=1326 audit(1787213437.279:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.231" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f4cdd39e0d9 code=0x7ffc0000 [ 174.742209][ T6673] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.249'. [ 175.121350][ T6676] tipc: Enabled bearer , priority 0 [ 175.301227][ T6677] syzkaller0: entered promiscuous mode [ 175.369348][ T6677] syzkaller0: entered allmulticast mode [ 175.417775][ T6677] tipc: Resetting bearer [ 175.505860][ T6675] tipc: Resetting bearer [ 176.536551][ T31] kauditd_printk_skb: 123 callbacks suppressed [ 176.536562][ T31] audit: type=1400 audit(1787213442.909:673): avc: denied { write } for pid=6681 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.668481][ T31] audit: type=1400 audit(1787213443.049:674): avc: denied { ioctl } for pid=6703 comm="syz.4.256" path="socket:[14673]" dev="sockfs" ino=14673 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.706645][ T6705] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6705 comm=syz.4.256 [ 176.764755][ T6705] capability: warning: `syz.4.256' uses deprecated v2 capabilities in a way that may be insecure [ 176.811648][ T6705] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6705 comm=syz.4.256 [ 176.882977][ T31] audit: type=1400 audit(1787213443.259:675): avc: denied { ioctl } for pid=6706 comm="syz.0.258" path="mnt:[4026532786]" dev="nsfs" ino=4026532786 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 177.016811][ T6699] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.068124][ T6714] futex_wake_op: syz.4.259 tries to shift op by -1; fix this program [ 177.078380][ T6714] usb usb7: check_ctrlrecip: process 6714 (syz.4.259) requesting ep 01 but needs 81 [ 177.183597][ T6699] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 177.208161][ T6699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.222847][ T6699] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 177.268513][ T6699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.276729][ T6699] usb 2-1: Product: syz [ 177.282652][ T6699] usb 2-1: Manufacturer: syz [ 177.288044][ T6699] usb 2-1: SerialNumber: syz [ 177.638151][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 177.706730][ C0] usb 2-1: invalid arpc response id received: 11 [ 177.800840][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 177.811923][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 177.834549][ T9] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 177.843361][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.852049][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.864945][ T9] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 177.882110][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 177.902850][ T9] usb 3-1: config 0 has no interface number 0 [ 177.915671][ T6699] usb 2-1: failed to set cport flags for port 0 [ 177.923569][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 177.946187][ T6699] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 177.960875][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 177.980615][ T6699] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 178.003661][ T9] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.031649][ T6699] usb 2-1: USB disconnect, device number 5 [ 178.046674][ T9] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.078620][ T9] usb 3-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 178.095632][ T9] usb 3-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 178.122300][ T9] usb 3-1: config 0 interface 125 has no altsetting 0 [ 178.135022][ T9] usb 3-1: config 0 interface 125 has no altsetting 2 [ 178.152736][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.161902][ T9] usb 3-1: Product: syz [ 178.170947][ T9] usb 3-1: Manufacturer: syz [ 178.175707][ T9] usb 3-1: SerialNumber: syz [ 178.194956][ T9] usb 3-1: config 0 descriptor?? [ 178.213127][ T9] usb 3-1: selecting invalid altsetting 2 [ 178.619342][ T6718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.653067][ T6675] tipc: Disabling bearer [ 178.676606][ T10] tipc: Node number set to 3303522387 [ 178.714226][ T6718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.933529][ T6718] netlink: 164 bytes leftover after parsing attributes in process `syz.2.260'. [ 178.947375][ T31] audit: type=1400 audit(1787213445.329:676): avc: denied { node_bind } for pid=6725 comm="syz.3.262" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 178.979871][ T6718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.260'. [ 178.999899][ T6729] netlink: 'syz.0.264': attribute type 2 has an invalid length. [ 179.183859][ T31] audit: type=1400 audit(1787213445.559:677): avc: denied { read write } for pid=6727 comm="syz.0.264" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 179.256708][ T9] get_1284_register timeout [ 179.266658][ C0] usb 3-1: async_complete: urb error -104 [ 179.397976][ T31] audit: type=1400 audit(1787213445.629:678): avc: denied { open } for pid=6727 comm="syz.0.264" path="/54/file0/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 181.696284][ T10] usb 3-1: USB disconnect, device number 12 [ 182.032132][ T6763] futex_wake_op: syz.2.274 tries to shift op by -1; fix this program [ 182.041735][ T6763] usb usb7: check_ctrlrecip: process 6763 (syz.2.274) requesting ep 01 but needs 81 [ 182.223415][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'. [ 182.235148][ T31] audit: type=1400 audit(1787213448.599:679): avc: denied { create } for pid=6760 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 182.395307][ T6770] FAULT_INJECTION: forcing a failure. [ 182.395307][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 182.414208][ T31] audit: type=1400 audit(1787213448.599:680): avc: denied { write } for pid=6760 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 182.584015][ T6770] CPU: 0 UID: 0 PID: 6770 Comm: syz.0.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 182.584036][ T6770] Tainted: [L]=SOFTLOCKUP [ 182.584039][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.584045][ T6770] Call Trace: [ 182.584049][ T6770] [ 182.584054][ T6770] dump_stack_lvl+0x100/0x190 [ 182.584075][ T6770] should_fail_ex.cold+0x5/0xa [ 182.584090][ T6770] should_failslab+0xc2/0x120 [ 182.584107][ T6770] __kmalloc_cache_noprof+0x91/0x6b0 [ 182.584121][ T6770] ? nfnetlink_rcv_batch+0x780/0x2880 [ 182.584135][ T6770] nfnetlink_rcv_batch+0x780/0x2880 [ 182.584153][ T6770] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 182.584164][ T6770] ? find_held_lock+0x2b/0x80 [ 182.584184][ T6770] ? avc_has_perm_noaudit+0x145/0x3b0 [ 182.584224][ T6770] ? __nla_parse+0x40/0x60 [ 182.584242][ T6770] nfnetlink_rcv+0x3bd/0x440 [ 182.584252][ T6770] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 182.584266][ T6770] netlink_unicast+0x585/0x850 [ 182.584283][ T6770] ? __pfx_netlink_unicast+0x10/0x10 [ 182.584301][ T6770] netlink_sendmsg+0x8b0/0xda0 [ 182.584318][ T6770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.584334][ T6770] ? selinux_socket_sendmsg+0x198/0x2f0 [ 182.584353][ T6770] ____sys_sendmsg+0xa4d/0xbe0 [ 182.584366][ T6770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.584381][ T6770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.584400][ T6770] ___sys_sendmsg+0x190/0x1e0 [ 182.584414][ T6770] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.584428][ T6770] ? get_pid_task+0x106/0x250 [ 182.584449][ T6770] ? find_held_lock+0x2b/0x80 [ 182.584469][ T6770] __sys_sendmsg+0x160/0x210 [ 182.584487][ T6770] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.584510][ T6770] do_syscall_64+0x123/0x790 [ 182.584528][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.584539][ T6770] RIP: 0033:0x7f008179e0d9 [ 182.584548][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.584559][ T6770] RSP: 002b:00007f0082636028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.584570][ T6770] RAX: ffffffffffffffda RBX: 00007f0081a26090 RCX: 00007f008179e0d9 [ 182.584577][ T6770] RDX: 0000000024000840 RSI: 0000200000000000 RDI: 0000000000000003 [ 182.584583][ T6770] RBP: 00007f0082636090 R08: 0000000000000000 R09: 0000000000000000 [ 182.584589][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.584595][ T6770] R13: 00007f0081a26128 R14: 00007f0081a26090 R15: 00007ffe6cc66188 [ 182.584609][ T6770] [ 184.026167][ T5697] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.197734][ T5697] usb 4-1: Using ep0 maxpacket: 16 [ 184.223806][ T5697] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 184.270799][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.303666][ T5697] usb 4-1: Product: syz [ 184.321461][ T5697] usb 4-1: Manufacturer: syz [ 184.353933][ T5697] usb 4-1: SerialNumber: syz [ 184.389511][ T5697] usb 4-1: config 0 descriptor?? [ 184.417321][ T5697] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 184.543750][ T6784] macvtap1: entered promiscuous mode [ 184.703245][ T6784] dummy0: entered promiscuous mode [ 184.858620][ T5697] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 184.892200][ T5697] visor 4-1:0.0: probe with driver visor failed with error -71 [ 184.914559][ T6784] macvtap1: entered allmulticast mode [ 184.932105][ T5697] usb 4-1: USB disconnect, device number 8 [ 184.997274][ T6784] dummy0: entered allmulticast mode [ 185.107231][ T31] audit: type=1400 audit(1787213451.479:681): avc: denied { write } for pid=6815 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 186.215780][ T6829] usb usb7: check_ctrlrecip: process 6829 (syz.2.291) requesting ep 01 but needs 81 [ 186.346885][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 187.023554][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 187.069612][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 187.119326][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 187.843723][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.943710][ T31] audit: type=1400 audit(1787213454.319:682): avc: denied { connect } for pid=6840 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 187.971693][ T6828] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.060590][ T31] audit: type=1400 audit(1787213454.349:683): avc: denied { read } for pid=6840 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.080238][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.242870][ T31] audit: type=1400 audit(1787213454.409:684): avc: denied { write } for pid=6848 comm="syz.1.298" name="subsystems" dev="configfs" ino=3536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.504009][ T31] audit: type=1400 audit(1787213454.469:685): avc: denied { write } for pid=6848 comm="syz.1.298" name="attr_allow_any_host" dev="configfs" ino=15241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 188.680749][ T31] audit: type=1400 audit(1787213454.469:686): avc: denied { open } for pid=6848 comm="syz.1.298" path="/64/config/nvmet/subsystems/testsubsys/attr_allow_any_host" dev="configfs" ino=15241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 189.094016][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 189.217208][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 189.320683][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.346447][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 189.398570][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.423506][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 189.434701][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.301'. [ 189.467941][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.484591][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 189.513712][ T9] usb 2-1: Product: syz [ 189.531622][ T9] usb 2-1: Manufacturer: syz [ 189.544124][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 189.564226][ T9] usb 2-1: SerialNumber: syz [ 189.575512][ T10] usb 4-1: Product: syz [ 189.590002][ T9] usb 2-1: config 0 descriptor?? [ 189.598014][ T10] usb 4-1: Manufacturer: syz [ 189.617677][ T9] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 189.736712][ T9] usb 1-1: USB disconnect, device number 8 [ 189.882940][ T31] audit: type=1400 audit(1787213456.259:687): avc: denied { create } for pid=6895 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 190.008499][ T31] audit: type=1400 audit(1787213456.299:688): avc: denied { setopt } for pid=6895 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 190.103069][ T31] audit: type=1400 audit(1787213456.319:689): avc: denied { bind } for pid=6870 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.130662][ T6898] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.188052][ T31] audit: type=1400 audit(1787213456.479:690): avc: denied { create } for pid=6901 comm="syz.0.303" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.218201][ T6902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.246899][ T31] audit: type=1400 audit(1787213456.509:691): avc: denied { write } for pid=6901 comm="syz.0.303" name="file0" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 190.710837][ T5784] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 190.809409][ T6909] netlink: 'syz.2.305': attribute type 4 has an invalid length. [ 190.868086][ T5784] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 191.691501][ T5784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 191.723117][ T5784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.756578][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.787852][ T10] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 191.803675][ T5784] usb 1-1: config 0 descriptor?? [ 191.813465][ T5697] usb 2-1: USB disconnect, device number 6 [ 191.831141][ T6907] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.215081][ T6881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.350750][ T10] usb 4-1: USB disconnect, device number 9 [ 192.520137][ T5784] usbhid 1-1:0.0: can't add hid device: -71 [ 192.656259][ T5784] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 192.813299][ T5784] usb 1-1: USB disconnect, device number 9 [ 192.939421][ T6929] program syz.1.313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.981550][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 192.981560][ T31] audit: type=1400 audit(1787213459.359:700): avc: denied { setopt } for pid=6924 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.890611][ T6934] usb usb7: check_ctrlrecip: process 6934 (syz.4.314) requesting ep 01 but needs 81 [ 194.046312][ T6939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.097334][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.266218][ T6947] FAULT_INJECTION: forcing a failure. [ 194.266218][ T6947] name failslab, interval 1, probability 0, space 0, times 0 [ 194.284030][ T6941] syz.3.317 (6941): /proc/6940/oom_adj is deprecated, please use /proc/6940/oom_score_adj instead. [ 194.451601][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.4.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.451621][ T6947] Tainted: [L]=SOFTLOCKUP [ 194.451624][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 194.451630][ T6947] Call Trace: [ 194.451634][ T6947] [ 194.451640][ T6947] dump_stack_lvl+0x100/0x190 [ 194.451659][ T6947] should_fail_ex.cold+0x5/0xa [ 194.451674][ T6947] should_failslab+0xc2/0x120 [ 194.451691][ T6947] __kmalloc_cache_noprof+0x91/0x6b0 [ 194.451704][ T6947] ? percpu_ref_init+0xec/0x3f0 [ 194.451721][ T6947] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 194.451738][ T6947] percpu_ref_init+0xec/0x3f0 [ 194.451755][ T6947] io_uring_setup.cold+0x2be/0x1cae [ 194.451774][ T6947] ? __pfx_io_uring_setup+0x10/0x10 [ 194.451787][ T6947] ? find_held_lock+0x2b/0x80 [ 194.451799][ T6947] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 194.451813][ T6947] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 194.451834][ T6947] ? ksys_write+0x1ac/0x250 [ 194.451847][ T6947] ? __pfx_ksys_write+0x10/0x10 [ 194.451861][ T6947] __x64_sys_io_uring_setup+0xc2/0x170 [ 194.451876][ T6947] do_syscall_64+0x123/0x790 [ 194.451893][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.451905][ T6947] RIP: 0033:0x7f4cdd39e0d9 [ 194.451914][ T6947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.451925][ T6947] RSP: 002b:00007f4cde31fee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 194.451936][ T6947] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f4cdd39e0d9 [ 194.451943][ T6947] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000006d1 [ 194.451949][ T6947] RBP: 0000200000000a80 R08: 00002000000003c0 R09: 0000000000000000 [ 194.451955][ T6947] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 194.451961][ T6947] R13: 0000200000000b10 R14: 00007f4cde31ffd8 R15: 0000000000000000 [ 194.451974][ T6947] [ 194.690743][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.700907][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.712026][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 194.723720][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.731800][ T10] usb 2-1: Product: syz [ 194.735999][ T10] usb 2-1: Manufacturer: syz [ 194.740629][ T10] usb 2-1: SerialNumber: syz [ 194.749577][ T10] cdc_mbim 2-1:1.0: skipping garbage [ 194.761500][ T5784] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 195.011424][ T6955] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 195.020388][ T6955] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 195.047421][ T5784] usb 1-1: Using ep0 maxpacket: 16 [ 195.056561][ T5784] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 195.104864][ T5784] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.190507][ T6932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.221830][ T5784] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.265895][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.308731][ T5784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.416359][ T31] audit: type=1400 audit(1787213461.699:701): avc: denied { write } for pid=6960 comm="syz.3.322" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 195.447679][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.230093][ T6964] usb usb7: check_ctrlrecip: process 6964 (syz.4.321) requesting ep 01 but needs 81 [ 196.269899][ T5784] usb 1-1: config 0 descriptor?? [ 196.392912][ T31] audit: type=1400 audit(1787213461.699:702): avc: denied { open } for pid=6960 comm="syz.3.322" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 196.562512][ T31] audit: type=1400 audit(1787213462.939:703): avc: denied { ioctl } for pid=6960 comm="syz.3.322" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 196.648265][ T6971] futex_wake_op: syz.2.323 tries to shift op by -1; fix this program [ 196.732681][ T5784] cypress 0003:04B4:BCA1.0006: item 0 1 0 8 parsing failed [ 196.747249][ T10] cdc_mbim 2-1:1.0: bind() failure [ 196.769278][ T10] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 196.791673][ T5784] cypress 0003:04B4:BCA1.0006: parse failed [ 196.847958][ T10] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 196.860397][ T5784] cypress 0003:04B4:BCA1.0006: probe with driver cypress failed with error -22 [ 196.892171][ T6971] usb usb7: check_ctrlrecip: process 6971 (syz.2.323) requesting ep 01 but needs 81 [ 196.911396][ T10] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 197.719246][ T6978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 197.754144][ T10] usb 2-1: USB disconnect, device number 7 [ 198.613869][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 198.619996][ T4916] Bluetooth: hci0: command 0x0406 tx timeout [ 198.626008][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 198.632094][ T4916] Bluetooth: hci4: command 0x0406 tx timeout [ 198.638478][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 198.765032][ T5690] usb 1-1: USB disconnect, device number 10 [ 198.881315][ T31] audit: type=1400 audit(1787213465.259:704): avc: denied { create } for pid=6975 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 199.667210][ T7001] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 199.676162][ T7001] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 199.994048][ T7007] syzkaller0: entered promiscuous mode [ 200.052297][ T7007] syzkaller0: entered allmulticast mode [ 200.203408][ T31] audit: type=1400 audit(1787213466.579:705): avc: denied { create } for pid=7006 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.414838][ T31] audit: type=1400 audit(1787213466.619:706): avc: denied { connect } for pid=7006 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.437716][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.619286][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.644483][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.40 [ 201.069555][ T10] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.912584][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 201.925947][ T31] audit: type=1400 audit(1787213468.299:707): avc: denied { mount } for pid=7026 comm="syz.4.342" name="/" dev="ramfs" ino=16098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 201.980031][ T10] usb 2-1: string descriptor 0 read error: -22 [ 201.993381][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.083148][ T7032] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 202.092150][ T7032] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 203.926441][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 203.966392][ T31] audit: type=1400 audit(1787213470.339:708): avc: denied { bind } for pid=7038 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.990002][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 204.050245][ T10] usb 2-1: USB disconnect, device number 8 [ 204.115676][ T31] audit: type=1400 audit(1787213470.339:709): avc: denied { name_bind } for pid=7038 comm="syz.2.346" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 204.272854][ T31] audit: type=1400 audit(1787213470.339:710): avc: denied { node_bind } for pid=7038 comm="syz.2.346" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 204.393316][ T7046] FAULT_INJECTION: forcing a failure. [ 204.393316][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 204.429243][ T31] audit: type=1400 audit(1787213470.419:711): avc: denied { bind } for pid=7038 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.506501][ T7046] CPU: 0 UID: 0 PID: 7046 Comm: syz.4.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.506521][ T7046] Tainted: [L]=SOFTLOCKUP [ 204.506525][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 204.506531][ T7046] Call Trace: [ 204.506535][ T7046] [ 204.506539][ T7046] dump_stack_lvl+0x100/0x190 [ 204.506558][ T7046] should_fail_ex.cold+0x5/0xa [ 204.506573][ T7046] should_failslab+0xc2/0x120 [ 204.506590][ T7046] __kmalloc_cache_noprof+0x91/0x6b0 [ 204.506603][ T7046] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 204.506620][ T7046] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 204.506634][ T7046] ? rcu_is_watching+0x13/0xc0 [ 204.506646][ T7046] ? trace_contention_end+0x126/0x160 [ 204.506663][ T7046] ? __mutex_lock+0x26c/0x1bc0 [ 204.506679][ T7046] ? snd_pcm_oss_read+0x3b2/0x730 [ 204.506692][ T7046] ? __pfx__kstrtoull+0x10/0x10 [ 204.506707][ T7046] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 204.506721][ T7046] ? __pfx___mutex_lock+0x10/0x10 [ 204.506741][ T7046] ? import_ubuf+0x1b6/0x220 [ 204.506754][ T7046] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 204.506767][ T7046] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 204.506779][ T7046] snd_pcm_oss_read+0x3d4/0x730 [ 204.506794][ T7046] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 204.506807][ T7046] vfs_readv+0x5d8/0x8d0 [ 204.506818][ T7046] ? get_pid_task+0x106/0x250 [ 204.506833][ T7046] ? __pfx_vfs_readv+0x10/0x10 [ 204.506845][ T7046] ? rcu_read_lock_any_held+0x6a/0x90 [ 204.506865][ T7046] ? __fget_files+0x21f/0x3d0 [ 204.506883][ T7046] ? do_readv+0x13e/0x340 [ 204.506892][ T7046] do_readv+0x13e/0x340 [ 204.506903][ T7046] ? __pfx_do_readv+0x10/0x10 [ 204.506918][ T7046] do_syscall_64+0x123/0x790 [ 204.506935][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.506946][ T7046] RIP: 0033:0x7f4cdd39e0d9 [ 204.506956][ T7046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.506966][ T7046] RSP: 002b:00007f4cde320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 204.506979][ T7046] RAX: ffffffffffffffda RBX: 00007f4cdd625fa0 RCX: 00007f4cdd39e0d9 [ 204.506988][ T7046] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 204.506994][ T7046] RBP: 00007f4cde320090 R08: 0000000000000000 R09: 0000000000000000 [ 204.507000][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.507006][ T7046] R13: 00007f4cdd626038 R14: 00007f4cdd625fa0 R15: 00007fffce0df268 [ 204.507028][ T7046] [ 205.047270][ T31] audit: type=1400 audit(1787213470.549:712): avc: denied { read write } for pid=7038 comm="syz.2.346" name="video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 205.462376][ T31] audit: type=1400 audit(1787213470.549:713): avc: denied { open } for pid=7038 comm="syz.2.346" path="/dev/video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 205.600190][ T31] audit: type=1400 audit(1787213470.549:714): avc: denied { ioctl } for pid=7038 comm="syz.2.346" path="/dev/video8" dev="devtmpfs" ino=952 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 205.779944][ T31] audit: type=1400 audit(1787213471.889:715): avc: denied { read } for pid=7051 comm="syz.0.347" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.987115][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 205.995004][ T31] audit: type=1400 audit(1787213471.889:716): avc: denied { open } for pid=7051 comm="syz.0.347" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 206.167160][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 206.836871][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 207.202825][ T31] audit: type=1400 audit(1787213471.909:717): avc: denied { map } for pid=7051 comm="syz.0.347" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 207.245517][ T9] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 207.281302][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 207.314574][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.427601][ T9] usb 2-1: config 0 descriptor?? [ 207.519052][ T7076] binder: BINDER_SET_CONTEXT_MGR already set [ 207.770449][ T7076] binder: 7072:7076 ioctl 4018620d 200000004a80 returned -16 [ 208.960662][ T9] hid_parser_main: 111 callbacks suppressed [ 208.960679][ T9] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 209.001022][ T7096] comedi comedi1: rti802: I/O base address not correctly aligned [ 209.040059][ T9] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 209.067871][ T9] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 209.871721][ T7097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.880149][ T9] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 209.906211][ T9] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 209.919052][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 209.919062][ T31] audit: type=1400 audit(1787213476.299:722): avc: denied { write } for pid=7098 comm="syz.4.366" name="cluster" dev="configfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.982756][ T9] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 210.223130][ T31] audit: type=1400 audit(1787213476.299:723): avc: denied { create } for pid=7098 comm="syz.4.366" name="c1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 210.464865][ T31] audit: type=1400 audit(1787213476.379:724): avc: denied { write } for pid=7098 comm="syz.4.366" name="heartbeat" dev="configfs" ino=16393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.524581][ T9] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -110 [ 210.645302][ T9] usb 2-1: USB disconnect, device number 9 [ 211.877224][ T7128] bridge0: port 3(syz_tun) entered blocking state [ 211.883734][ T7128] bridge0: port 3(syz_tun) entered disabled state [ 211.900603][ T7128] syz_tun: entered allmulticast mode [ 211.906734][ T7128] syz_tun: entered promiscuous mode [ 211.912337][ T7128] bridge0: port 3(syz_tun) entered blocking state [ 211.919807][ T7128] bridge0: port 3(syz_tun) entered forwarding state [ 213.338323][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 213.517944][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.565989][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.706369][ T10] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.875227][ T31] audit: type=1400 audit(1787213480.249:725): avc: denied { ioctl } for pid=7138 comm="syz.4.378" path="socket:[16600]" dev="sockfs" ino=16600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 213.930114][ T10] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.031998][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 214.098234][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.126039][ T10] usb 1-1: Product: syz [ 214.147971][ T10] usb 1-1: Manufacturer: syz [ 214.183094][ T10] usb 1-1: SerialNumber: syz [ 214.484784][ T31] audit: type=1400 audit(1787213480.859:726): avc: denied { create } for pid=7144 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.570053][ T31] audit: type=1400 audit(1787213480.899:727): avc: denied { connect } for pid=7144 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.635789][ T31] audit: type=1400 audit(1787213480.929:728): avc: denied { getopt } for pid=7144 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.679544][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 214.689862][ T7147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7147 comm=syz.1.377 [ 214.705965][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 214.721844][ T31] audit: type=1400 audit(1787213481.049:729): avc: denied { append } for pid=7146 comm="syz.1.377" name="video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 214.751376][ T10] usb 1-1: USB disconnect, device number 11 [ 215.094405][ T5784] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.348481][ T5784] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.374055][ T5784] usb 2-1: language id specifier not provided by device, defaulting to English [ 215.402896][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.434279][ T5784] usb 2-1: Product: syz [ 215.451391][ T5784] usb 2-1: Manufacturer: 䒝큛贛棫㟗᱙닾ꐛ钢턍ዀ竤ꑍ㱞㟚鴶⮼얐㐯䒎ꍭ北닫柪䏵G돇嫡柼猕䮅퀎㏰⡥췩畉≠澕䵮క棋֣莜涻！Ὃ⮟ꩪ꨹땼ᔯꀞ輯該玏㌑좗쒁ᯄፑᦜ箏ⶂ
鏅曼艛㵾끳ڈ䲎ឨ秦Ӱ西ⲩ酟屇쁧戈腜樥 [ 215.617517][ T5784] usb 2-1: SerialNumber: syz [ 215.942102][ T5784] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 215.980245][ T5784] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 216.086502][ T5784] usb 2-1: USB disconnect, device number 10 [ 216.485061][ T7174] FAULT_INJECTION: forcing a failure. [ 216.485061][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 217.346675][ T7169] ipvlan0: entered promiscuous mode [ 217.354772][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.3.389 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.354791][ T7174] Tainted: [L]=SOFTLOCKUP [ 217.354795][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 217.354801][ T7174] Call Trace: [ 217.354805][ T7174] [ 217.354810][ T7174] dump_stack_lvl+0x100/0x190 [ 217.354829][ T7174] should_fail_ex.cold+0x5/0xa [ 217.354843][ T7174] should_failslab+0xc2/0x120 [ 217.354860][ T7174] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 217.354876][ T7174] ? __alloc_skb+0x5b7/0x710 [ 217.354892][ T7174] ? __alloc_skb+0x140/0x710 [ 217.354909][ T7174] __alloc_skb+0x140/0x710 [ 217.354924][ T7174] ? __alloc_skb+0x5b7/0x710 [ 217.354939][ T7174] ? __pfx___alloc_skb+0x10/0x10 [ 217.354964][ T7174] netlink_ack+0x117/0xb80 [ 217.354979][ T7174] ? __lock_acquire+0x4c5/0x1ec0 [ 217.354998][ T7174] rdma_nl_rcv_skb.constprop.0.isra.0+0x32b/0x410 [ 217.355017][ T7174] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 217.355038][ T7174] ? netlink_deliver_tap+0x1ae/0xcc0 [ 217.355054][ T7174] netlink_unicast+0x585/0x850 [ 217.355070][ T7174] ? __pfx_netlink_unicast+0x10/0x10 [ 217.355088][ T7174] netlink_sendmsg+0x8b0/0xda0 [ 217.355104][ T7174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.355120][ T7174] ? selinux_socket_sendmsg+0x198/0x2f0 [ 217.355140][ T7174] ____sys_sendmsg+0xa4d/0xbe0 [ 217.355152][ T7174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.355167][ T7174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.355185][ T7174] ___sys_sendmsg+0x190/0x1e0 [ 217.355200][ T7174] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.355213][ T7174] ? get_pid_task+0x106/0x250 [ 217.355229][ T7174] ? find_held_lock+0x2b/0x80 [ 217.355248][ T7174] __sys_sendmsg+0x160/0x210 [ 217.355265][ T7174] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.355289][ T7174] do_syscall_64+0x123/0x790 [ 217.355305][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.355317][ T7174] RIP: 0033:0x7f8c48d9e0d9 [ 217.355327][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.355337][ T7174] RSP: 002b:00007f8c49cef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.355348][ T7174] RAX: ffffffffffffffda RBX: 00007f8c49025fa0 RCX: 00007f8c48d9e0d9 [ 217.355355][ T7174] RDX: 0000000020008040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 217.355361][ T7174] RBP: 00007f8c49cef090 R08: 0000000000000000 R09: 0000000000000000 [ 217.355369][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.355375][ T7174] R13: 00007f8c49026038 R14: 00007f8c49025fa0 R15: 00007ffdfe811c68 [ 217.355389][ T7174] [ 217.985281][ T7190] vlan2: entered promiscuous mode [ 218.029286][ T7190] hsr0: entered promiscuous mode [ 218.088226][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 218.117674][ T7190] vlan2: entered allmulticast mode [ 218.158303][ T31] audit: type=1400 audit(1787213484.539:730): avc: denied { bind } for pid=7194 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.243761][ T7190] hsr0: entered allmulticast mode [ 218.284956][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 218.302119][ T7190] hsr_slave_0: entered allmulticast mode [ 218.923346][ T7204] overlayfs: overlapping lowerdir path [ 218.970790][ T7190] hsr_slave_1: entered allmulticast mode [ 219.080703][ T7192] netlink: 4292 bytes leftover after parsing attributes in process `syz.1.391'. [ 219.253595][ T7197] vlan2: entered promiscuous mode [ 219.299973][ T7197] syz_tun: entered promiscuous mode [ 219.358427][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 219.461457][ T7201] hsr_slave_0: left promiscuous mode [ 219.499785][ T7201] hsr_slave_1: left promiscuous mode [ 219.703252][ T31] audit: type=1400 audit(1787213486.079:731): avc: denied { mount } for pid=7182 comm="syz.1.391" name="/" dev="autofs" ino=16935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 221.556871][ T31] audit: type=1400 audit(1787213487.929:732): avc: denied { write } for pid=7212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.257182][ T7247] futex_wake_op: syz.3.404 tries to shift op by -1; fix this program [ 222.677631][ T7246] usb usb7: check_ctrlrecip: process 7246 (syz.3.404) requesting ep 01 but needs 81 [ 222.955557][ T31] audit: type=1400 audit(1787213489.289:733): avc: denied { write } for pid=7240 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.905324][ T7251] FAULT_INJECTION: forcing a failure. [ 223.905324][ T7251] name failslab, interval 1, probability 0, space 0, times 0 [ 223.937700][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 223.983029][ T31] audit: type=1400 audit(1787213490.359:734): avc: denied { bind } for pid=7253 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.114622][ T7251] CPU: 0 UID: 0 PID: 7251 Comm: syz.0.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.114642][ T7251] Tainted: [L]=SOFTLOCKUP [ 224.114646][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 224.114652][ T7251] Call Trace: [ 224.114656][ T7251] [ 224.114660][ T7251] dump_stack_lvl+0x100/0x190 [ 224.114679][ T7251] should_fail_ex.cold+0x5/0xa [ 224.114694][ T7251] should_failslab+0xc2/0x120 [ 224.114711][ T7251] __kmalloc_noprof+0xfc/0x820 [ 224.114727][ T7251] ? iovec_from_user+0x8d/0x140 [ 224.114742][ T7251] iovec_from_user+0x8d/0x140 [ 224.114761][ T7251] __import_iovec+0x81/0x640 [ 224.114775][ T7251] import_iovec+0x101/0x130 [ 224.114789][ T7251] vfs_readv+0x19e/0x8d0 [ 224.114804][ T7251] ? __pfx_vfs_readv+0x10/0x10 [ 224.114814][ T7251] ? __pfx_restore_sigcontext+0x10/0x10 [ 224.114842][ T7251] ? __fget_files+0x21f/0x3d0 [ 224.114860][ T7251] ? do_preadv+0x1ac/0x270 [ 224.114870][ T7251] do_preadv+0x1ac/0x270 [ 224.114882][ T7251] ? __pfx_do_preadv+0x10/0x10 [ 224.114897][ T7251] do_syscall_64+0x123/0x790 [ 224.114915][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.114926][ T7251] RIP: 0033:0x7f008179e0d9 [ 224.114936][ T7251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.114947][ T7251] RSP: 002b:00007f0082657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 224.114960][ T7251] RAX: ffffffffffffffda RBX: 00007f0081a25fa0 RCX: 00007f008179e0d9 [ 224.114970][ T7251] RDX: 0000000000000014 RSI: 0000200000001e80 RDI: 0000000000000003 [ 224.114976][ T7251] RBP: 00007f0082657090 R08: 0000000000000006 R09: 0000000000000000 [ 224.114982][ T7251] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 224.114988][ T7251] R13: 00007f0081a26038 R14: 00007f0081a25fa0 R15: 00007ffe6cc66188 [ 224.115001][ T7251] [ 224.348547][ T31] audit: type=1400 audit(1787213490.389:735): avc: denied { write } for pid=7253 comm="syz.3.406" path="socket:[17013]" dev="sockfs" ino=17013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.372191][ T31] audit: type=1400 audit(1787213490.699:736): avc: denied { getopt } for pid=7252 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.392345][ T31] audit: type=1400 audit(1787213490.699:737): avc: denied { read append } for pid=7252 comm="syz.2.397" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 224.415828][ T31] audit: type=1400 audit(1787213490.699:738): avc: denied { open } for pid=7252 comm="syz.2.397" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 224.440311][ T31] audit: type=1400 audit(1787213490.819:739): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 224.688855][ T7268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.698427][ T7254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.704518][ T7254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 224.743819][ T7268] bond1: (slave ip6erspan0): making interface the new active one [ 224.753184][ T7268] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 224.788138][ T7254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.795319][ T7254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.852985][ T7254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.859086][ T7254] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 224.893095][ T7254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.900235][ T7254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.916920][ T7254] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.924696][ T7254] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 225.085123][ T31] audit: type=1400 audit(1787213491.459:740): avc: denied { create } for pid=7275 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.136607][ T7276] Unsupported ieee802154 address type: 0 [ 225.147593][ T31] audit: type=1400 audit(1787213491.499:741): avc: denied { bind } for pid=7275 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.299098][ T31] audit: type=1400 audit(1787213491.679:742): avc: denied { write } for pid=7261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.767188][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 226.847109][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 226.927139][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 226.933375][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 227.007699][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 227.089811][ T31] audit: type=1400 audit(1787213492.589:743): avc: denied { mount } for pid=7279 comm="syz.0.413" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 228.991947][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 228.998046][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 229.010627][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 229.016919][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 229.039099][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 229.039110][ T31] audit: type=1400 audit(1787213495.419:750): avc: denied { ioctl } for pid=7284 comm="syz.1.414" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 229.090239][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 229.241123][ T31] audit: type=1400 audit(1787213495.609:751): avc: denied { name_bind } for pid=7329 comm="syz.0.426" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 229.327984][ T31] audit: type=1400 audit(1787213495.659:752): avc: denied { mount } for pid=7284 comm="syz.1.414" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 229.386096][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.425'. [ 229.418869][ T7335] Bluetooth: MGMT ver 1.23 [ 229.468602][ T7335] overlayfs: missing 'lowerdir' [ 229.517792][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.667082][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 229.673528][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 229.687936][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.697448][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.705634][ T9] usb 2-1: Product: syz [ 229.712162][ T9] usb 2-1: Manufacturer: syz [ 229.716948][ T9] usb 2-1: SerialNumber: syz [ 229.726608][ T9] usb 2-1: config 0 descriptor?? [ 229.945922][ T7286] geneve1: entered promiscuous mode [ 229.976044][ T9] usb 2-1: USB disconnect, device number 11 [ 230.910895][ T31] audit: type=1400 audit(1787213497.289:753): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 231.021161][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 232.145743][ T7328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.592854][ T31] audit: type=1400 audit(1787213498.969:754): avc: denied { associate } for pid=7376 comm="syz.3.435" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 232.660300][ T7382] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 232.853396][ T5690] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 233.227221][ T7391] futex_wake_op: syz.2.438 tries to shift op by -1; fix this program [ 233.609467][ T7390] usb usb7: check_ctrlrecip: process 7390 (syz.2.438) requesting ep 01 but needs 81 [ 233.709036][ T5690] usb 4-1: Using ep0 maxpacket: 16 [ 233.809240][ T5690] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 233.851704][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.624463][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.642519][ T7398] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 234.674256][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.694473][ T7398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.730063][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.764183][ T5690] usb 4-1: config 0 descriptor?? [ 235.632684][ T5690] usbhid 4-1:0.0: can't add hid device: -71 [ 235.660289][ T5690] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 235.694424][ T5690] usb 4-1: USB disconnect, device number 10 [ 236.794711][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 238.010643][ T7432] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 238.084107][ T31] audit: type=1400 audit(1787213504.459:755): avc: denied { append } for pid=7431 comm="syz.4.450" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.358418][ T31] audit: type=1400 audit(1787213504.729:756): avc: denied { kexec_image_load } for pid=7433 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 239.585044][ T7414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.609206][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 239.778601][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 239.897881][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.923785][ T9] usb 2-1: Product: syz [ 239.950127][ T9] usb 2-1: Manufacturer: syz [ 239.982962][ T9] usb 2-1: SerialNumber: syz [ 240.001845][ T31] audit: type=1400 audit(1787213506.379:757): avc: denied { bind } for pid=7446 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.042373][ T9] usb 2-1: config 0 descriptor?? [ 240.082392][ T9] gspca_main: spca508-2.14.0 probing 041e:4018 [ 240.866949][ T9] gspca_spca508: reg_read err -110 [ 240.946647][ T9] gspca_spca508: reg_read err -32 [ 240.985327][ T9] gspca_spca508: reg_read err -32 [ 241.019633][ T9] gspca_spca508: reg_read err -32 [ 241.064298][ T9] gspca_spca508: reg_read err -32 [ 241.627318][ T9] gspca_spca508: reg write: error -110 [ 242.324062][ T9] spca508 2-1:0.0: probe with driver spca508 failed with error -110 [ 242.357702][ T31] audit: type=1400 audit(1787213508.739:758): avc: denied { accept } for pid=7464 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.810117][ T31] audit: type=1400 audit(1787213509.189:759): avc: denied { write } for pid=7459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.716169][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 243.781885][ T9] usb 2-1: USB disconnect, device number 12 [ 243.913614][ T31] audit: type=1400 audit(1787213510.289:760): avc: denied { write } for pid=7503 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.296186][ T31] audit: type=1400 audit(1787213510.669:761): avc: denied { write } for pid=7519 comm="syz.2.460" name="usb_gadget" dev="configfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.431775][ T31] audit: type=1400 audit(1787213510.749:762): avc: denied { mount } for pid=7522 comm="syz.3.471" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 244.526859][ T31] audit: type=1400 audit(1787213510.759:763): avc: denied { write } for pid=7519 comm="syz.2.460" name="functions" dev="configfs" ino=18293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.613565][ T31] audit: type=1400 audit(1787213510.789:765): avc: denied { write } for pid=7519 comm="syz.2.460" name="configs" dev="configfs" ino=18294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 244.702598][ T31] audit: type=1400 audit(1787213510.779:764): avc: denied { relabelfrom } for pid=7522 comm="syz.3.471" name="" dev="pipefs" ino=18309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 244.741106][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 244.802735][ T31] audit: type=1400 audit(1787213511.149:766): avc: denied { write } for pid=7516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.852567][ T31] audit: type=1400 audit(1787213511.219:767): avc: denied { ioctl } for pid=7541 comm="syz.0.472" path="socket:[18336]" dev="sockfs" ino=18336 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 244.925615][ T31] audit: type=1400 audit(1787213511.269:768): avc: denied { write } for pid=7544 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.968905][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 245.013979][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.050782][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 245.120234][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 245.141369][ T9] usb 3-1: Product: syz [ 245.154895][ T9] usb 3-1: Manufacturer: syz [ 245.404166][ T9] usb 3-1: USB disconnect, device number 13 [ 245.738175][ T7563] 9p: Bad value for 'rfdno' [ 245.749741][ T31] audit: type=1400 audit(1787213512.129:769): avc: denied { bind } for pid=7561 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.774700][ T7500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.014068][ T5614] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 246.262176][ T7578] ALSA: mixer_oss: invalid OSS volume '' [ 246.351087][ T7578] ALSA: mixer_oss: invalid OSS volume '' [ 246.481622][ T7578] ALSA: mixer_oss: invalid OSS volume '' [ 246.566071][ T7587] exFAT-fs (nullb0): invalid boot record signature [ 246.607120][ T7587] exFAT-fs (nullb0): failed to read boot sector [ 246.618076][ T7578] ALSA: mixer_oss: invalid OSS volume '' [ 247.460632][ T7578] ALSA: mixer_oss: invalid OSS volume '' [ 247.474189][ T7587] exFAT-fs (nullb0): failed to recognize exfat type [ 247.595817][ T7578] ALSA: mixer_oss: invalid OSS volume '' [ 247.812173][ T7592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.220209][ T7604] FAULT_INJECTION: forcing a failure. [ 248.220209][ T7604] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 248.305551][ T7599] netlink: 'syz.3.487': attribute type 3 has an invalid length. [ 248.313886][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.0.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.313905][ T7604] Tainted: [L]=SOFTLOCKUP [ 248.313909][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 248.313916][ T7604] Call Trace: [ 248.313920][ T7604] [ 248.313925][ T7604] dump_stack_lvl+0x100/0x190 [ 248.313943][ T7604] should_fail_ex.cold+0x5/0xa [ 248.313956][ T7604] ? prepare_alloc_pages+0x16d/0x5f0 [ 248.313975][ T7604] should_fail_alloc_page+0xeb/0x140 [ 248.313993][ T7604] prepare_alloc_pages+0x1f0/0x5f0 [ 248.314012][ T7604] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 248.314028][ T7604] ? unwind_get_return_address+0x59/0xa0 [ 248.314041][ T7604] ? arch_stack_walk+0xa6/0xf0 [ 248.314063][ T7604] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 248.314081][ T7604] ? check_noncircular+0x97/0x160 [ 248.314096][ T7604] ? add_lock_to_list+0x9d/0x1d0 [ 248.314111][ T7604] ? check_prev_add+0x354/0xe60 [ 248.314125][ T7604] ? __css_rstat_updated+0x1ce/0x590 [ 248.314146][ T7604] ? __lock_acquire+0xe15/0x1ec0 [ 248.314160][ T7604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.314179][ T7604] ? policy_nodemask+0xed/0x4f0 [ 248.314200][ T7604] alloc_pages_mpol+0x1fb/0x540 [ 248.314218][ T7604] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 248.314235][ T7604] ? find_held_lock+0x2b/0x80 [ 248.314246][ T7604] ? __pud_alloc+0x4f6/0x690 [ 248.314256][ T7604] ? __pud_alloc+0x4f6/0x690 [ 248.314267][ T7604] alloc_pages_noprof+0x1a/0x160 [ 248.314279][ T7604] __pmd_alloc+0x3b/0x950 [ 248.314288][ T7604] ? __pud_alloc+0x4fb/0x690 [ 248.314299][ T7604] __handle_mm_fault+0xa9c/0x2a00 [ 248.314314][ T7604] ? mt_find+0x45e/0x8e0 [ 248.314332][ T7604] ? __pfx___handle_mm_fault+0x10/0x10 [ 248.314343][ T7604] ? __pfx_mt_find+0x10/0x10 [ 248.314369][ T7604] ? find_vma+0xbf/0x140 [ 248.314384][ T7604] ? __pfx_find_vma+0x10/0x10 [ 248.314400][ T7604] handle_mm_fault+0x37b/0xa30 [ 248.314416][ T7604] do_user_addr_fault+0x745/0x12f0 [ 248.314431][ T7604] exc_page_fault+0x6f/0xd0 [ 248.314446][ T7604] asm_exc_page_fault+0x26/0x30 [ 248.314457][ T7604] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 248.314470][ T7604] Code: c4 10 e9 94 af 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 248.314480][ T7604] RSP: 0018:ffffc900038bfd60 EFLAGS: 00050202 [ 248.314489][ T7604] RAX: 0000000000000001 RBX: 0000200000000040 RCX: 0000000000000004 [ 248.314495][ T7604] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc900038bfdc0 [ 248.314502][ T7604] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000717fb8 [ 248.314508][ T7604] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 248.314514][ T7604] R13: ffffc900038bfdc0 R14: 0000000000000004 R15: ffff88803711c000 [ 248.314527][ T7604] _copy_from_user+0x98/0xd0 [ 248.314540][ T7604] llc_ui_setsockopt+0x21f/0x590 [ 248.314553][ T7604] ? __pfx_llc_ui_setsockopt+0x10/0x10 [ 248.314565][ T7604] ? selinux_socket_setsockopt+0x6a/0x80 [ 248.314582][ T7604] ? __pfx_llc_ui_setsockopt+0x10/0x10 [ 248.314594][ T7604] do_sock_setsockopt+0xf3/0x1d0 [ 248.314608][ T7604] __sys_setsockopt+0x195/0x220 [ 248.314627][ T7604] __x64_sys_setsockopt+0xbd/0x160 [ 248.314642][ T7604] ? do_syscall_64+0xae/0x790 [ 248.314661][ T7604] ? lockdep_hardirqs_on+0x7d/0x110 [ 248.314676][ T7604] do_syscall_64+0x123/0x790 [ 248.314692][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.314702][ T7604] RIP: 0033:0x7f008179e0d9 [ 248.314711][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.314721][ T7604] RSP: 002b:00007f0082657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.314730][ T7604] RAX: ffffffffffffffda RBX: 00007f0081a25fa0 RCX: 00007f008179e0d9 [ 248.314737][ T7604] RDX: 0000000000000007 RSI: 000000000000010c RDI: 0000000000000004 [ 248.314742][ T7604] RBP: 00007f0082657090 R08: 0000000000000004 R09: 0000000000000000 [ 248.314748][ T7604] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 248.314755][ T7604] R13: 00007f0081a26038 R14: 00007f0081a25fa0 R15: 00007ffe6cc66188 [ 248.314768][ T7604] [ 249.627064][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 249.718007][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 249.718018][ T31] audit: type=1400 audit(1787213516.089:777): avc: denied { write } for pid=7610 comm="syz.1.489" name="nullb" dev="configfs" ino=3466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.790779][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 249.825744][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 249.842824][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 249.876849][ T31] audit: type=1400 audit(1787213516.239:778): avc: denied { read } for pid=7610 comm="syz.1.489" name="power" dev="configfs" ino=18705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 249.941809][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.952528][ T7617] exFAT-fs (nullb0): invalid boot record signature [ 249.965382][ T9] usb 1-1: Product: У [ 249.986739][ T9] usb 1-1: SerialNumber: H [ 249.998116][ T7617] exFAT-fs (nullb0): failed to read boot sector [ 250.035036][ T31] audit: type=1800 audit(1787213516.299:779): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.489" name="power" dev="configfs" ino=18705 res=0 errno=0 [ 250.092413][ T7617] exFAT-fs (nullb0): failed to recognize exfat type [ 251.572244][ T7607] vhci_hcd vhci_hcd.0: remove, state 4 [ 251.709276][ T7607] usb usb34: USB disconnect, device number 1 [ 252.315972][ T48] vhci_hcd vhci_hcd.0: stop threads [ 252.350962][ T48] vhci_hcd vhci_hcd.0: release socket [ 252.973969][ T7607] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 252.988123][ T48] vhci_hcd vhci_hcd.0: disconnect device [ 253.029494][ T48] vhci_hcd vhci_hcd.0: stop threads [ 253.048689][ T48] vhci_hcd vhci_hcd.0: release socket [ 253.074323][ T48] vhci_hcd vhci_hcd.0: disconnect device [ 253.142760][ T48] vhci_hcd vhci_hcd.0: stop threads [ 253.169106][ T7636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.499'. [ 253.189157][ T48] vhci_hcd vhci_hcd.0: release socket [ 253.215988][ T48] vhci_hcd vhci_hcd.0: disconnect device [ 253.230531][ T7607] vhci_hcd vhci_hcd.0: remove, state 4 [ 253.256814][ T48] ================================================================== [ 253.264900][ T48] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 253.273044][ T48] Read of size 1 at addr ffff88802964c918 by task kworker/u8:3/48 [ 253.280818][ T48] [ 253.283129][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.283148][ T48] Tainted: [L]=SOFTLOCKUP [ 253.283152][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 253.283160][ T48] Workqueue: usbip_event event_handler [ 253.283180][ T48] Call Trace: [ 253.283185][ T48] [ 253.283194][ T48] dump_stack_lvl+0x100/0x190 [ 253.283209][ T48] print_report+0x13d/0x4b0 [ 253.283234][ T48] ? __virt_addr_valid+0x239/0x430 [ 253.283250][ T48] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 253.283263][ T48] kasan_report+0xdf/0x1c0 [ 253.283283][ T48] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 253.283297][ T48] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 253.283309][ T48] __kasan_check_byte+0x36/0x50 [ 253.283325][ T48] lock_acquire+0x132/0x370 [ 253.283340][ T48] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 253.283353][ T48] ? _raw_spin_lock_irqsave+0x52/0x60 [ 253.283366][ T48] _raw_spin_lock_irqsave+0x3a/0x60 [ 253.283379][ T48] ? event_handler+0x21e/0x570 [ 253.283388][ T48] event_handler+0x21e/0x570 [ 253.283398][ T48] process_one_work+0xa23/0x1940 [ 253.283418][ T48] ? __pfx_process_one_work+0x10/0x10 [ 253.283433][ T48] ? __pfx_event_handler+0x10/0x10 [ 253.283443][ T48] worker_thread+0x5ef/0xe50 [ 253.283464][ T48] ? kthread+0x13a/0x450 [ 253.283477][ T48] ? __pfx_worker_thread+0x10/0x10 [ 253.283489][ T48] kthread+0x373/0x450 [ 253.283500][ T48] ? __pfx_kthread+0x10/0x10 [ 253.283512][ T48] ret_from_fork+0x730/0xd60 [ 253.283534][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 253.283549][ T48] ? __switch_to+0x800/0x10f0 [ 253.283561][ T48] ? __pfx_kthread+0x10/0x10 [ 253.283573][ T48] ret_from_fork_asm+0x1a/0x30 [ 253.283593][ T48] [ 253.283596][ T48] [ 253.456227][ T48] Allocated by task 1: [ 253.460297][ T48] kasan_save_stack+0x30/0x50 [ 253.464954][ T48] kasan_save_track+0x14/0x30 [ 253.469617][ T48] __kasan_kmalloc+0xaa/0xb0 [ 253.474206][ T48] __kmalloc_noprof+0x324/0x820 [ 253.479054][ T48] __usb_create_hcd+0x5e/0xac0 [ 253.483807][ T48] vhci_hcd_probe+0x1a5/0x4e0 [ 253.488473][ T48] platform_probe+0x106/0x1d0 [ 253.493157][ T48] really_probe+0x241/0xa60 [ 253.497638][ T48] __driver_probe_device+0x210/0x460 [ 253.502904][ T48] driver_probe_device+0x4a/0x140 [ 253.507914][ T48] __device_attach_driver+0x1df/0x320 [ 253.513289][ T48] bus_for_each_drv+0x159/0x1e0 [ 253.518127][ T48] __device_attach+0x1e4/0x4d0 [ 253.522878][ T48] device_initial_probe+0xaf/0xd0 [ 253.527896][ T48] bus_probe_device+0x64/0x160 [ 253.532652][ T48] device_add+0x121d/0x1970 [ 253.537158][ T48] platform_device_add+0x35a/0x800 [ 253.542803][ T48] platform_device_register_full+0x507/0x720 [ 253.548778][ T48] vhci_hcd_init+0x1a1/0x2f0 [ 253.553349][ T48] do_one_initcall+0x11c/0x6f0 [ 253.558102][ T48] kernel_init_freeable+0x6ea/0x7b0 [ 253.563283][ T48] kernel_init+0x21/0x1e0 [ 253.567595][ T48] ret_from_fork+0x730/0xd60 [ 253.572183][ T48] ret_from_fork_asm+0x1a/0x30 [ 253.576924][ T48] [ 253.579230][ T48] Freed by task 7607: [ 253.583191][ T48] kasan_save_stack+0x30/0x50 [ 253.587847][ T48] kasan_save_track+0x14/0x30 [ 253.592508][ T48] kasan_save_free_info+0x3b/0x70 [ 253.597512][ T48] __kasan_slab_free+0x5f/0x80 [ 253.602275][ T48] kfree+0x22b/0x6c0 [ 253.606164][ T48] usb_put_hcd+0x149/0x1f0 [ 253.610567][ T48] vhci_hcd_remove+0xb5/0x1b0 [ 253.615232][ T48] platform_remove+0x5f/0x80 [ 253.619799][ T48] device_remove+0xcb/0x180 [ 253.624297][ T48] device_release_driver_internal+0x44e/0x620 [ 253.630368][ T48] unbind_store+0xf8/0x110 [ 253.634775][ T48] drv_attr_store+0x74/0xb0 [ 253.639255][ T48] sysfs_kf_write+0xf2/0x150 [ 253.643823][ T48] kernfs_fop_write_iter+0x3e0/0x5f0 [ 253.649078][ T48] vfs_write+0x6af/0x1050 [ 253.653392][ T48] ksys_write+0x12a/0x250 [ 253.657702][ T48] do_syscall_64+0x123/0x790 [ 253.662266][ T48] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.668142][ T48] [ 253.670459][ T48] Last potentially related work creation: [ 253.676158][ T48] kasan_save_stack+0x30/0x50 [ 253.680827][ T48] kasan_record_aux_stack+0xa7/0xc0 [ 253.686013][ T48] insert_work+0x36/0x230 [ 253.690331][ T48] __queue_work+0x9bc/0x12b0 [ 253.694914][ T48] queue_work_on+0x1a9/0x1e0 [ 253.699491][ T48] usb_hcd_giveback_urb+0x330/0x4a0 [ 253.704668][ T48] unlink1+0x418/0x510 [ 253.708711][ T48] usb_hcd_unlink_urb+0x131/0x210 [ 253.713710][ T48] usb_kill_urb+0x121/0x320 [ 253.718187][ T48] hub_quiesce+0x1e9/0x320 [ 253.722571][ T48] hub_suspend+0x4ab/0x9e0 [ 253.726966][ T48] usb_suspend_both+0x288/0x950 [ 253.731798][ T48] usb_runtime_suspend+0x49/0x120 [ 253.736817][ T48] __rpm_callback+0xc8/0x620 [ 253.741903][ T48] rpm_callback+0x11f/0x150 [ 253.746390][ T48] rpm_suspend+0x2f4/0x1220 [ 253.750887][ T48] __pm_runtime_suspend+0xba/0x1a0 [ 253.755979][ T48] usb_new_device.part.0+0x1653/0x1686 [ 253.761416][ T48] register_root_hub+0x4e6/0x639 [ 253.766341][ T48] usb_add_hcd.cold+0xccd/0x1158 [ 253.771253][ T48] vhci_hcd_probe+0x1c2/0x4e0 [ 253.775998][ T48] platform_probe+0x106/0x1d0 [ 253.780687][ T48] really_probe+0x241/0xa60 [ 253.785161][ T48] __driver_probe_device+0x210/0x460 [ 253.790433][ T48] driver_probe_device+0x4a/0x140 [ 253.795443][ T48] __device_attach_driver+0x1df/0x320 [ 253.800823][ T48] bus_for_each_drv+0x159/0x1e0 [ 253.805678][ T48] __device_attach+0x1e4/0x4d0 [ 253.810419][ T48] device_initial_probe+0xaf/0xd0 [ 253.815431][ T48] bus_probe_device+0x64/0x160 [ 253.820174][ T48] device_add+0x121d/0x1970 [ 253.824663][ T48] platform_device_add+0x35a/0x800 [ 253.829773][ T48] platform_device_register_full+0x507/0x720 [ 253.835743][ T48] vhci_hcd_init+0x1a1/0x2f0 [ 253.840318][ T48] do_one_initcall+0x11c/0x6f0 [ 253.845061][ T48] kernel_init_freeable+0x6ea/0x7b0 [ 253.850239][ T48] kernel_init+0x21/0x1e0 [ 253.854559][ T48] ret_from_fork+0x730/0xd60 [ 253.859147][ T48] ret_from_fork_asm+0x1a/0x30 [ 253.863899][ T48] [ 253.866201][ T48] Second to last potentially related work creation: [ 253.872764][ T48] kasan_save_stack+0x30/0x50 [ 253.877422][ T48] kasan_record_aux_stack+0xa7/0xc0 [ 253.882592][ T48] insert_work+0x36/0x230 [ 253.887253][ T48] __queue_work+0x9bc/0x12b0 [ 253.891823][ T48] queue_work_on+0x1a9/0x1e0 [ 253.896418][ T48] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 253.901618][ T48] usb_hcd_submit_urb+0xab7/0x2150 [ 253.906716][ T48] usb_submit_urb+0x827/0x19b0 [ 253.911466][ T48] usb_start_wait_urb+0x10e/0x580 [ 253.916474][ T48] usb_control_msg+0x328/0x4b0 [ 253.921215][ T48] hub_suspend+0x826/0x9e0 [ 253.925601][ T48] usb_suspend_both+0x288/0x950 [ 253.930423][ T48] usb_runtime_suspend+0x49/0x120 [ 253.935431][ T48] __rpm_callback+0xc8/0x620 [ 253.939992][ T48] rpm_callback+0x11f/0x150 [ 253.945004][ T48] rpm_suspend+0x2f4/0x1220 [ 253.949476][ T48] __pm_runtime_suspend+0xba/0x1a0 [ 253.954574][ T48] usb_new_device.part.0+0x1653/0x1686 [ 253.960007][ T48] register_root_hub+0x4e6/0x639 [ 253.964918][ T48] usb_add_hcd.cold+0xccd/0x1158 [ 253.969827][ T48] vhci_hcd_probe+0x1c2/0x4e0 [ 253.974474][ T48] platform_probe+0x106/0x1d0 [ 253.979131][ T48] really_probe+0x241/0xa60 [ 253.983604][ T48] __driver_probe_device+0x210/0x460 [ 253.988871][ T48] driver_probe_device+0x4a/0x140 [ 253.993886][ T48] __device_attach_driver+0x1df/0x320 [ 253.999232][ T48] bus_for_each_drv+0x159/0x1e0 [ 254.004056][ T48] __device_attach+0x1e4/0x4d0 [ 254.008792][ T48] device_initial_probe+0xaf/0xd0 [ 254.013796][ T48] bus_probe_device+0x64/0x160 [ 254.018559][ T48] device_add+0x121d/0x1970 [ 254.023047][ T48] platform_device_add+0x35a/0x800 [ 254.028153][ T48] platform_device_register_full+0x507/0x720 [ 254.034115][ T48] vhci_hcd_init+0x1a1/0x2f0 [ 254.038696][ T48] do_one_initcall+0x11c/0x6f0 [ 254.043438][ T48] kernel_init_freeable+0x6ea/0x7b0 [ 254.048619][ T48] kernel_init+0x21/0x1e0 [ 254.052932][ T48] ret_from_fork+0x730/0xd60 [ 254.057515][ T48] ret_from_fork_asm+0x1a/0x30 [ 254.062345][ T48] [ 254.064649][ T48] The buggy address belongs to the object at ffff88802964c000 [ 254.064649][ T48] which belongs to the cache kmalloc-8k of size 8192 [ 254.078696][ T48] The buggy address is located 2328 bytes inside of [ 254.078696][ T48] freed 8192-byte region [ffff88802964c000, ffff88802964e000) [ 254.092642][ T48] [ 254.094940][ T48] The buggy address belongs to the physical page: [ 254.101351][ T48] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29648 [ 254.110122][ T48] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 254.118588][ T48] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 254.126170][ T48] page_type: f5(slab) [ 254.130233][ T48] raw: 00fff00000000040 ffff88801c022280 dead000000000122 0000000000000000 [ 254.138807][ T48] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 254.147387][ T48] head: 00fff00000000040 ffff88801c022280 dead000000000122 0000000000000000 [ 254.156051][ T48] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 254.164713][ T48] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 254.173376][ T48] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 254.182030][ T48] page dumped because: kasan: bad access detected [ 254.188441][ T48] page_owner tracks the page as allocated [ 254.194152][ T48] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9411865511, free_ts 0 [ 254.213801][ T48] post_alloc_hook+0xfd/0x120 [ 254.218467][ T48] get_page_from_freelist+0xf46/0x3500 [ 254.223931][ T48] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 254.229833][ T48] new_slab+0xa2/0x660 [ 254.233900][ T48] refill_objects+0xe3/0x410 [ 254.238487][ T48] __pcs_replace_empty_main+0x372/0x680 [ 254.244035][ T48] __kmalloc_noprof+0x66b/0x820 [ 254.248871][ T48] scsi_host_alloc+0x30/0x1320 [ 254.253619][ T48] virtscsi_probe+0x21f/0xf80 [ 254.258287][ T48] virtio_dev_probe+0x6a2/0xbe0 [ 254.263116][ T48] really_probe+0x241/0xa60 [ 254.267594][ T48] __driver_probe_device+0x210/0x460 [ 254.272860][ T48] driver_probe_device+0x4a/0x140 [ 254.277855][ T48] __driver_attach+0x21f/0x5b0 [ 254.282598][ T48] bus_for_each_dev+0x13e/0x1d0 [ 254.287448][ T48] bus_add_driver+0x305/0x5b0 [ 254.292134][ T48] page_owner free stack trace missing [ 254.297484][ T48] [ 254.299780][ T48] Memory state around the buggy address: [ 254.305396][ T48] ffff88802964c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.313467][ T48] ffff88802964c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.321523][ T48] >ffff88802964c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.329589][ T48] ^ [ 254.334420][ T48] ffff88802964c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.342975][ T48] ffff88802964ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 254.351037][ T48] ================================================================== [ 254.359082][ T48] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.366262][ T48] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.377100][ T48] Tainted: [L]=SOFTLOCKUP [ 254.381404][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 254.391441][ T48] Workqueue: usbip_event event_handler [ 254.396879][ T48] Call Trace: [ 254.400137][ T48] [ 254.403055][ T48] dump_stack_lvl+0x100/0x190 [ 254.407714][ T48] vpanic+0x553/0x970 [ 254.411674][ T48] ? __pfx_vpanic+0x10/0x10 [ 254.416158][ T48] ? __pfx_vprintk_emit+0x10/0x10 [ 254.421155][ T48] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 254.426510][ T48] panic+0xd1/0xe0 [ 254.430204][ T48] ? __pfx_panic+0x10/0x10 [ 254.434597][ T48] ? end_report.part.0+0x23/0x90 [ 254.439511][ T48] ? rcu_is_watching+0x13/0xc0 [ 254.444246][ T48] ? end_report.part.0+0x23/0x90 [ 254.449171][ T48] check_panic_on_warn.cold+0x19/0x34 [ 254.454523][ T48] end_report.part.0+0x3a/0x90 [ 254.459262][ T48] kasan_report.cold+0xe/0x18 [ 254.463926][ T48] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 254.469304][ T48] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 254.474681][ T48] __kasan_check_byte+0x36/0x50 [ 254.479539][ T48] lock_acquire+0x132/0x370 [ 254.484030][ T48] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 254.489813][ T48] ? _raw_spin_lock_irqsave+0x52/0x60 [ 254.495160][ T48] _raw_spin_lock_irqsave+0x3a/0x60 [ 254.500344][ T48] ? event_handler+0x21e/0x570 [ 254.505097][ T48] event_handler+0x21e/0x570 [ 254.509676][ T48] process_one_work+0xa23/0x1940 [ 254.514612][ T48] ? __pfx_process_one_work+0x10/0x10 [ 254.519966][ T48] ? __pfx_event_handler+0x10/0x10 [ 254.525052][ T48] worker_thread+0x5ef/0xe50 [ 254.529619][ T48] ? kthread+0x13a/0x450 [ 254.533847][ T48] ? __pfx_worker_thread+0x10/0x10 [ 254.538941][ T48] kthread+0x373/0x450 [ 254.542991][ T48] ? __pfx_kthread+0x10/0x10 [ 254.547553][ T48] ret_from_fork+0x730/0xd60 [ 254.552130][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 254.557233][ T48] ? __switch_to+0x800/0x10f0 [ 254.561884][ T48] ? __pfx_kthread+0x10/0x10 [ 254.566443][ T48] ret_from_fork_asm+0x1a/0x30 [ 254.571194][ T48] [ 254.574261][ T48] Kernel Offset: disabled [ 254.578570][ T48] Rebooting in 86400 seconds..