last executing test programs: 34.670760599s ago: executing program 4 (id=279): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x14, 0x2e, 0x8001010, 0x814, 0x9, 0x800, 0x5, 0x5d, 0xffffffffffffffff}}) (fail_nth: 2) 34.489705247s ago: executing program 4 (id=280): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) listxattr(&(0x7f0000000180)='./mnt\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100), 0x3001001, &(0x7f0000000340)={[{@noswap}, {@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30, 0x2d, 0x32, 0x2c, 0x32, 0x2d, 0x2d, 0x31, 0x3a]}}}}, {@mode={'mode', 0x3d, 0x4}}, {@grpquota}, {@grpquota}], [{@appraise}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r2}}]}) 29.742371551s ago: executing program 4 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}}, 0x20}}, 0x0) (fail_nth: 3) 29.550862256s ago: executing program 4 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x179) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0), 0x0) 29.542271613s ago: executing program 4 (id=297): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x4, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYBLOB="000000000300000008000d000100000008001b00000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmmsg$inet6(r3, &(0x7f0000003900)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x65, @private1, 0x10}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000140)="371f3f0cf1417a66ebb155d347ef7df8c734f1026dfc3ac903bf837e1041aab8e42094ffb0da1dacee36bc00d04afbf7fc0ce5617e1b2a07e3ed0d9571e75c76f4d358d5b05898a95424ed7317443cf91426bb6cc6d4685831dc7998ae8b4388cf4fb8b31cc8c07750494bfc6dedfbca10df42874ebcca5bb2847ba43ec0e7ff512b9ebf69ec4e4871da83b79517a5db9d03f96912e2625a6ba1df687c828e5371050ddaec40bb4880a3a43a294383c54cf42cc9c0160b79ff295ab44416e8f33d77aa", 0xc3}, {&(0x7f0000000940)="ba420abb8f05427bdf1d4eae5cd6cc09d63010a6c2ca6f48071cad515216190aa82900dc4c7030315eeef71933a6d3ce6986ad586488adb0e05f1731ec746a6d222516a6cab35a63b791d0336b040548a95dcd8de26c443815c82562efd9c86180a05c103ff644f940639f59ac4e3aa1e46d1236b576b0e98db5cb056b4a3556c549ae27b738efcb058d1e82562e1d7f850419c09a178557b631481152f84c4f8e99bd3d07a8ac8e747e2996ad5638cd1ad0d7483ac335ffa3f88dba60669af88e2c052dd9df52429135f7d930b1e9b09b4d0e869bf15d55", 0xd8}, {&(0x7f0000000a40)="4cf4a9827370bb40cf49ece10ad1bff2c6db55e3b790c4a5961637bbaa73a5f6821f10d945a8941cd32e5e2cf973cbc41acf633602616223f38f539e2bb154ec845c522cbfae0194f5cea334398da5db4408701aa2d2207b6af66f854b18f5b331998030318880fe3160a8e1eb3211eb4d4da0d0d293c8e2b40cd84ed9c25bd926d260376e6c5061e18e32ab8fe28941cd1fe565a069b40f3ff5fa188ed04dfdd2b68fd483d89c6c10bec464d8a7dacd6d46696569ab2baf9b4f9e816b8f3cad5d8f476f98e671b56f93e207034f7e663a13bff48719925941bc17ea5646589ebe968874", 0xe4}], 0x3, &(0x7f0000000e80)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @rthdr={{0x58, 0x29, 0x39, {0x2, 0x8, 0x1, 0xe0, 0x0, [@remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x6, 0x19, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x1}, @ra={0x5, 0x2, 0x8}, @ra, @jumbo={0xc2, 0x4, 0x3ff}, @generic={0x1, 0xb5, "862b4fe0fd71513287ab93b3b630492b632275c4b59439f24a980c217df1b08baa30b1dab2757791d429aabbe063bc788b149d8472ba4f542ef7100935fd9f6a0d9f7df723acfd7bb3ac8fda94e338f00eca6a915bb0262c767cc76731788a5e3d0a85f4d0996b754438bf0bbae2b0d7888fc1d1794eaa0239fc5f701962958f19f5b3ff98dcd81b1ccc75e15513dc20752775a3983701112abae5b24b0cd0295853cf87424fc96e4ce2c6b44a13bed6fceb8ba3f0"}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x11, 0xa, 0x0, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2a}, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private2]}}}, @tclass={{0x14, 0x29, 0x43, 0xd}}], 0x1e8}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001080)="fd59e9a06430d761417899356c6c4dcc82c381cce6fc75e2ad01420019b225426b1f2ae9535b03479d5a8f0b1401bc27c70bdaec50e465ef8e8f408dcaf5333e4d850811a270049fedc48a4499bfd9ed389113c5587a0583e4956688295e180f", 0x60}, {&(0x7f0000001100)="c7e037095987d3e304fedac22e45d587cb3572446b30f900b1a8bbe6be08b755797b57a756230c595ab2826a507276de529d84c494d58643799904fc6a57958dcb8768fda60e42003a797c8a2937b499934f8fe278b8b868dbe15402f4c0df4606b4a21627b034fbb3792881289a26f38f54f91c7d03b2772b6a3eef404d8e13b8a0288763efedc8343ee73132cda346546b81a9fc86c14dad70012d81b8b73ace2566fe855d1195c71b0db1e49a98f8aadb2c663cee0e02237ffe710c07036161fa3d6619", 0xc5}, {&(0x7f0000001200)="0c11f4577177449d0019bc3624be433e33217009", 0x14}, {&(0x7f0000001240)="0fde1fd69fb7d60c601c68ffee604e0e97f656cebaa409714846f6183215d3131bbabed343b9d13b2ca53db08968f031e417f968e29c0d3d042d3061fd37f2fa69c1bd7f0b508cadeab13d52ec9899ba2dcc0a4f805211047016d33e9707d5e4302ea6cc7cd59e0a84e2", 0x6a}, {&(0x7f00000012c0)="79617b418b463b148d81a226392a8746f4bb9365bfbfc60ba9dfe930f2391f5e88e99079b27cf8dad5336b16ab8b01b743fa14759d928ef67cee1c150cba8434a33fe56aebd4bcf4fc454500a555b30fa7d566db4765953c8faed2ce1dd7c955fc09fa07043d7249c53aa725549e18f83d888b6b87371c82bb24d209a92c4e95908cdd9c8599e0c618ce7b497425b169b9fcb3c5c864bda439dbe3405aa5519be8b880", 0xa3}, {&(0x7f0000001380)="f555e7c41ff1cbf2d160ebba37affc272e2ffc1da3a6b4b343e4b5d854e001b633b5f1bb143b465862f2f5871a1a3772fdaf80f79c49192eed88c542cde6baa6236e99e0cd3ab5a77191391da2cccf3d0fef6e179c4809d5ac2ccf99e8aa89a9ab4f606b0593ae41fcb6d8ec274221c250949c6165a72414ecb68cca435e9a3103323ca2e09bd9ae1fde663f3e0af409234ffee28cc5c92ef5522ab9d96612225623cb033296ae11b7ee8c38cdb0f254d263023f46807a22dfdd465c6efa2bd6480ef44717adb072d9be15dc4f01bba65499f9fa355b9f7c204193637b1bc0815499", 0xe2}], 0x6, &(0x7f0000001500)=ANY=[@ANYBLOB="1400000000000000290000003e000000010100000000000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x40}}, {{&(0x7f0000001540)={0xa, 0x4e22, 0xf1bf, @ipv4={'\x00', '\xff\xff', @remote}, 0x81}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001580)="e28a288e6a1e0a20c625b32450ebb83ab6db3f1d4dbbf0d0204d3aafd46a39251b34f4a9216dc335d06a893883bf2f52ac059045da45a640eaa2b495d2df48b598239ef8b4f8df5fe33e2208c2ffe3b4a2685ced65219c97abd05ecb64a609d03e3c89a4eca1d96692d7861124a88634041b1a3c54bfe98d91d92c9ab877216c0b15448a76600352a39808c5fd270fea070cdf9e2cc2d687147a56b43150077958f72e685fe4a56580ab0268d498d9c12dbaf1", 0xb3}, {&(0x7f0000001640)="de780ae6cfd062a7a556017db4812acc6411e1e6a134643ba7d818ad4e77d087a283a8b8f81dbecfc8898b6afaa21d89fb063b063b6afeb99e388a6dc6869d68feca46687ab1cfdb4fa7f88c67f8a6b45a1eae8526d1e13e86ee3a19a6ab498ff013caf27449b4dcc855c04fbb05351b37394445fea469d01dfeee7ff199e2fd51049076bc25203c3fff9b8efae62c9f64980cdc7314808c17f7b1c051cdf4d29b8514968206bd9b54c4b6599c11de2036d7de033351c0ecc12408b1393825e43e2380c1c50ed666766ceeaa3e89d6348c2443384bbdd3d619ed3c482533f88dfc4b5c78453495960fb973b1b7", 0xed}, {&(0x7f0000001740)}], 0x3, &(0x7f0000001a80)=[@dstopts={{0x48, 0x29, 0x37, {0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x7f}, @jumbo={0xc2, 0x4, 0x40}, @jumbo={0xc2, 0x4, 0xb}, @pad1, @padn, @enc_lim={0x4, 0x1, 0x3}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80000003}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x0, 0x3, '\x00', [@ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0xa33}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x3}]}}}, @hopopts_2292={{0xd8, 0x29, 0x36, {0x2f, 0x17, '\x00', [@generic={0xac, 0xb8, "4238c6ac2b50639ee100f2a1eab5be2ba5676544b9a1aebb6e4031b82aed87b20e032cd37c5e926e6fffbb3bb2e8c1a09de2dbc713252f388dabc5de25e2b5ed498f7ac1308ef44a6f759825fa4ba6e5802a0f033ff982da4ebbebfef262abc8bbd2f276d60a9ff576e9cdcef0572419b308bbf911dc58fc5a5ba6e81a0e8e09f949ce06b822727ff019cf7d7577c7f7cd1d9d1c8bb211da41d92cd8eddf8a7e800833794bb221cf9e1c509b2f723a9421dbb396eeb68624"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dstopts={{0x78, 0x29, 0x37, {0x2e, 0xb, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x800}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x28, {0x3, 0x8, 0x2, 0x9, [0x81, 0x1, 0xffffffffffffff81, 0x2]}}, @ra={0x5, 0x2, 0x200}, @hao={0xc9, 0x10, @empty}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0x218}}, {{&(0x7f0000001a00)={0xa, 0x4e21, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x231}, 0x1c, &(0x7f0000003780)=[{&(0x7f0000001a40)="1dd24ffd323fc7d43bd3a580d0", 0xd}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f0000003600)="870d69d103e0ebf5a2a67a6bdadd101ac5476ead6f4049efe91a2ff5aa0091b67a146b126d14e549b9eb67ad4f4c4759853bcd73e4e8624c05ef9b8b3edd4ebf4c7fea5561fc8f030be3baa463092b1f7a407285e9b86fa24b3bacbfb39c", 0x5e}, {&(0x7f0000003680)="6ff05fcb419cc524a026a019b09fccbbb5b628b71a81a3f13c0a7da89bcb60fc36c4fdcf47498e3febedfafdfc32774e0e409c6a50af5b975b2a427b5f33e4b60e43a32ddbbb3945871cf9234216a6d52aa0a07ba6ef3507ee3822731f05e1fdbeae10aa6999e9c959813eeb79ce76cf2295707e8078fa42210e1d18f4525392f006bde46889a0e9a983b251bf0bfcd8ed69bad9", 0x94}], 0x4, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], 0x140}}], 0x4, 0x813) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000100)) r8 = syz_open_pts(r7, 0x8000) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r9, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") 26.391606175s ago: executing program 4 (id=301): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x488d0}, 0x4000) (fail_nth: 3) 25.485357589s ago: executing program 2 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}}, 0x20}}, 0x0) 24.91566169s ago: executing program 2 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7f, 0xd68, {r3}, {0xee00}, 0x2, 0x9c}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x2000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301701) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'veth1_virt_wifi\x00', &(0x7f0000000340)=@ethtool_rx_ntuple={0x35, {0xb11873eff3de08f7, @sctp_ip4_spec={@local, @broadcast, 0x4e24, 0x4e21}, @ether_spec={@random="fc704a6012ed", @broadcast, 0x401}, 0x0, 0xfff9, 0xfe, 0x400000}}}) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x1d, &(0x7f0000000180)=0x800005, 0x4) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, 0x0, &(0x7f0000000240)) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100), 0x0, 0xffffffffffffffff) r9 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c69676e6f726571762c00cd42039f88d3835116aa64cbb4859ec34e59eb69ffa8eb24da8f3d6901242e200619da79200c66f5419f22670972e16412a2c6c373a27f2ae3d2c0c733b2b72e472cf6ccf560289af237624826fe5925e3fe201b4e4f2a98f0f09b53828a2b4d6f93ec305de970db06f2"]) connect$bt_l2cap(r10, &(0x7f0000000180)={0x1f, 0x1}, 0xe) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4e21, 0xfffc, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0x45, 0x0, r5}, {0x4, 0x5, 0xffffffff, 0x4, 0x30000000, 0x2, 0xb, 0x5}, {0x7, 0x5, 0x4, 0xfffffffffffffff9}, 0x3, 0x0, 0x2, 0x1, 0x1}, {{@in6=@loopback, 0x4d3, 0x2b}, 0x2, @in6=@private1, 0x34ff, 0x2, 0x1, 0x1, 0x10, 0x5, 0xfc91}}, 0xe8) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x1, 0x0) 23.675076987s ago: executing program 2 (id=310): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_open_dev$usbfs(0x0, 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_register(0xffffffffffffffff, &(0x7f0000001400)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xd9\xa1o\x93\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"\x1fm+\xf3\x89\xe0+\xda\x0f\xbaO\xff\xa50\xad\xe0\a\"\xff\x01\xb8\x0fl\xd9\x86N3BOh\f\xc8\x00\xf4\xb4\xd5c\x06)E>>\x82\xfeS\xeb~\xa9\xc4\xa3\x11a\x19X\xff\xae\xd3\'\x1f+p\x9fNf\x04\x1d0&>\xf32\xa0\xad:\xd6\xde\xfa\x83S+\xd4~\xb5\x11\xeb\\\xa1w\x1c\xb0\xdb\x96 \a\x17x|\x9d\x82z\x10p\x1a\x03tC\xd4\x83\xb9\xf2^\x183\x11\x18\xd5\xa1\x82\v\xf0\xdd\xb2d)\x02G-v[\xca*0\x8c\x8bmj\xc4\b\xc0\x14\x05[W\r\xef \xc7\x14\xc4#\xab,\x14z\x1fdk\\|KKp\xfa\x03\xec\xa6\x98\x17\xe9~\x1d\x9f\xbd\x83u\x12\x8d&-', 0x3a, './file0', 0x3a, [0x43]}, 0x3af) chroot(0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYRES64=r2], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x42, 0x0, &(0x7f0000000140)) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r5, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r6 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r6, 0x1269, &(0x7f00000001c0)={0xc, 0x0, 0xd, &(0x7f0000000240)="eb9a111903719052efc2ea8ed9"}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) 17.616754404s ago: executing program 2 (id=314): r0 = fsopen(&(0x7f0000000240)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000280)=@ethtool_gfeatures}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) pipe2$watch_queue(&(0x7f0000000040), 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x40) unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120101026fa2d840ac05180279ce01020301090212000150402009090444a6000350020664020bc614d4f90bbb9f53a6a2a7cd2c20508c87ff8611db473b936d1ef6638badf9cd8657af2c865dcaefcc6f14a69402c0a78e9f78a71dde13a9282ec043ead5"], 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="2e000000010000", 0x7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) 13.276205523s ago: executing program 3 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x179) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)=' ', 0x2) 13.010690122s ago: executing program 3 (id=320): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x44) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x4, 0xcc11}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e23, 0x5, @mcast1, 0x7}}, 0x4, 0xfff, 0x101, 0x7ff, 0x40, 0x200, 0x1}, &(0x7f0000000540)=0x9c) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)) r4 = dup(r1) getsockopt$bt_hci(r4, 0x0, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x0) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/222, 0xde, 0x2) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x222200, 0x0) r7 = fcntl$dupfd(r0, 0x0, r6) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r4}) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000340)="c4e25da9fcc4e2719614960f01c9c40299ac72000f68400066baf80cb8b7ffbe8fef66bafc0cb0deee66b832010f00d0b809000000ef0f0766b81a008ed80f2c2b", 0x41}], 0x1, 0x1a95085ab7fd0f33, &(0x7f00000002c0)=[@cr4={0x1, 0x244050}, @dstype0={0x6, 0x7}], 0x2) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_RUN(r9, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f00000000c0)={0x3, 0x191}) 12.113401388s ago: executing program 3 (id=323): r0 = fsopen(&(0x7f0000000240)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000280)=@ethtool_gfeatures}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) pipe2$watch_queue(&(0x7f0000000040), 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x40) unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120101026fa2d840ac05180279ce01020301090212000150402009090444a6000350020664020bc614d4f90bbb9f53a6a2a7cd2c20508c87ff8611db473b936d1ef6638badf9cd8657af2c865dcaefcc6f14a69402c0a78e9f78a71dde13a9282ec043ead5"], 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="2e000000010000", 0x7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) 11.208688471s ago: executing program 32 (id=301): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x488d0}, 0x4000) (fail_nth: 3) 10.02586735s ago: executing program 0 (id=328): openat(0xffffffffffffffff, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x01\x00', 0x480000, 0x14b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) write$tun(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x4, &(0x7f0000000280)=[{0x5, 0x9c, 0x4, 0x3}, {0x823f, 0x1, 0x4, 0xfffffffe}, {0x80, 0x6, 0x1, 0x9}, {0x9, 0x6, 0x8, 0xd}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r4, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000010)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) write(0xffffffffffffffff, &(0x7f00000003c0)="040e0c010320d71b3716f000ffffffffffffffff", 0x14) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) connect(r5, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa) close(r2) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2886872, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8.009177932s ago: executing program 0 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x418042, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) setpriority(0x1, 0xffffffffffffffff, 0xf349) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @remote}, {{0x6e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x606d, 0x0, 0x1ff}}}}}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02098b18"], 0x10}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) readlinkat(r0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000700)=""/100, 0x64) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000003c0)=0xffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300000000"], 0x0) r7 = getpid() r8 = gettid() rt_tgsigqueueinfo(r7, r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffa}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x4, 0x1, 0x7, 0x11, 0x5, 0x7b, 0x3, 0x80008, 0x8, 0x2, 0x1, 0x6, 0x1, 0x7c, 0x6, 0x9, 0x20000009, 0xb1, 0x7fffffff, 0xffffffff, 0xca9f, 0x17f, 0x0, 0xfffffffb, 0xf29e, 0x1, 0x6, 0xa6b3, 0x0, 0xfffffffa]}) ioctl$COMEDI_SETRSUBD(r1, 0x6410) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x600018d4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x2}, {{&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1}, 0x80000001}, {{&(0x7f0000000440)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001900)=""/204, 0xcc}, {&(0x7f0000000300)=""/177, 0xb1}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/123, 0x7b}, {&(0x7f0000001a00)=""/4075, 0xfeb}, {&(0x7f0000000600)=""/215, 0xd7}, {&(0x7f0000001740)=""/2, 0x2}], 0x7}, 0xc}], 0x3, 0x0, 0x0) 7.854437206s ago: executing program 1 (id=331): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000180)={0x4a0f, 0x2, 0x0, 0x7}) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) 7.794928341s ago: executing program 0 (id=332): openat(0xffffffffffffffff, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x01\x00', 0x480000, 0x14b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) write$tun(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x4, &(0x7f0000000280)=[{0x5, 0x9c, 0x4, 0x3}, {0x823f, 0x1, 0x4, 0xfffffffe}, {0x80, 0x6, 0x1, 0x9}, {0x9, 0x6, 0x8, 0xd}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r4, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000010)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) write(0xffffffffffffffff, &(0x7f00000003c0)="040e0c010320d71b3716f000ffffffffffffffff", 0x14) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) connect(r5, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa) close(r2) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2886872, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.807116623s ago: executing program 1 (id=333): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) (fail_nth: 3) 5.666671217s ago: executing program 1 (id=334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x1000) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x30, r5, 0x1, 0x70bd2c, 0x25dddbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040027bd7000ffdbdf255a0000000c0099000700000000000000bee18418ca62bc71c571a02642ccadbe11333ccfcc6a12f2f1b9a247dde87a489ba4a48c19d796e52a502bad08a6"], 0x20}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@getchain={0x64, 0x66, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0xd, 0xd}, {0x6, 0x10}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8}, {0x8, 0xb, 0xfffffff6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x109}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xa77}]}, 0x64}, 0x1, 0x0, 0x0, 0x4894}, 0x42) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 5.48910171s ago: executing program 0 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x80000000}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000f80aad40c50f2712d82d0102030109021b00f3db80f0bc0904"], 0x0) sched_setscheduler(0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x1, 0x9, 0x66, 0xe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="ff00", 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = gettid() r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000023c0)={'virt_wifi0\x00', 0x2}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) get_robust_list(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000020c0)={{0x4, 0x1, 0x5, 0x9, '\x00', 0x7}, 0x3, 0x30, 0x5, r2, 0x5, 0x4, 'syz1\x00', &(0x7f0000002480)=['{*\x00', '}\xc5\x8e)k\x03.\byq\x12HG.\'\xa4V\xe2I\xca\xb9\xacq\x1c\x0e\xa9\\\xb0>\xe2\x97}&\x94\xe3\xf4\xf5\':\xbb_\x0f\x8d\x8c\xde\xd7\xb7\xa4\xdd\xb9A[Z\x8aU\\\xaf\x81oU\xeb}\xc0\x93Qm\xaa\xe7\xd7F\v\xef\xd39Z', '$}^%\x00', 'q\x00\x88\xc8\xfaK/\xd8<\xcf\x8f\xb1\xbf|\x13\xe3.\xc3\t\x9e\x15\x1e\x05o\xf1B~\x19\x95\x8cm|\x8d\x8fl\x1a\xbc\x99ug$z:\xad\x8d\x14\x88\x9d!\xf7\xba\xff\x80\xa83W\xad]\xaf8:\xf8X\xac\xd8\x16\x060', '/@-*\x00'], 0x9c}) set_robust_list(&(0x7f0000002380)={&(0x7f0000002340)={&(0x7f0000002300)}, 0x7fffffff}, 0x18) semget(0x2, 0x4, 0x489) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002280)=[@text16={0x10, &(0x7f0000002200)="3ed068000fbd8600000f092e0fc79ee4000f381d61d1ba4000b004ee0f356766c74424005f0000006766c7442402000000006766c744240600000000670f011c24672e3e2664650f7901660f1bdf", 0x4e}], 0x1, 0x10, &(0x7f00000022c0)=[@efer={0x2, 0x100}], 0x1) 5.237041396s ago: executing program 1 (id=336): r0 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r0, 0x2007ffb) openat(r0, &(0x7f0000000100)='./file0\x00', 0x109081, 0x24) syz_clone(0x180680, 0x0, 0xffffffffffffff2a, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r1, 0x0, 0x100000000000000}, 0x38) 4.251439482s ago: executing program 1 (id=337): r0 = syz_open_dev$I2C(&(0x7f0000000240), 0x46, 0x200) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x0, 0x21010, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000000c0)={0xd8, "7d212320ccf1b29b3df5a20a62bfc630bf0eebd5ccc55e035476b9bc62787428", 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000696000/0x1000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x6bfc, &(0x7f0000000040)={0x0, 0xc8a4, 0xc000, 0x3, 0x2bb}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="09a6ea3d00001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 3.746416927s ago: executing program 1 (id=338): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) listxattr(&(0x7f0000000180)='./mnt\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100), 0x3001001, &(0x7f0000000340)={[{@noswap}, {@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30, 0x2d, 0x32, 0x2c, 0x32, 0x2d, 0x2d, 0x31, 0x3a]}}}}, {@mode={'mode', 0x3d, 0x4}}, {@grpquota}, {@grpquota}], [{@smackfsdef={'smackfsdef', 0x3d, '-$\x92('}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r2}}]}) 3.646571594s ago: executing program 2 (id=339): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) syz_open_dev$usbfs(0x0, 0x205, 0x8401) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000480)=ANY=[@ANYRES64], 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x2004a002) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r3, &(0x7f00000017c0)=""/4086, 0xff6) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r4, 0x1269, &(0x7f00000001c0)={0xc, 0x0, 0xd, &(0x7f0000000240)="eb9a111903719052efc2ea8ed9"}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) 1.397252126s ago: executing program 0 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001c000107000000000000000007000000", @ANYRES32=r2, @ANYBLOB="80000200080001007f0000010a0002"], 0x38}}, 0x0) 1.107007847s ago: executing program 3 (id=341): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x10000, 0x8, 0x7, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x264, 0x23b) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x40086607, 0x0) 1.092870741s ago: executing program 0 (id=342): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x5}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, 0xffffffffffffffff, 0xcd2e8000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r4, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r5, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x6c2}], 0x3, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x2a0, 0x390, 0x390, 0x390, 0x1c0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0x20, 0xc, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0xffffff00, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'veth0\x00', {}, {0xff}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfdfffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7f, 0xfffffffa, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r8 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r8, 0x1, 0x0, 0x0) syz_usb_ep_write(r8, 0x81, 0xd6, &(0x7f0000000000)="9001000000000000000000000000000000007612172f0000000000000000000000f0ff0000000000000000000000000000000000000000000000000000000000b6b5230f5d943eba38a017d814dda8902a4dfc20db115767b3c89d35511f031a8c99a45fca1de728fa935dd108f8f2cc238cb52ea6ac13f4bf16639851d0ccb5229ea30ac0999b398bf17747d8af2dc57cb79258317ab6dce606626bb7b8ad8422b4998241d431b6cf7fc3872c572421a754505ab40126e9585f2fe3e91299edbfb823b607b5eb3bd419c676d782a89771586d8a471b") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) 284.960775ms ago: executing program 2 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x117) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) write(r0, &(0x7f0000000400)='1', 0x1) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='dummy_udc.0', 0xb) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dae04070"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) 206.758695ms ago: executing program 3 (id=344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000003080), 0xce4, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r0, 0x0, 0x100000000000000}, 0x38) 0s ago: executing program 3 (id=345): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000180)={0x4a0f, 0x2, 0x0, 0x7}) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x4000000000000000}) kernel console output (not intermixed with test programs): 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 115.083241][ T986] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 115.083278][ T986] usb 1-1: config 0 has no interface number 0 [ 115.083325][ T986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.108341][ T986] usb 1-1: config 0 descriptor?? [ 115.229302][ T986] viperboard 1-1:0.143: version 0.00 found at bus 001 address 004 [ 115.300874][ T6347] Bluetooth: hci5: Frame reassembly failed (-84) [ 115.302687][ T6347] Bluetooth: hci5: Frame reassembly failed (-84) [ 115.368544][ T3274] Bluetooth: hci5: Frame reassembly failed (-84) [ 116.009312][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.082465][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.117048][ T986] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 116.143212][ T986] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 116.351799][ T5342] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 116.390859][ T5342] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 116.690278][ T5342] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 116.690314][ T5342] em28xx 3-1:0.0: No AC97 audio processor [ 116.785981][ T986] usb 1-1: USB disconnect, device number 4 [ 117.317300][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.940935][ T5342] usb 3-1: USB disconnect, device number 7 [ 117.942064][ T5342] em28xx 3-1:0.0: Disconnecting em28xx [ 117.954403][ T5342] em28xx: Freeing device [ 118.025055][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 118.031632][ T31] audit: type=1400 audit(1788778500.635:781): avc: denied { create } for pid=6388 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.053199][ T31] audit: type=1400 audit(1788778500.655:782): avc: denied { ioctl } for pid=6388 comm="syz.4.109" path="socket:[9991]" dev="sockfs" ino=9991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.155459][ T31] audit: type=1400 audit(1788778500.765:783): avc: denied { create } for pid=6393 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.175678][ T31] audit: type=1400 audit(1788778500.765:784): avc: denied { module_request } for pid=6393 comm="syz.2.111" kmod="net-pf-10-proto-7-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 118.207212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 118.420661][ T4926] Bluetooth: hci4: link tx timeout [ 118.432554][ T4926] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.937594][ T31] audit: type=1400 audit(1788778500.955:785): avc: denied { create } for pid=6393 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.937813][ T31] audit: type=1400 audit(1788778500.975:786): avc: denied { connect } for pid=6393 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.937891][ T31] audit: type=1400 audit(1788778500.975:787): avc: denied { write } for pid=6393 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.937922][ T31] audit: type=1400 audit(1788778501.055:788): avc: denied { ioctl } for pid=6391 comm="syz.0.110" path="socket:[10693]" dev="sockfs" ino=10693 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.937956][ T31] audit: type=1400 audit(1788778501.075:789): avc: denied { mounton } for pid=6393 comm="syz.2.111" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 120.644619][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 121.065715][ T31] audit: type=1400 audit(1788778503.675:790): avc: denied { module_request } for pid=6393 comm="syz.2.111" kmod="net-pf-10-proto-7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 121.094811][ T6404] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop2": -EINTR [ 121.535458][ T6421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.545174][ T4926] Bluetooth: hci3: Malformed Event: 0x02 [ 121.628468][ T6430] netlink: 'syz.0.117': attribute type 5 has an invalid length. [ 121.757550][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 121.816555][ T6440] ubi0: attaching mtd0 [ 121.833946][ T6440] ubi0: scanning is finished [ 121.833982][ T6440] ubi0: empty MTD device detected [ 121.888934][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 121.907235][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 121.907881][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.908859][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 121.908882][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.910950][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.910969][ T10] usb 4-1: Product: syz [ 121.910980][ T10] usb 4-1: Manufacturer: syz [ 121.910992][ T10] usb 4-1: SerialNumber: syz [ 121.913191][ T10] usb 4-1: config 0 descriptor?? [ 121.934756][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.934786][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 122.006504][ T6440] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 122.006543][ T6440] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 122.006902][ T6440] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 122.006917][ T6440] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 122.006931][ T6440] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 122.006944][ T6440] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 122.006958][ T6440] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1811619334 [ 122.006974][ T6440] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 122.007609][ T986] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.009545][ T6446] ubi0: background thread "ubi_bgt0d" started, PID 6446 [ 122.157261][ T986] usb 3-1: Using ep0 maxpacket: 32 [ 122.157896][ T986] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.160132][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 122.160157][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24941, setting to 1024 [ 122.160189][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.165822][ T986] usb 3-1: config 0 descriptor?? [ 122.172604][ T986] hub 3-1:0.0: USB hub found [ 122.394224][ T6432] Bluetooth: hci5: Frame reassembly failed (-84) [ 122.397425][ T6432] Bluetooth: hci5: Frame reassembly failed (-84) [ 122.428794][ T5864] Bluetooth: hci5: Frame reassembly failed (-84) [ 122.437159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.693648][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.750244][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.141423][ T986] hub 3-1:0.0: 26 ports detected [ 123.149215][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.171729][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.217562][ T986] hub 3-1:0.0: insufficient power available to use all downstream ports [ 123.492954][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 123.610139][ T986] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 123.635060][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 123.667857][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 123.667875][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 123.844902][ T986] usbhid 3-1:0.0: can't add hid device: -71 [ 123.846048][ T986] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 123.867961][ T986] usb 3-1: USB disconnect, device number 8 [ 124.100788][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 124.100825][ T31] audit: type=1400 audit(1788778506.715:865): avc: denied { create } for pid=6452 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.131747][ T31] audit: type=1400 audit(1788778506.745:866): avc: denied { ioctl } for pid=6452 comm="syz.2.124" path="socket:[10795]" dev="sockfs" ino=10795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.165702][ T6457] overlay: Unknown parameter 'fowner>18446744073709551615' [ 124.173206][ T31] audit: type=1400 audit(1788778506.775:867): avc: denied { mounton } for pid=6456 comm="syz.0.126" path="/27/file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.224728][ T31] audit: type=1400 audit(1788778506.835:868): avc: denied { read } for pid=6453 comm="syz.4.125" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 124.248981][ T31] audit: type=1400 audit(1788778506.835:869): avc: denied { open } for pid=6453 comm="syz.4.125" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 124.249031][ T31] audit: type=1400 audit(1788778506.835:870): avc: denied { ioctl } for pid=6453 comm="syz.4.125" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 124.324743][ T31] audit: type=1400 audit(1788778506.935:871): avc: denied { setopt } for pid=6462 comm="syz.0.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.437497][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 124.536235][ T5342] usb 4-1: USB disconnect, device number 6 [ 124.608420][ T31] audit: type=1400 audit(1788778507.205:872): avc: denied { read } for pid=6460 comm="syz.2.127" dev="nsfs" ino=4026532942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.608634][ T31] audit: type=1400 audit(1788778507.205:873): avc: denied { open } for pid=6460 comm="syz.2.127" path="net:[4026532942]" dev="nsfs" ino=4026532942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.608794][ T31] audit: type=1400 audit(1788778507.205:874): avc: denied { create } for pid=6460 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.634759][ T5342] em28xx 4-1:0.0: Disconnecting em28xx [ 124.914165][ T5342] em28xx: Freeing device [ 125.547603][ T5612] Bluetooth: hci0: Malformed Event: 0x02 [ 125.589080][ T5612] Bluetooth: hci2: Malformed Event: 0x02 [ 125.635052][ T6473] netlink: 'syz.2.131': attribute type 5 has an invalid length. [ 125.705063][ T6478] netlink: 44 bytes leftover after parsing attributes in process `syz.0.133'. [ 125.716012][ T6478] netlink: 44 bytes leftover after parsing attributes in process `syz.0.133'. [ 127.219539][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 127.686488][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.693297][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.626537][ T6487] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 128.682593][ T6487] bond2: entered promiscuous mode [ 128.683656][ T6487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.882568][ T6487] veth3: entered allmulticast mode [ 128.900679][ T6487] bond2: (slave veth3): making interface the new active one [ 128.900717][ T6487] veth3: entered promiscuous mode [ 128.925299][ T6487] bond2: (slave veth3): Enslaving as an active interface with an up link [ 128.940162][ T6499] Bluetooth: ISO socket layer initialized [ 128.987572][ T6501] netlink: 76 bytes leftover after parsing attributes in process `syz.4.137'. [ 129.078895][ T5718] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.130305][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 129.130343][ T31] audit: type=1400 audit(1788778511.745:936): avc: denied { map_create } for pid=6488 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.130383][ T31] audit: type=1400 audit(1788778511.745:937): avc: denied { perfmon } for pid=6488 comm="syz.2.135" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.130419][ T31] audit: type=1400 audit(1788778511.745:938): avc: denied { map_read map_write } for pid=6488 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.182147][ T6507] ======================================================= [ 129.182147][ T6507] WARNING: The mand mount option has been deprecated and [ 129.182147][ T6507] and is ignored by this kernel. Remove the mand [ 129.182147][ T6507] option from the mount to silence this warning. [ 129.182147][ T6507] ======================================================= [ 129.182218][ T31] audit: type=1400 audit(1788778511.795:939): avc: denied { remount } for pid=6495 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.294681][ T31] audit: type=1400 audit(1788778511.895:940): avc: denied { prog_load } for pid=6488 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.294919][ T31] audit: type=1400 audit(1788778511.895:941): avc: denied { bpf } for pid=6488 comm="syz.2.135" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.497190][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 129.582371][ T5718] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 129.621050][ T31] audit: type=1400 audit(1788778512.225:942): avc: denied { write } for pid=6508 comm="syz.4.139" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 129.621116][ T31] audit: type=1400 audit(1788778512.225:943): avc: denied { open } for pid=6508 comm="syz.4.139" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 129.693316][ T31] audit: type=1400 audit(1788778512.295:944): avc: denied { ioctl } for pid=6508 comm="syz.4.139" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 129.806715][ T31] audit: type=1400 audit(1788778512.405:945): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.177049][ T5718] usb 2-1: unable to read config index 0 descriptor/all [ 130.177171][ T5718] usb 2-1: can't read configurations, error -71 [ 131.137290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.435870][ T6533] process 'syz.2.144' launched './file0' with NULL argv: empty string added [ 132.586672][ T6551] 9p: Bad value for 'wfdno' [ 132.601577][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 132.614446][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 132.698195][ T5718] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.731419][ T6548] lo speed is unknown, defaulting to 1000 [ 132.731477][ T6548] lo speed is unknown, defaulting to 1000 [ 132.731863][ T6548] lo speed is unknown, defaulting to 1000 [ 132.732288][ T6548] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 132.732320][ T6548] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 132.732345][ T6548] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 132.736313][ T6548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 132.745573][ T6548] lo speed is unknown, defaulting to 1000 [ 132.748677][ T6548] lo speed is unknown, defaulting to 1000 [ 132.749390][ T6548] lo speed is unknown, defaulting to 1000 [ 132.750117][ T6548] lo speed is unknown, defaulting to 1000 [ 132.750782][ T6548] lo speed is unknown, defaulting to 1000 [ 132.947215][ T5718] usb 3-1: Using ep0 maxpacket: 16 [ 132.947909][ T5718] usb 3-1: New USB device found, idVendor=046d, idProduct=c538, bcdDevice= 0.00 [ 132.948781][ T5718] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.948820][ T5718] usb 3-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 132.948845][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.948877][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.951368][ T5718] usb 3-1: config 0 descriptor?? [ 133.810772][ T5718] input: HID 046d:c538 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C538.0001/input/input5 [ 134.327535][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.456201][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 134.456247][ T31] audit: type=1400 audit(1788778517.065:1013): avc: denied { map_create } for pid=6545 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.631098][ T31] audit: type=1400 audit(1788778517.235:1014): avc: denied { read write } for pid=6545 comm="syz.2.147" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.681771][ T31] audit: type=1400 audit(1788778517.285:1015): avc: denied { create } for pid=6563 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.735079][ T31] audit: type=1400 audit(1788778517.295:1016): avc: denied { open } for pid=6545 comm="syz.2.147" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.813234][ T31] audit: type=1400 audit(1788778517.425:1017): avc: denied { setopt } for pid=6563 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.866935][ T31] audit: type=1400 audit(1788778517.475:1018): avc: denied { create } for pid=6563 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.868172][ T31] audit: type=1400 audit(1788778517.485:1019): avc: denied { bind } for pid=6563 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.892768][ T31] audit: type=1400 audit(1788778517.505:1020): avc: denied { write } for pid=6563 comm="syz.0.153" path="socket:[11280]" dev="sockfs" ino=11280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.893727][ T6579] Bluetooth: MGMT ver 1.23 [ 134.901947][ T6579] IPv6: sit1: Disabled Multicast RS [ 134.902690][ T6579] sit1: entered allmulticast mode [ 134.993050][ T31] audit: type=1400 audit(1788778517.605:1021): avc: denied { bind } for pid=6572 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.045034][ T31] audit: type=1400 audit(1788778517.655:1022): avc: denied { mounton } for pid=6545 comm="syz.2.147" path="/25/file0" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.045116][ T6577] fuse: Bad value for 'fd' [ 135.589197][ T6564] lo speed is unknown, defaulting to 1000 [ 135.611710][ T5718] hid-generic 0003:046D:C538.0001: input,hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c538] on usb-dummy_hcd.2-1/input0 [ 136.639243][ T986] usb 3-1: USB disconnect, device number 9 [ 137.079055][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.079113][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=ce.79 [ 137.126420][ T25] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 137.126453][ T25] usb 1-1: can't read configurations, error -71 [ 137.782679][ T6613] veth0_macvtap: left promiscuous mode [ 137.782937][ T6613] macvtap0: entered allmulticast mode [ 137.801114][ T6613] use of bytesused == 0 is deprecated and will be removed in the future, [ 137.801147][ T6613] use the actual size instead. [ 139.116079][ T6643] comedi comedi3: comedi_config --init_data is deprecated [ 139.743782][ T4926] Bluetooth: hci4: command 0x0406 tx timeout [ 140.092799][ T31] kauditd_printk_skb: 82 callbacks suppressed [ 140.100468][ T31] audit: type=1400 audit(1788778522.705:1103): avc: denied { write } for pid=6650 comm="syz.4.175" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.228000][ T6652] lo speed is unknown, defaulting to 1000 [ 140.717891][ T31] audit: type=1400 audit(1788778523.325:1104): avc: denied { read } for pid=6650 comm="syz.4.175" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 140.718423][ T31] audit: type=1400 audit(1788778523.325:1105): avc: denied { open } for pid=6650 comm="syz.4.175" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 141.026281][ T31] audit: type=1400 audit(1788778523.415:1106): avc: denied { create } for pid=6650 comm="syz.4.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.026323][ T31] audit: type=1400 audit(1788778523.635:1107): avc: denied { getopt } for pid=6634 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.046494][ T31] audit: type=1400 audit(1788778523.655:1108): avc: denied { read } for pid=6634 comm="syz.3.171" path="socket:[11377]" dev="sockfs" ino=11377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.091997][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.129962][ T31] audit: type=1400 audit(1788778523.745:1109): avc: denied { mount } for pid=6659 comm="syz.2.176" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 141.131848][ T31] audit: type=1400 audit(1788778523.745:1110): avc: denied { read write } for pid=6659 comm="syz.2.176" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 141.131882][ T31] audit: type=1400 audit(1788778523.745:1111): avc: denied { open } for pid=6659 comm="syz.2.176" path="/28/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 141.197977][ T6660] FAULT_INJECTION: forcing a failure. [ 141.197977][ T6660] name failslab, interval 1, probability 0, space 0, times 0 [ 141.198009][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: syz.2.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.198030][ T6660] Tainted: [L]=SOFTLOCKUP [ 141.198036][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 141.198045][ T6660] Call Trace: [ 141.198050][ T6660] [ 141.198056][ T6660] dump_stack_lvl+0x100/0x190 [ 141.198083][ T6660] should_fail_ex.cold+0x5/0xa [ 141.198106][ T6660] should_failslab+0xc2/0x120 [ 141.198126][ T6660] __kmalloc_noprof+0xfc/0x840 [ 141.198143][ T6660] ? tomoyo_encode2+0xfb/0x3c0 [ 141.198164][ T6660] tomoyo_encode2+0xfb/0x3c0 [ 141.198183][ T6660] tomoyo_encode+0x29/0x50 [ 141.198199][ T6660] tomoyo_realpath_from_path+0x18c/0x690 [ 141.198220][ T6660] tomoyo_path_number_perm+0x23c/0x580 [ 141.198243][ T6660] ? tomoyo_path_number_perm+0x22e/0x580 [ 141.198267][ T6660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.198298][ T6660] ? __lock_acquire+0x5c0/0x1f40 [ 141.198325][ T6660] ? __fget_files+0x34/0x3d0 [ 141.198344][ T6660] ? find_held_lock+0x2b/0x80 [ 141.198370][ T6660] ? hook_file_ioctl_common+0x140/0x440 [ 141.198395][ T6660] ? __fget_files+0x21f/0x3d0 [ 141.198416][ T6660] security_file_ioctl+0xd3/0x230 [ 141.198442][ T6660] __x64_sys_ioctl+0xb7/0x210 [ 141.198459][ T6660] do_syscall_64+0x123/0x790 [ 141.198481][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.198497][ T6660] RIP: 0033:0x7f3d4639e159 [ 141.198511][ T6660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.198526][ T6660] RSP: 002b:00007f3d4727f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.198542][ T6660] RAX: ffffffffffffffda RBX: 00007f3d46625fa0 RCX: 00007f3d4639e159 [ 141.198553][ T6660] RDX: 0000200000000000 RSI: 00000000c138fd07 RDI: 0000000000000003 [ 141.198562][ T6660] RBP: 00007f3d4727f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.198571][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.198580][ T6660] R13: 00007f3d46626038 R14: 00007f3d46625fa0 R15: 00007fffac7a65a8 [ 141.198602][ T6660] [ 141.198617][ T6660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.198786][ T31] audit: type=1400 audit(1788778523.815:1112): avc: denied { ioctl } for pid=6659 comm="syz.2.176" path="/28/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 141.222426][ T6662] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 73736572676e69 [ 141.837223][ T986] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.990444][ T986] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 141.991297][ T986] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.991333][ T986] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 141.991358][ T986] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.992723][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 141.992742][ T986] usb 4-1: Product: syz [ 141.992754][ T986] usb 4-1: Manufacturer: syz [ 142.001425][ T6668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 142.002983][ T986] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 142.039843][ T986] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 143.103508][ T983] usb 4-1: USB disconnect, device number 7 [ 143.262336][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.262390][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=ce.79 [ 143.283417][ T25] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 143.283453][ T25] usb 1-1: can't read configurations, error -71 [ 143.320733][ T983] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 143.321311][ T983] garmin_gps 4-1:1.0: device disconnected [ 144.784288][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 144.955100][ T6689] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 146.037454][ T983] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.075579][ T6704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.100347][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 146.100367][ T31] audit: type=1400 audit(1788778528.715:1169): avc: denied { mount } for pid=6701 comm="syz.4.189" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.110494][ T31] audit: type=1400 audit(1788778528.725:1170): avc: denied { create } for pid=6701 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.113742][ T31] audit: type=1400 audit(1788778528.725:1171): avc: denied { bind } for pid=6701 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.169478][ T31] audit: type=1400 audit(1788778528.785:1172): avc: denied { remount } for pid=6701 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.195715][ T31] audit: type=1400 audit(1788778528.805:1173): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 146.201193][ T31] audit: type=1400 audit(1788778528.815:1174): avc: denied { create } for pid=6701 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.206603][ T31] audit: type=1400 audit(1788778528.815:1175): avc: denied { getopt } for pid=6701 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.350896][ T5780] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.505167][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 146.506293][ T983] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 146.547332][ T5780] usb 3-1: Using ep0 maxpacket: 16 [ 146.549624][ T5780] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.552579][ T5780] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 146.552636][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.559553][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.559617][ T5780] usb 3-1: Product: syz [ 146.559651][ T5780] usb 3-1: Manufacturer: syz [ 146.559711][ T5780] usb 3-1: SerialNumber: syz [ 146.582448][ T983] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 146.582477][ T983] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 146.582494][ T983] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.582510][ T983] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 146.582549][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.707864][ T31] audit: type=1400 audit(1788778529.325:1176): avc: denied { ioctl } for pid=6709 comm="syz.3.192" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.662976][ T31] audit: type=1400 audit(1788778530.275:1177): avc: denied { create } for pid=6715 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.737037][ T31] audit: type=1400 audit(1788778530.345:1178): avc: denied { setopt } for pid=6715 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.830350][ T5780] usb 3-1: config 0 descriptor?? [ 148.464768][ T5780] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 148.464819][ T5780] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 148.660586][ T6704] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.668187][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.683708][ T6704] Bluetooth: hci5: Frame reassembly failed (-84) [ 148.766560][ T6723] lo speed is unknown, defaulting to 1000 [ 148.783933][ T986] usb 2-1: USB disconnect, device number 9 [ 148.857011][ T6725] FAULT_INJECTION: forcing a failure. [ 148.857011][ T6725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.857076][ T6725] CPU: 1 UID: 0 PID: 6725 Comm: syz.0.195 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.857096][ T6725] Tainted: [L]=SOFTLOCKUP [ 148.857101][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 148.857113][ T6725] Call Trace: [ 148.857119][ T6725] [ 148.857125][ T6725] dump_stack_lvl+0x100/0x190 [ 148.857154][ T6725] should_fail_ex.cold+0x5/0xa [ 148.857178][ T6725] _copy_from_user+0x2e/0xd0 [ 148.857203][ T6725] kvm_vm_ioctl+0x1346/0x42d0 [ 148.857229][ T6725] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 148.857261][ T6725] ? kasan_quarantine_put+0x104/0x240 [ 148.857277][ T6725] ? lockdep_hardirqs_on+0x7d/0x110 [ 148.857298][ T6725] ? find_held_lock+0x2b/0x80 [ 148.857319][ T6725] ? tomoyo_path_number_perm+0x28f/0x580 [ 148.857343][ T6725] ? tomoyo_path_number_perm+0x28f/0x580 [ 148.857376][ T6725] ? tomoyo_path_number_perm+0x188/0x580 [ 148.857400][ T6725] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 148.857430][ T6725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.857449][ T6725] ? do_vfs_ioctl+0x226/0x13e0 [ 148.857465][ T6725] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 148.857479][ T6725] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 148.857497][ T6725] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 148.857517][ T6725] ? __fget_files+0x34/0x3d0 [ 148.857545][ T6725] ? selinux_file_ioctl+0x13b/0x290 [ 148.857559][ T6725] ? selinux_file_ioctl+0xb6/0x290 [ 148.857575][ T6725] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 148.857592][ T6725] __x64_sys_ioctl+0x18e/0x210 [ 148.857609][ T6725] do_syscall_64+0x123/0x790 [ 148.857630][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.857646][ T6725] RIP: 0033:0x7fc65739e159 [ 148.857659][ T6725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.857674][ T6725] RSP: 002b:00007fc65825c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.857691][ T6725] RAX: ffffffffffffffda RBX: 00007fc657625fa0 RCX: 00007fc65739e159 [ 148.857701][ T6725] RDX: 00002000000002c0 RSI: 000000004020ae76 RDI: 0000000000000004 [ 148.857711][ T6725] RBP: 00007fc65825c090 R08: 0000000000000000 R09: 0000000000000000 [ 148.857720][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.857729][ T6725] R13: 00007fc657626038 R14: 00007fc657625fa0 R15: 00007fffb7b1af78 [ 148.857750][ T6725] [ 149.967188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 150.227145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 150.237147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.398425][ T5780] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 150.404761][ T5780] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 150.412124][ T5780] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 150.412147][ T5780] em28xx 3-1:0.0: No AC97 audio processor [ 150.678966][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 151.164055][ T30] usb 3-1: USB disconnect, device number 10 [ 151.395917][ T30] em28xx 3-1:0.0: Disconnecting em28xx [ 151.510530][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 151.510582][ T31] audit: type=1400 audit(1788778534.125:1214): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.568294][ T31] audit: type=1400 audit(1788778534.185:1215): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 151.610789][ T31] audit: type=1400 audit(1788778534.225:1216): avc: denied { open } for pid=5616 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.649195][ T5780] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 151.676063][ T31] audit: type=1400 audit(1788778534.285:1217): avc: denied { ioctl } for pid=5616 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.682458][ T31] audit: type=1400 audit(1788778534.295:1218): avc: denied { create } for pid=6746 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.921003][ T31] audit: type=1400 audit(1788778534.525:1219): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.944399][ T31] audit: type=1400 audit(1788778534.525:1220): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.967280][ T31] audit: type=1400 audit(1788778534.525:1221): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.027064][ T31] audit: type=1400 audit(1788778534.625:1222): avc: denied { read } for pid=5271 comm="dhcpcd" name="n43" dev="tmpfs" ino=2782 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.029514][ T31] audit: type=1400 audit(1788778534.625:1223): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n43" dev="tmpfs" ino=2782 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.202754][ T30] em28xx: Freeing device [ 152.826841][ T5780] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.931522][ T4926] Bluetooth: hci3: Malformed Event: 0x02 [ 154.377071][ T6794] siw: device registration error -23 [ 154.435289][ T6788] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 154.535614][ T6788] 9p: Bad value for 'rfdno' [ 155.131133][ T6777] netlink: 'syz.0.208': attribute type 5 has an invalid length. [ 156.399062][ T6803] [U]  [ 156.433636][ T6804] FAULT_INJECTION: forcing a failure. [ 156.433636][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 156.433689][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.0.216 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.433713][ T6804] Tainted: [L]=SOFTLOCKUP [ 156.433718][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 156.433726][ T6804] Call Trace: [ 156.433731][ T6804] [ 156.433736][ T6804] dump_stack_lvl+0x100/0x190 [ 156.433764][ T6804] should_fail_ex.cold+0x5/0xa [ 156.433788][ T6804] should_failslab+0xc2/0x120 [ 156.433808][ T6804] __kmalloc_noprof+0xfc/0x840 [ 156.433825][ T6804] ? __pfx_dynamic_dname+0x10/0x10 [ 156.433840][ T6804] ? tomoyo_encode2+0xfb/0x3c0 [ 156.433862][ T6804] tomoyo_encode2+0xfb/0x3c0 [ 156.433881][ T6804] tomoyo_encode+0x29/0x50 [ 156.433896][ T6804] tomoyo_realpath_from_path+0x18c/0x690 [ 156.433918][ T6804] tomoyo_path_number_perm+0x23c/0x580 [ 156.433940][ T6804] ? tomoyo_path_number_perm+0x22e/0x580 [ 156.433964][ T6804] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.433996][ T6804] ? __lock_acquire+0x5c0/0x1f40 [ 156.434022][ T6804] ? __fget_files+0x34/0x3d0 [ 156.434041][ T6804] ? find_held_lock+0x2b/0x80 [ 156.434061][ T6804] ? hook_file_ioctl_common+0x140/0x440 [ 156.434085][ T6804] ? __fget_files+0x21f/0x3d0 [ 156.434106][ T6804] security_file_ioctl+0xd3/0x230 [ 156.434132][ T6804] __x64_sys_ioctl+0xb7/0x210 [ 156.434149][ T6804] do_syscall_64+0x123/0x790 [ 156.434171][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.434186][ T6804] RIP: 0033:0x7fc65739e159 [ 156.434200][ T6804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.434214][ T6804] RSP: 002b:00007fc65825c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.434230][ T6804] RAX: ffffffffffffffda RBX: 00007fc657625fa0 RCX: 00007fc65739e159 [ 156.434240][ T6804] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 156.434256][ T6804] RBP: 00007fc65825c090 R08: 0000000000000000 R09: 0000000000000000 [ 156.434265][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.434274][ T6804] R13: 00007fc657626038 R14: 00007fc657625fa0 R15: 00007fffb7b1af78 [ 156.434295][ T6804] [ 156.434309][ T6804] ERROR: Out of memory at tomoyo_realpath_from_path. [ 156.518768][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 156.614792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 156.632602][ T5747] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.724888][ T31] kauditd_printk_skb: 81 callbacks suppressed [ 156.732628][ T31] audit: type=1400 audit(1788778539.335:1305): avc: denied { write } for pid=6811 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.732701][ T31] audit: type=1400 audit(1788778539.335:1306): avc: denied { remove_name } for pid=6811 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.732755][ T31] audit: type=1400 audit(1788778539.335:1307): avc: denied { unlink } for pid=6811 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 156.805715][ T31] audit: type=1400 audit(1788778539.415:1308): avc: denied { write } for pid=6814 comm="syz.2.219" name="frontend0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 156.830622][ T5747] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 156.839975][ T31] audit: type=1400 audit(1788778539.445:1309): avc: denied { write } for pid=6812 comm="syz.4.218" name="ip_vs_stats_percpu" dev="proc" ino=4026533435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 156.865947][ T5747] usb 1-1: Dual-Role OTG device on HNP port [ 156.872103][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.872131][ T5747] usb 1-1: SerialNumber: 1234567890 [ 156.901601][ T31] audit: type=1400 audit(1788778539.515:1310): avc: denied { create } for pid=6814 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.925528][ T31] audit: type=1400 audit(1788778539.515:1311): avc: denied { create } for pid=6812 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.925579][ T31] audit: type=1400 audit(1788778539.515:1312): avc: denied { setopt } for pid=6814 comm="syz.2.219" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.925626][ T31] audit: type=1400 audit(1788778539.535:1313): avc: denied { write } for pid=6818 comm="syz.0.220" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.938397][ T6819] random: crng reseeded on system resumption [ 156.947318][ T31] audit: type=1400 audit(1788778539.555:1314): avc: denied { open } for pid=6818 comm="syz.0.220" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.067478][ T5747] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, be:b9:dd:95:e6:d7 [ 157.536430][ T6829] FAULT_INJECTION: forcing a failure. [ 157.536430][ T6829] name failslab, interval 1, probability 0, space 0, times 0 [ 157.536528][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: syz.3.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.536554][ T6829] Tainted: [L]=SOFTLOCKUP [ 157.536560][ T6829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 157.536569][ T6829] Call Trace: [ 157.536573][ T6829] [ 157.536577][ T6829] dump_stack_lvl+0x100/0x190 [ 157.536598][ T6829] should_fail_ex.cold+0x5/0xa [ 157.536614][ T6829] should_failslab+0xc2/0x120 [ 157.536628][ T6829] __kmalloc_noprof+0xfc/0x840 [ 157.536639][ T6829] ? __rcu_read_unlock+0x26a/0x5e0 [ 157.536651][ T6829] ? tomoyo_encode2+0xfb/0x3c0 [ 157.536667][ T6829] tomoyo_encode2+0xfb/0x3c0 [ 157.536679][ T6829] ? __get_fs_type+0xe3/0x200 [ 157.536696][ T6829] tomoyo_encode+0x29/0x50 [ 157.536706][ T6829] tomoyo_mount_acl+0x388/0x8b0 [ 157.536721][ T6829] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 157.536731][ T6829] ? __schedule+0x315b/0x6920 [ 157.536745][ T6829] ? rcu_is_watching+0x13/0xc0 [ 157.536761][ T6829] ? __lock_acquire+0x5c0/0x1f40 [ 157.536778][ T6829] ? tomoyo_mount_permission+0x1f6/0x460 [ 157.536791][ T6829] ? tomoyo_domain+0xb2/0x150 [ 157.536804][ T6829] ? tomoyo_profile+0x47/0x60 [ 157.536818][ T6829] tomoyo_mount_permission+0x214/0x460 [ 157.536829][ T6829] ? tomoyo_mount_permission+0x1f6/0x460 [ 157.536840][ T6829] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 157.536859][ T6829] security_sb_mount+0xdd/0x270 [ 157.536878][ T6829] path_mount+0x158/0x24c0 [ 157.536896][ T6829] ? __pfx_path_mount+0x10/0x10 [ 157.536910][ T6829] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.536926][ T6829] ? putname+0xb1/0x110 [ 157.536938][ T6829] ? kmem_cache_free+0x127/0x6c0 [ 157.536959][ T6829] ? __x64_sys_mount+0x293/0x310 [ 157.536974][ T6829] __x64_sys_mount+0x293/0x310 [ 157.536990][ T6829] ? __pfx___x64_sys_mount+0x10/0x10 [ 157.537009][ T6829] do_syscall_64+0x123/0x790 [ 157.537024][ T6829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.537035][ T6829] RIP: 0033:0x7f19b319e159 [ 157.537045][ T6829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.537056][ T6829] RSP: 002b:00007f19b3f80028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.537067][ T6829] RAX: ffffffffffffffda RBX: 00007f19b3426090 RCX: 00007f19b319e159 [ 157.537074][ T6829] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 0000000000000000 [ 157.537080][ T6829] RBP: 00007f19b3f80090 R08: 0000200000000200 R09: 0000000000000000 [ 157.537087][ T6829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.537093][ T6829] R13: 00007f19b3426128 R14: 00007f19b3426090 R15: 00007fff4767fb98 [ 157.537114][ T6829] [ 158.173686][ T6821] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 158.289041][ T6123] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 158.557235][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.088586][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 159.090680][ T10] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 159.094112][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.154981][ T10] usb 3-1: config 0 descriptor?? [ 159.180533][ T10] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 159.240315][ T10] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 159.542594][ T6861] FAULT_INJECTION: forcing a failure. [ 159.542594][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 159.542708][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.1.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.542734][ T6861] Tainted: [L]=SOFTLOCKUP [ 159.542741][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 159.542752][ T6861] Call Trace: [ 159.542759][ T6861] [ 159.542774][ T6861] dump_stack_lvl+0x100/0x190 [ 159.542805][ T6861] should_fail_ex.cold+0x5/0xa [ 159.542831][ T6861] should_failslab+0xc2/0x120 [ 159.542855][ T6861] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 159.542875][ T6861] ? __alloc_skb+0x5b7/0x710 [ 159.542893][ T6861] ? __alloc_skb+0x140/0x710 [ 159.542914][ T6861] __alloc_skb+0x140/0x710 [ 159.542930][ T6861] ? __alloc_skb+0x5b7/0x710 [ 159.542948][ T6861] ? __pfx___alloc_skb+0x10/0x10 [ 159.542972][ T6861] netlink_alloc_large_skb+0x69/0x150 [ 159.543003][ T6861] netlink_sendmsg+0x680/0xda0 [ 159.543036][ T6861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.543071][ T6861] ? selinux_socket_sendmsg+0x198/0x2f0 [ 159.543105][ T6861] ____sys_sendmsg+0xa4d/0xbe0 [ 159.543128][ T6861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.543158][ T6861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.543193][ T6861] ___sys_sendmsg+0x190/0x1e0 [ 159.543220][ T6861] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.543245][ T6861] ? rcu_is_watching+0x13/0xc0 [ 159.543277][ T6861] ? find_held_lock+0x2b/0x80 [ 159.543318][ T6861] __sys_sendmsg+0x160/0x210 [ 159.543339][ T6861] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.543371][ T6861] do_syscall_64+0x123/0x790 [ 159.543397][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.543416][ T6861] RIP: 0033:0x7fa68f39e159 [ 159.543432][ T6861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.543449][ T6861] RSP: 002b:00007fa68d5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.543468][ T6861] RAX: ffffffffffffffda RBX: 00007fa68f626090 RCX: 00007fa68f39e159 [ 159.543481][ T6861] RDX: 0000000004040000 RSI: 0000200000003c40 RDI: 0000000000000004 [ 159.543492][ T6861] RBP: 00007fa68d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.543503][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.543514][ T6861] R13: 00007fa68f626128 R14: 00007fa68f626090 R15: 00007ffcace58c38 [ 159.543539][ T6861] [ 160.160805][ T6821] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 162.717201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 162.795721][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 162.795774][ T31] audit: type=1400 audit(1788778545.405:1330): avc: denied { read write } for pid=6871 comm="syz.1.229" name="vbi5" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.839255][ T31] audit: type=1400 audit(1788778545.455:1331): avc: denied { open } for pid=6871 comm="syz.1.229" path="/dev/vbi5" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 162.885989][ T31] audit: type=1400 audit(1788778545.495:1332): avc: denied { search } for pid=6875 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.886182][ T31] audit: type=1400 audit(1788778545.495:1333): avc: denied { search } for pid=6875 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.886327][ T31] audit: type=1400 audit(1788778545.495:1334): avc: denied { search } for pid=6875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.886472][ T31] audit: type=1400 audit(1788778545.495:1335): avc: denied { search } for pid=6875 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.953082][ T31] audit: type=1400 audit(1788778545.565:1336): avc: denied { prog_load } for pid=6871 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 162.958420][ T31] audit: type=1400 audit(1788778545.575:1337): avc: denied { bpf } for pid=6871 comm="syz.1.229" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.958791][ T31] audit: type=1400 audit(1788778545.575:1338): avc: denied { perfmon } for pid=6871 comm="syz.1.229" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.963095][ T31] audit: type=1400 audit(1788778545.575:1339): avc: denied { prog_run } for pid=6871 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.147331][ T4926] Bluetooth: hci3: Malformed Event: 0x02 [ 164.164460][ T6880] FAULT_INJECTION: forcing a failure. [ 164.164460][ T6880] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 164.164522][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.4.230 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.164547][ T6880] Tainted: [L]=SOFTLOCKUP [ 164.164554][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 164.164564][ T6880] Call Trace: [ 164.164571][ T6880] [ 164.164578][ T6880] dump_stack_lvl+0x100/0x190 [ 164.164607][ T6880] should_fail_ex.cold+0x5/0xa [ 164.164632][ T6880] ? prepare_alloc_pages+0x16d/0x5b0 [ 164.164655][ T6880] should_fail_alloc_page+0xeb/0x140 [ 164.164678][ T6880] prepare_alloc_pages+0x1f0/0x5b0 [ 164.164704][ T6880] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 164.164735][ T6880] ? sock_alloc_send_pskb+0x801/0x980 [ 164.164761][ T6880] ? tun_get_user+0x7d0/0x3cc0 [ 164.164777][ T6880] ? tun_chr_write_iter+0xdc/0x200 [ 164.164793][ T6880] ? vfs_write+0x6af/0x1050 [ 164.164810][ T6880] ? ksys_write+0x12a/0x250 [ 164.164825][ T6880] ? do_syscall_64+0x123/0x790 [ 164.164845][ T6880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.164873][ T6880] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 164.164919][ T6880] ? trace_kmalloc+0xeb/0x110 [ 164.164940][ T6880] ? __kasan_kmalloc+0xaa/0xb0 [ 164.164960][ T6880] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 164.164978][ T6880] ? trace_kmem_cache_alloc+0xdd/0x100 [ 164.164998][ T6880] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.165020][ T6880] ? policy_nodemask+0xed/0x4f0 [ 164.165046][ T6880] alloc_pages_mpol+0x201/0x550 [ 164.165068][ T6880] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 164.165089][ T6880] ? __alloc_skb+0x5b7/0x710 [ 164.165111][ T6880] ? __pfx___alloc_skb+0x10/0x10 [ 164.165127][ T6880] ? lock_acquire+0x1d1/0x380 [ 164.165145][ T6880] ? is_bpf_text_address+0x25/0x1a0 [ 164.165172][ T6880] alloc_pages_noprof+0x1a/0x160 [ 164.165196][ T6880] alloc_skb_with_frags+0x4e7/0x760 [ 164.165212][ T6880] ? __lock_acquire+0x5c0/0x1f40 [ 164.165230][ T6880] ? kernel_text_address+0x8d/0x100 [ 164.165259][ T6880] sock_alloc_send_pskb+0x801/0x980 [ 164.165287][ T6880] ? lock_acquire+0x1d1/0x380 [ 164.165308][ T6880] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 164.165339][ T6880] ? avc_has_perm_noaudit+0x145/0x3b0 [ 164.165369][ T6880] tun_get_user+0x7d0/0x3cc0 [ 164.165396][ T6880] ? __lock_acquire+0x5c0/0x1f40 [ 164.165414][ T6880] ? __pfx_tun_get_user+0x10/0x10 [ 164.165431][ T6880] ? __file_has_perm+0x336/0x460 [ 164.165458][ T6880] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 164.165487][ T6880] ? find_held_lock+0x2b/0x80 [ 164.165511][ T6880] ? tun_get+0x191/0x370 [ 164.165526][ T6880] ? tun_get+0x191/0x370 [ 164.165549][ T6880] tun_chr_write_iter+0xdc/0x200 [ 164.165569][ T6880] vfs_write+0x6af/0x1050 [ 164.165587][ T6880] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 164.165605][ T6880] ? __pfx_vfs_write+0x10/0x10 [ 164.165619][ T6880] ? find_held_lock+0x2b/0x80 [ 164.165653][ T6880] ksys_write+0x12a/0x250 [ 164.165670][ T6880] ? __pfx_ksys_write+0x10/0x10 [ 164.165692][ T6880] do_syscall_64+0x123/0x790 [ 164.165715][ T6880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.165732][ T6880] RIP: 0033:0x7fc30e95e98e [ 164.165748][ T6880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.165765][ T6880] RSP: 002b:00007fc30f8a9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.165782][ T6880] RAX: ffffffffffffffda RBX: 00007fc30f8aa6c0 RCX: 00007fc30e95e98e [ 164.165793][ T6880] RDX: 0000000000001382 RSI: 0000200000002740 RDI: 00000000000000c8 [ 164.165804][ T6880] RBP: 00007fc30f8aa090 R08: 0000000000000000 R09: 0000000000000000 [ 164.165815][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.165826][ T6880] R13: 00007fc30ec26038 R14: 00007fc30ec25fa0 R15: 00007ffded155198 [ 164.165851][ T6880] [ 164.406532][ T6883] netlink: 'syz.0.231': attribute type 5 has an invalid length. [ 164.604298][ T6893] netlink: 'syz.3.225': attribute type 1 has an invalid length. [ 165.680966][ T5780] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.851049][ T5780] usb 4-1: Using ep0 maxpacket: 8 [ 165.861036][ T5780] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 165.995746][ T5780] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 165.995799][ T5780] usb 4-1: config 0 has no interface number 0 [ 165.996068][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.224270][ T5780] usb 4-1: config 0 descriptor?? [ 166.575220][ T5780] viperboard 4-1:0.143: version 0.00 found at bus 004 address 008 [ 166.743114][ T6893] bond2: entered promiscuous mode [ 166.756562][ T5780] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 166.756596][ T5780] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 166.790055][ T6893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.277148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.287140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 167.678099][ T6895] veth3: entered allmulticast mode [ 167.695446][ T6895] bond2: (slave veth3): making interface the new active one [ 167.695489][ T6895] veth3: entered promiscuous mode [ 167.711727][ T6895] bond2: (slave veth3): Enslaving as an active interface with an up link [ 167.846893][ T983] usb 3-1: USB disconnect, device number 11 [ 167.903055][ T31] kauditd_printk_skb: 58 callbacks suppressed [ 167.903098][ T31] audit: type=1400 audit(1788778550.515:1398): avc: denied { read } for pid=6912 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.936312][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.936792][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.955305][ T31] audit: type=1400 audit(1788778550.575:1399): avc: denied { read open } for pid=6912 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.986974][ T31] audit: type=1400 audit(1788778550.595:1400): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 167.997363][ T31] audit: type=1400 audit(1788778550.595:1401): avc: denied { create } for pid=6892 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 168.160377][ T31] audit: type=1400 audit(1788778550.775:1402): avc: denied { mount } for pid=6917 comm="syz.2.237" name="/" dev="autofs" ino=12028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 168.170274][ T31] audit: type=1400 audit(1788778550.775:1403): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 168.210417][ T31] audit: type=1400 audit(1788778550.825:1404): avc: denied { create } for pid=6917 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.235545][ T31] audit: type=1400 audit(1788778550.845:1405): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 168.437840][ T6921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.791372][ T31] audit: type=1400 audit(1788778551.405:1406): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 168.940546][ T31] audit: type=1400 audit(1788778551.555:1407): avc: denied { read } for pid=6926 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 168.943371][ T983] usb 4-1: USB disconnect, device number 8 [ 169.013555][ T4926] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 255 [ 169.130497][ T6932] batman_adv: batadv0: Adding interface: veth0 [ 169.138014][ T6932] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.138048][ T6932] batman_adv: batadv0: Interface activated: veth0 [ 169.214261][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.221864][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.240737][ T6932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.240780][ T6932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.250080][ T6932] batman_adv: batadv0: Interface deactivated: veth0 [ 169.250096][ T6932] batman_adv: batadv0: Removing interface: veth0 [ 169.256194][ T6941] SELinux: unknown common [ 169.256248][ T6941] SELinux: invalid class [ 169.256451][ T6941] SELinux: failed to load policy [ 169.335568][ T10] usb 1-1: USB disconnect, device number 9 [ 169.336860][ T10] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 169.873684][ T5780] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 170.286671][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 170.311272][ T5780] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 170.368887][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.368943][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 170.368975][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 170.368998][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 170.369022][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 170.369044][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.574589][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.574639][ T5780] usb 2-1: Product: syz [ 170.574653][ T5780] usb 2-1: Manufacturer: syz [ 170.574665][ T5780] usb 2-1: SerialNumber: syz [ 170.718688][ T5780] usb 2-1: config 0 descriptor?? [ 170.724972][ T6944] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.178472][ T6944] comedi comedi0: rti800: I/O base address not correctly aligned [ 171.305563][ T6944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.242'. [ 172.333562][ T4926] Bluetooth: hci4: Malformed Event: 0x02 [ 172.358216][ T5780] rc_core: IR keymap rc-snapstream-firefly not found [ 172.358252][ T5780] Registered IR keymap rc-empty [ 172.361516][ T5780] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 172.364491][ T5780] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 172.405689][ T5780] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 172.433107][ T6967] netlink: 'syz.4.244': attribute type 5 has an invalid length. [ 172.447782][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.450133][ T5780] usb 2-1: USB disconnect, device number 10 [ 172.450231][ C1] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 172.936519][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 172.936564][ T31] audit: type=1400 audit(1788778555.545:1440): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 173.153575][ T31] audit: type=1400 audit(1788778555.765:1441): avc: denied { mount } for pid=6993 comm="syz.2.248" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 173.154837][ T6996] FAULT_INJECTION: forcing a failure. [ 173.154837][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 173.154873][ T6996] CPU: 1 UID: 0 PID: 6996 Comm: syz.2.248 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.154898][ T6996] Tainted: [L]=SOFTLOCKUP [ 173.154911][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 173.154921][ T6996] Call Trace: [ 173.154928][ T6996] [ 173.154935][ T6996] dump_stack_lvl+0x100/0x190 [ 173.154966][ T6996] should_fail_ex.cold+0x5/0xa [ 173.154992][ T6996] should_failslab+0xc2/0x120 [ 173.155015][ T6996] kmem_cache_alloc_noprof+0x92/0x6a0 [ 173.155035][ T6996] ? alloc_empty_file+0x5b/0x1c0 [ 173.155064][ T6996] alloc_empty_file+0x5b/0x1c0 [ 173.155088][ T6996] path_openat+0xdb/0x2440 [ 173.155113][ T6996] ? __pfx_path_openat+0x10/0x10 [ 173.155142][ T6996] do_file_open+0x20e/0x430 [ 173.155163][ T6996] ? __pfx_do_file_open+0x10/0x10 [ 173.155198][ T6996] ? _raw_spin_unlock+0x28/0x50 [ 173.155215][ T6996] ? alloc_fd+0x471/0x7a0 [ 173.155237][ T6996] do_sys_openat2+0x10f/0x1e0 [ 173.155257][ T6996] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.155278][ T6996] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.155299][ T6996] ? __fget_files+0x21f/0x3d0 [ 173.155321][ T6996] __x64_sys_openat+0x12d/0x210 [ 173.155342][ T6996] ? __pfx___x64_sys_openat+0x10/0x10 [ 173.155362][ T6996] ? ksys_write+0x1ac/0x250 [ 173.155387][ T6996] do_syscall_64+0x123/0x790 [ 173.155408][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.155424][ T6996] RIP: 0033:0x7f3d4639e159 [ 173.155438][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.155454][ T6996] RSP: 002b:00007f3d4727f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.155470][ T6996] RAX: ffffffffffffffda RBX: 00007f3d46625fa0 RCX: 00007f3d4639e159 [ 173.155481][ T6996] RDX: 0000000000080201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 173.155491][ T6996] RBP: 00007f3d4727f090 R08: 0000000000000000 R09: 0000000000000000 [ 173.155501][ T6996] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 173.155510][ T6996] R13: 00007f3d46626038 R14: 00007f3d46625fa0 R15: 00007fffac7a65a8 [ 173.155532][ T6996] [ 173.216676][ T31] audit: type=1400 audit(1788778555.815:1442): avc: denied { read write } for pid=6992 comm="syz.1.249" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 173.216729][ T31] audit: type=1400 audit(1788778555.815:1443): avc: denied { open } for pid=6992 comm="syz.1.249" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 173.223352][ T31] audit: type=1400 audit(1788778555.835:1444): avc: denied { ioctl } for pid=6992 comm="syz.1.249" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.356484][ T31] audit: type=1400 audit(1788778555.955:1445): avc: denied { create } for pid=7001 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.365595][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 173.374268][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 173.382633][ T31] audit: type=1400 audit(1788778555.995:1446): avc: denied { read write } for pid=6999 comm="syz.3.252" name="video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 173.382680][ T31] audit: type=1400 audit(1788778555.995:1447): avc: denied { open } for pid=6999 comm="syz.3.252" path="/dev/video36" dev="devtmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 173.399877][ T31] audit: type=1400 audit(1788778556.005:1448): avc: denied { setopt } for pid=7001 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.414635][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 173.506115][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 173.512752][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.512785][ T10] usb 1-1: SerialNumber: 1234567890 [ 173.700925][ T31] audit: type=1400 audit(1788778556.305:1449): avc: denied { map_read map_write } for pid=6999 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.582659][ T10] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, be:b9:dd:95:e6:d7 [ 174.809709][ T983] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.971713][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 174.978422][ T983] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 174.997977][ T983] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 174.998019][ T983] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 174.998049][ T983] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.998070][ T983] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 174.998113][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.926189][ T4926] Bluetooth: hci4: Malformed Event: 0x02 [ 176.981558][ T5780] usb 4-1: USB disconnect, device number 9 [ 177.111498][ T7040] siw: device registration error -23 [ 177.772186][ T7041] siw: device registration error -23 [ 177.953132][ T31] kauditd_printk_skb: 100 callbacks suppressed [ 177.953174][ T31] audit: type=1400 audit(1788778560.565:1550): avc: denied { mmap_zero } for pid=7031 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 177.979703][ T31] audit: type=1400 audit(1788778560.575:1551): avc: denied { read } for pid=7047 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.979780][ T31] audit: type=1400 audit(1788778560.585:1552): avc: denied { read open } for pid=7047 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.979817][ T31] audit: type=1400 audit(1788778560.585:1553): avc: denied { getattr } for pid=7047 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.027287][ T31] audit: type=1400 audit(1788778560.625:1554): avc: denied { read } for pid=7049 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.027335][ T31] audit: type=1400 audit(1788778560.625:1555): avc: denied { open } for pid=7049 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.031604][ T31] audit: type=1400 audit(1788778560.645:1556): avc: denied { read } for pid=7042 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 178.032004][ T31] audit: type=1400 audit(1788778560.645:1557): avc: denied { mounton } for pid=7043 comm="syz.3.260" path="/51/nfsd" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.036026][ T31] audit: type=1400 audit(1788778560.645:1559): avc: denied { create } for pid=7031 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 178.037808][ T31] audit: type=1400 audit(1788778560.645:1558): avc: denied { mount } for pid=7043 comm="syz.3.260" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 178.045876][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.046287][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.049386][ T7033] netlink: 'syz.4.256': attribute type 5 has an invalid length. [ 178.079035][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.079391][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.697285][ T5747] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 179.116135][ T5747] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 179.122278][ T5747] usb 5-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 179.122385][ T5747] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 179.122449][ T5747] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 179.122558][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.490733][ T7068] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 179.491250][ T7068] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 179.721970][ T7077] FAULT_INJECTION: forcing a failure. [ 179.721970][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.722066][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.0.265 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.722092][ T7077] Tainted: [L]=SOFTLOCKUP [ 179.722098][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 179.722108][ T7077] Call Trace: [ 179.722115][ T7077] [ 179.722122][ T7077] dump_stack_lvl+0x100/0x190 [ 179.722154][ T7077] should_fail_ex.cold+0x5/0xa [ 179.722180][ T7077] _copy_from_user+0x2e/0xd0 [ 179.722211][ T7077] sctp_setsockopt+0x8cc/0xb370 [ 179.722239][ T7077] ? __pfx_sctp_setsockopt+0x10/0x10 [ 179.722257][ T7077] ? selinux_socket_setsockopt+0x18/0x80 [ 179.722287][ T7077] ? selinux_socket_setsockopt+0x6a/0x80 [ 179.722313][ T7077] ? sock_common_setsockopt+0x2e/0xf0 [ 179.722337][ T7077] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 179.722362][ T7077] do_sock_setsockopt+0xf3/0x1d0 [ 179.722387][ T7077] __sys_setsockopt+0x195/0x220 [ 179.722410][ T7077] __x64_sys_setsockopt+0xbd/0x160 [ 179.722427][ T7077] ? do_syscall_64+0xae/0x790 [ 179.722449][ T7077] ? lockdep_hardirqs_on+0x7d/0x110 [ 179.722471][ T7077] do_syscall_64+0x123/0x790 [ 179.722495][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.722514][ T7077] RIP: 0033:0x7fc65739e159 [ 179.722529][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.722546][ T7077] RSP: 002b:00007fc658219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 179.722565][ T7077] RAX: ffffffffffffffda RBX: 00007fc657626180 RCX: 00007fc65739e159 [ 179.722577][ T7077] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000006 [ 179.722588][ T7077] RBP: 00007fc658219090 R08: 000000000000009c R09: 0000000000000000 [ 179.722599][ T7077] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001 [ 179.722610][ T7077] R13: 00007fc657626218 R14: 00007fc657626180 R15: 00007fffb7b1af78 [ 179.722635][ T7077] [ 181.068247][ T5747] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 181.278801][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 181.290267][ T5747] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 181.407705][ T5780] usb 5-1: USB disconnect, device number 5 [ 181.496594][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 181.508776][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 181.569067][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.577608][ T5747] usb 4-1: Product: syz [ 181.577689][ T5747] usb 4-1: Manufacturer: syz [ 181.586517][ T5747] usb 4-1: SerialNumber: syz [ 181.634246][ T7083] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.841616][ T5747] usb 4-1: config 0 descriptor?? [ 181.913720][ T5747] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.925394][ T5747] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 182.969388][ T31] kauditd_printk_skb: 79 callbacks suppressed [ 182.969443][ T31] audit: type=1400 audit(1788778565.545:1638): avc: denied { ioctl } for pid=5605 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.001758][ T31] audit: type=1400 audit(1788778565.605:1639): avc: denied { search } for pid=7102 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.076229][ T31] audit: type=1400 audit(1788778565.685:1640): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 183.118208][ T5747] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 183.118777][ T5747] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 183.119322][ T5747] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 183.119336][ T5747] em28xx 4-1:0.0: No AC97 audio processor [ 183.336692][ T31] audit: type=1400 audit(1788778565.945:1641): avc: denied { mounton } for pid=7106 comm="syz.1.272" path="/56/sys" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 183.336748][ T31] audit: type=1400 audit(1788778565.945:1642): avc: denied { mount } for pid=7106 comm="syz.1.272" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 183.415915][ T31] audit: type=1400 audit(1788778566.025:1643): avc: denied { remount } for pid=7106 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 183.430299][ T31] audit: type=1400 audit(1788778566.045:1644): avc: denied { write } for pid=7106 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.430336][ T31] audit: type=1400 audit(1788778566.045:1645): avc: denied { read } for pid=7106 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.430365][ T31] audit: type=1400 audit(1788778566.045:1646): avc: denied { read } for pid=7082 comm="syz.3.268" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 183.430395][ T31] audit: type=1400 audit(1788778566.045:1647): avc: denied { open } for pid=7082 comm="syz.3.268" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.130353][ T5876] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.145777][ T7089] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.155531][ T7089] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.640091][ T5612] Bluetooth: hci4: Malformed Event: 0x02 [ 185.258100][ T7119] netlink: 'syz.4.274': attribute type 5 has an invalid length. [ 185.333449][ T7127] 9p: Bad value for 'wfdno' [ 185.412596][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.275'. [ 185.432758][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 185.783213][ T7145] FAULT_INJECTION: forcing a failure. [ 185.783213][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 185.783265][ T7145] CPU: 0 UID: 0 PID: 7145 Comm: syz.4.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.783289][ T7145] Tainted: [L]=SOFTLOCKUP [ 185.783295][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 185.783305][ T7145] Call Trace: [ 185.783313][ T7145] [ 185.783320][ T7145] dump_stack_lvl+0x100/0x190 [ 185.783352][ T7145] should_fail_ex.cold+0x5/0xa [ 185.783376][ T7145] should_failslab+0xc2/0x120 [ 185.783398][ T7145] __kmalloc_noprof+0xfc/0x840 [ 185.783416][ T7145] ? tomoyo_encode2+0xfb/0x3c0 [ 185.783440][ T7145] tomoyo_encode2+0xfb/0x3c0 [ 185.783463][ T7145] tomoyo_encode+0x29/0x50 [ 185.783481][ T7145] tomoyo_realpath_from_path+0x18c/0x690 [ 185.783503][ T7145] tomoyo_path_number_perm+0x23c/0x580 [ 185.783527][ T7145] ? tomoyo_path_number_perm+0x22e/0x580 [ 185.783554][ T7145] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 185.783586][ T7145] ? __lock_acquire+0x5c0/0x1f40 [ 185.783616][ T7145] ? __fget_files+0x34/0x3d0 [ 185.783637][ T7145] ? find_held_lock+0x2b/0x80 [ 185.783659][ T7145] ? hook_file_ioctl_common+0x140/0x440 [ 185.783686][ T7145] ? __fget_files+0x21f/0x3d0 [ 185.783711][ T7145] security_file_ioctl+0xd3/0x230 [ 185.783737][ T7145] __x64_sys_ioctl+0xb7/0x210 [ 185.783757][ T7145] do_syscall_64+0x123/0x790 [ 185.783783][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.783802][ T7145] RIP: 0033:0x7fc30e99e159 [ 185.783817][ T7145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.783832][ T7145] RSP: 002b:00007fc30f8aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.783850][ T7145] RAX: ffffffffffffffda RBX: 00007fc30ec25fa0 RCX: 00007fc30e99e159 [ 185.783861][ T7145] RDX: 00002000000000c0 RSI: 000000004028700f RDI: 0000000000000003 [ 185.783871][ T7145] RBP: 00007fc30f8aa090 R08: 0000000000000000 R09: 0000000000000000 [ 185.783879][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.783887][ T7145] R13: 00007fc30ec26038 R14: 00007fc30ec25fa0 R15: 00007ffded155198 [ 185.783908][ T7145] [ 185.788227][ T7145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.197332][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.287270][ T25] usb 4-1: USB disconnect, device number 10 [ 186.295183][ T25] em28xx 4-1:0.0: Disconnecting em28xx [ 186.311430][ T25] em28xx: Freeing device [ 186.498866][ T7155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.599026][ T7157] lo speed is unknown, defaulting to 1000 [ 186.707513][ T5747] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.799987][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 186.859813][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 186.869077][ T5747] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.889114][ T5747] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 186.889158][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.918814][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.918853][ T5747] usb 2-1: Product: syz [ 186.918880][ T5747] usb 2-1: Manufacturer: syz [ 186.918899][ T5747] usb 2-1: SerialNumber: syz [ 186.947941][ T5747] usb 2-1: config 0 descriptor?? [ 186.976243][ T5747] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.986175][ T5747] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 187.976341][ T7183] Bluetooth: hci5: Frame reassembly failed (-84) [ 187.978717][ T7183] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.019457][ T5879] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.285482][ T5747] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 188.343342][ T5747] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 188.372900][ T5747] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 188.372942][ T5747] em28xx 2-1:0.0: No AC97 audio processor [ 188.484905][ T31] kauditd_printk_skb: 88 callbacks suppressed [ 188.484947][ T31] audit: type=1400 audit(1788778571.095:1736): avc: denied { setopt } for pid=7153 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.502455][ T31] audit: type=1400 audit(1788778571.105:1737): avc: denied { read } for pid=7185 comm="syz.3.287" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.502509][ T31] audit: type=1400 audit(1788778571.105:1738): avc: denied { open } for pid=7185 comm="syz.3.287" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.685440][ T31] audit: type=1400 audit(1788778571.295:1739): avc: denied { bind } for pid=7153 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.686114][ T31] audit: type=1400 audit(1788778571.295:1740): avc: denied { write } for pid=7153 comm="syz.2.282" path="socket:[13283]" dev="sockfs" ino=13283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.747298][ T31] audit: type=1400 audit(1788778571.305:1741): avc: denied { create } for pid=7153 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.013438][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.013506][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.451287][ T10] usb 1-1: USB disconnect, device number 10 [ 189.474248][ T10] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 189.726926][ T31] audit: type=1400 audit(1788778572.335:1742): avc: denied { mount } for pid=7198 comm="syz.3.288" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 189.779344][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.779399][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=ce.79 [ 189.798181][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 189.798217][ T25] usb 3-1: can't read configurations, error -71 [ 189.977318][ T5718] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 190.040057][ T7194] Bluetooth: hci5: command 0x1003 tx timeout [ 190.046265][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 190.097983][ T7201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.108252][ T983] usb 2-1: USB disconnect, device number 11 [ 190.109335][ T983] em28xx 2-1:0.0: Disconnecting em28xx [ 190.123007][ T983] em28xx: Freeing device [ 190.137463][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 190.140050][ T5718] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 190.144628][ T5718] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 190.144652][ T5718] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 190.144667][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.144683][ T5718] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 190.144718][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.276604][ T5612] Bluetooth: hci3: Malformed Event: 0x02 [ 190.321213][ T31] audit: type=1400 audit(1788778572.935:1743): avc: denied { append } for pid=7208 comm="syz.1.291" name="comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.365396][ T31] audit: type=1400 audit(1788778572.975:1744): avc: denied { getopt } for pid=7205 comm="syz.0.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 190.370047][ T7207] netlink: 'syz.0.290': attribute type 5 has an invalid length. [ 190.372597][ T31] audit: type=1400 audit(1788778572.985:1745): avc: denied { mounton } for pid=7208 comm="syz.1.291" path="/proc/196/task/197/net/dev" dev="proc" ino=4026533216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 190.477178][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 190.638687][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 190.644252][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.655039][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 190.666691][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.684504][ T5612] Bluetooth: hci1: Malformed Event: 0x02 [ 190.690462][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.690503][ T25] usb 3-1: Product: syz [ 190.690520][ T25] usb 3-1: Manufacturer: syz [ 190.690536][ T25] usb 3-1: SerialNumber: syz [ 190.717412][ T25] usb 3-1: config 0 descriptor?? [ 190.726922][ T25] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.736323][ T25] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 190.737977][ T983] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 190.859997][ T7224] netlink: 'syz.1.294': attribute type 5 has an invalid length. [ 190.888024][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 190.890043][ T983] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 190.890883][ T983] usb 1-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.890925][ T983] usb 1-1: config 0 interface 0 has no altsetting 0 [ 190.890949][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.904557][ T983] usb 1-1: config 0 descriptor?? [ 191.078492][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 191.079006][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 191.080168][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 191.080447][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 191.570006][ T983] usbhid 1-1:0.0: can't add hid device: -71 [ 191.570104][ T983] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 191.887650][ T983] usb 1-1: USB disconnect, device number 11 [ 191.992508][ T25] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 191.993305][ T25] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 191.994160][ T25] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 191.994202][ T25] em28xx 3-1:0.0: No AC97 audio processor [ 192.362779][ T7206] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.372789][ T7206] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.513295][ T139] Bluetooth: hci5: Frame reassembly failed (-84) [ 193.597853][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 193.597921][ T31] audit: type=1400 audit(1788778576.215:1770): avc: denied { read write } for pid=7242 comm="syz.1.298" name="ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.599376][ T31] audit: type=1400 audit(1788778576.215:1771): avc: denied { open } for pid=7242 comm="syz.1.298" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.607022][ T31] audit: type=1400 audit(1788778576.215:1772): avc: denied { map } for pid=7242 comm="syz.1.298" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.626883][ T31] audit: type=1400 audit(1788778576.235:1773): avc: denied { read write } for pid=7242 comm="syz.1.298" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 193.904615][ T31] audit: type=1400 audit(1788778576.515:1774): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 193.950106][ T986] usb 4-1: USB disconnect, device number 11 [ 193.958808][ T31] audit: type=1400 audit(1788778576.575:1775): avc: denied { read } for pid=7245 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 193.990164][ T31] audit: type=1400 audit(1788778576.575:1777): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.011007][ T31] audit: type=1400 audit(1788778576.575:1776): avc: denied { open } for pid=7245 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.011071][ T31] audit: type=1400 audit(1788778576.585:1778): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.011132][ T31] audit: type=1400 audit(1788778576.585:1779): avc: denied { open } for pid=5615 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.201859][ T7252] netlink: 'syz.4.301': attribute type 4 has an invalid length. [ 194.516153][ T25] lo speed is unknown, defaulting to 1000 [ 194.516338][ T25] syz2: Port: 1 Link DOWN [ 194.518259][ T5611] Bluetooth: hci5: command 0x1003 tx timeout [ 194.519698][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 194.774782][ T25] usb 3-1: USB disconnect, device number 13 [ 194.915912][ T25] em28xx 3-1:0.0: Disconnecting em28xx [ 195.053810][ T7260] lo speed is unknown, defaulting to 1000 [ 195.198414][ T25] em28xx: Freeing device [ 195.393812][ T7260] lo speed is unknown, defaulting to 1000 [ 195.394396][ T7260] lo speed is unknown, defaulting to 1000 [ 195.569036][ T7270] FAULT_INJECTION: forcing a failure. [ 195.569036][ T7270] name failslab, interval 1, probability 0, space 0, times 0 [ 195.569079][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: syz.3.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.569107][ T7270] Tainted: [L]=SOFTLOCKUP [ 195.569114][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 195.569125][ T7270] Call Trace: [ 195.569131][ T7270] [ 195.569136][ T7270] dump_stack_lvl+0x100/0x190 [ 195.569164][ T7270] should_fail_ex.cold+0x5/0xa [ 195.569191][ T7270] should_failslab+0xc2/0x120 [ 195.569212][ T7270] __kmalloc_cache_noprof+0x91/0x6d0 [ 195.569237][ T7270] ? ip_vs_dh_init_svc+0x3f/0xb0 [ 195.569266][ T7270] ? __pfx_ip_vs_dh_init_svc+0x10/0x10 [ 195.569293][ T7270] ip_vs_dh_init_svc+0x3f/0xb0 [ 195.569318][ T7270] ip_vs_bind_scheduler+0x45/0xb0 [ 195.569342][ T7270] ip_vs_add_service+0x9cb/0x2240 [ 195.569367][ T7270] ? __ip_vs_service_find+0x4d0/0x9c0 [ 195.569395][ T7270] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 195.569416][ T7270] do_ip_vs_set_ctl+0xb86/0xc90 [ 195.569441][ T7270] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 195.569462][ T7270] ? rcu_is_watching+0x13/0xc0 [ 195.569489][ T7270] ? find_held_lock+0x2b/0x80 [ 195.569511][ T7270] ? nf_sockopt_find.isra.0+0x222/0x290 [ 195.569529][ T7270] ? nf_sockopt_find.isra.0+0x222/0x290 [ 195.569556][ T7270] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.569591][ T7270] ? nf_setsockopt+0x8d/0xf0 [ 195.569607][ T7270] nf_setsockopt+0x8d/0xf0 [ 195.569626][ T7270] ip_setsockopt+0xcb/0xf0 [ 195.569650][ T7270] udp_setsockopt+0x64/0xb0 [ 195.569669][ T7270] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 195.569694][ T7270] do_sock_setsockopt+0xf3/0x1d0 [ 195.569718][ T7270] __sys_setsockopt+0x195/0x220 [ 195.569739][ T7270] __x64_sys_setsockopt+0xbd/0x160 [ 195.569754][ T7270] ? do_syscall_64+0xae/0x790 [ 195.569773][ T7270] ? lockdep_hardirqs_on+0x7d/0x110 [ 195.569791][ T7270] do_syscall_64+0x123/0x790 [ 195.569813][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.569830][ T7270] RIP: 0033:0x7f19b319e159 [ 195.569845][ T7270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.569860][ T7270] RSP: 002b:00007f19b3fa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.569877][ T7270] RAX: ffffffffffffffda RBX: 00007f19b3425fa0 RCX: 00007f19b319e159 [ 195.569896][ T7270] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 000000000000000b [ 195.569906][ T7270] RBP: 00007f19b3235024 R08: 000000000000002c R09: 0000000000000000 [ 195.569918][ T7270] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 195.569932][ T7270] R13: 00007f19b3426038 R14: 00007f19b3425fa0 R15: 00007fff4767fb98 [ 195.569957][ T7270] [ 195.594469][ T7270] IPVS: ip_vs_bind_scheduler(): init error [ 195.991902][ T7283] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 196.654857][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 199.263491][ T31] kauditd_printk_skb: 148 callbacks suppressed [ 199.263524][ T31] audit: type=1400 audit(1788778581.875:1926): avc: denied { search } for pid=7296 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.263993][ T31] audit: type=1400 audit(1788778581.875:1927): avc: denied { read } for pid=7296 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.264040][ T31] audit: type=1400 audit(1788778581.875:1928): avc: denied { open } for pid=7296 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.264252][ T31] audit: type=1400 audit(1788778581.875:1929): avc: denied { getattr } for pid=7296 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.511206][ T31] audit: type=1400 audit(1788778582.125:1930): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.581757][ T31] audit: type=1400 audit(1788778582.185:1931): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.582029][ T31] audit: type=1400 audit(1788778582.185:1932): avc: denied { ioctl } for pid=5605 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.694789][ T31] audit: type=1400 audit(1788778582.305:1933): avc: denied { write } for pid=7298 comm="syz.2.310" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 199.728379][ T31] audit: type=1400 audit(1788778582.335:1934): avc: denied { open } for pid=7298 comm="syz.2.310" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 199.752732][ T31] audit: type=1400 audit(1788778582.335:1935): avc: denied { ioctl } for pid=7298 comm="syz.2.310" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 201.824938][ T7304] siw: device registration error -23 [ 202.612278][ T983] lo speed is unknown, defaulting to 1000 [ 202.628719][ T7260] infiniband syz1: set down [ 202.628748][ T7260] infiniband syz1: added lo [ 202.660318][ T7260] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 202.684867][ T7260] infiniband syz1: Couldn't open port 1 [ 202.685035][ T7260] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 202.685060][ T7260] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 202.685091][ T7260] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 203.809151][ T7260] RDS/IB: syz1: added [ 203.834524][ T7323] lo speed is unknown, defaulting to 1000 [ 203.836146][ T7323] lo speed is unknown, defaulting to 1000 [ 203.851803][ T7260] smc: adding ib device syz1 with port count 1 [ 203.861308][ T7260] smc: ib device syz1 port 1 has no pnetid [ 203.871244][ T25] lo speed is unknown, defaulting to 1000 [ 204.253510][ T7328] netlink: 'syz.1.316': attribute type 1 has an invalid length. [ 204.344015][ T7328] bond4: entered promiscuous mode [ 204.344343][ T7328] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.423645][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 204.423686][ T31] audit: type=1400 audit(1788778587.035:1990): avc: denied { map_create } for pid=7332 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.430847][ T31] audit: type=1400 audit(1788778587.035:1991): avc: denied { prog_load } for pid=7332 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.430894][ T31] audit: type=1400 audit(1788778587.035:1992): avc: denied { bpf } for pid=7332 comm="syz.3.317" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.430928][ T31] audit: type=1400 audit(1788778587.035:1993): avc: denied { perfmon } for pid=7332 comm="syz.3.317" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.450806][ T31] audit: type=1400 audit(1788778587.045:1994): avc: denied { create } for pid=7332 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.491766][ T31] audit: type=1400 audit(1788778587.085:1995): avc: denied { setopt } for pid=7332 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.686421][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.705658][ T31] audit: type=1400 audit(1788778587.315:1996): avc: denied { ioctl } for pid=7321 comm="syz.2.314" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.790247][ T31] audit: type=1400 audit(1788778587.385:1997): avc: denied { read write } for pid=7327 comm="syz.1.316" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.790421][ T31] audit: type=1400 audit(1788778587.385:1998): avc: denied { open } for pid=7327 comm="syz.1.316" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.955699][ T31] audit: type=1400 audit(1788778587.535:1999): avc: denied { read } for pid=7332 comm="syz.3.317" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 204.964255][ T7330] veth5: entered allmulticast mode [ 205.384308][ T5747] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 205.509382][ T7330] bond4: (slave veth5): making interface the new active one [ 205.509452][ T7330] veth5: entered promiscuous mode [ 205.579910][ T7330] bond4: (slave veth5): Enslaving as an active interface with an up link [ 205.589608][ T5747] usb 2-1: Using ep0 maxpacket: 8 [ 205.591243][ T5747] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 205.631082][ T5747] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 205.631136][ T5747] usb 2-1: config 0 has no interface number 0 [ 205.632604][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.863193][ T5747] usb 2-1: config 0 descriptor?? [ 206.128713][ T5747] viperboard 2-1:0.143: version 0.00 found at bus 002 address 012 [ 206.807967][ T5747] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 206.808001][ T5747] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 206.979760][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.980142][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.302028][ T5711] usb 2-1: USB disconnect, device number 12 [ 207.446019][ T7260] lo speed is unknown, defaulting to 1000 [ 208.178442][ T7379] syz.1.321 (7379): /proc/7379/oom_adj is deprecated, please use /proc/7379/oom_score_adj instead. [ 208.253655][ T7379] pimreg: entered allmulticast mode [ 208.314640][ T7260] lo speed is unknown, defaulting to 1000 [ 209.199360][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 209.397222][ T5607] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 209.446982][ T7407] IPv6: sit1: Disabled Multicast RS [ 209.448469][ T7407] sit1: entered allmulticast mode [ 209.487023][ T31] kauditd_printk_skb: 89 callbacks suppressed [ 209.487068][ T31] audit: type=1400 audit(1788778592.095:2089): avc: denied { ioctl } for pid=7403 comm="syz-executor" path="socket:[14570]" dev="sockfs" ino=14570 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.494063][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.519473][ T31] audit: type=1400 audit(1788778592.135:2090): avc: denied { mount } for pid=7404 comm="syz.0.327" name="/" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 209.522455][ T31] audit: type=1400 audit(1788778592.135:2091): avc: denied { search } for pid=7404 comm="syz.0.327" name="/" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.522525][ T31] audit: type=1400 audit(1788778592.135:2092): avc: denied { search } for pid=7404 comm="syz.0.327" name="usb_gadget" dev="configfs" ino=1386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.523830][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.528324][ T31] audit: type=1400 audit(1788778592.145:2093): avc: denied { search } for pid=7404 comm="syz.0.327" name="/" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.528364][ T31] audit: type=1400 audit(1788778592.145:2094): avc: denied { search } for pid=7404 comm="syz.0.327" name="usb_gadget" dev="configfs" ino=1386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.528395][ T31] audit: type=1400 audit(1788778592.145:2095): avc: denied { search } for pid=7404 comm="syz.0.327" name="g1" dev="configfs" ino=8005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.529714][ T31] audit: type=1400 audit(1788778592.145:2096): avc: denied { write } for pid=7404 comm="syz.0.327" name="idVendor" dev="configfs" ino=13978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 209.530170][ T31] audit: type=1400 audit(1788778592.145:2097): avc: denied { open } for pid=7404 comm="syz.0.327" path="/72/config/usb_gadget/g1/idVendor" dev="configfs" ino=13978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 209.534935][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.543023][ T31] audit: type=1400 audit(1788778592.155:2098): avc: denied { search } for pid=7404 comm="syz.0.327" name="/" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.562005][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.597739][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.607191][ T5607] usb 2-1: Using ep0 maxpacket: 16 [ 209.614897][ T5607] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 209.617014][ T7260] lo speed is unknown, defaulting to 1000 [ 209.685870][ T5607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 209.685907][ T5607] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.685954][ T5607] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 209.685972][ T5607] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 209.685992][ T5607] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 224 [ 209.813208][ T5607] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.813236][ T5607] usb 2-1: Product: syz [ 209.813249][ T5607] usb 2-1: Manufacturer: syz [ 209.813263][ T5607] usb 2-1: SerialNumber: syz [ 209.879230][ T5607] usb 2-1: config 0 descriptor?? [ 209.885846][ T7396] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 209.960451][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.960519][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=ce.79 [ 209.961231][ T25] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 209.961252][ T25] usb 3-1: chopping to 0 config(s) [ 209.961272][ T25] usb 3-1: can't read configurations, error -32 [ 210.087888][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.217191][ T25] usb 3-1: device descriptor read/64, error -32 [ 210.328665][ T25] usb usb3-port1: attempt power cycle [ 210.513107][ T7260] lo speed is unknown, defaulting to 1000 [ 210.727181][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 210.747418][ T25] usb 3-1: device descriptor read/8, error -32 [ 211.073328][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 211.159103][ T25] usb 3-1: device descriptor read/8, error -32 [ 211.267380][ T25] usb usb3-port1: unable to enumerate USB device [ 211.718544][ T5611] Bluetooth: hci5: command tx timeout [ 212.281566][ T5607] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 212.288026][ T5607] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 212.297745][ T5607] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 212.303733][ T5607] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 212.310636][ T5607] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 212.335793][ T5607] usb 2-1: USB disconnect, device number 13 [ 212.382009][ T5607] mcba_usb 2-1:0.0 can0: device disconnected [ 212.453820][ T7445] bridge0: port 3(syz_tun) entered blocking state [ 212.462356][ T7445] bridge0: port 3(syz_tun) entered disabled state [ 212.469781][ T7445] syz_tun: entered allmulticast mode [ 212.486085][ T7445] syz_tun: entered promiscuous mode [ 212.505048][ T7445] bridge0: port 3(syz_tun) entered blocking state [ 212.505169][ T7445] bridge0: port 3(syz_tun) entered listening state [ 212.528127][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 212.528643][ C0] bridge0: topology change detected, propagating [ 212.634017][ T7260] lo speed is unknown, defaulting to 1000 [ 213.798285][ T5611] Bluetooth: hci5: command tx timeout [ 214.225349][ T7460] FAULT_INJECTION: forcing a failure. [ 214.225349][ T7460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.241100][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: syz.1.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.241132][ T7460] Tainted: [L]=SOFTLOCKUP [ 214.241139][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 214.241151][ T7460] Call Trace: [ 214.241160][ T7460] [ 214.241169][ T7460] dump_stack_lvl+0x100/0x190 [ 214.241202][ T7460] should_fail_ex.cold+0x5/0xa [ 214.241225][ T7460] ? prepare_alloc_pages+0x16d/0x5b0 [ 214.241251][ T7460] should_fail_alloc_page+0xeb/0x140 [ 214.241275][ T7460] prepare_alloc_pages+0x1f0/0x5b0 [ 214.241297][ T7460] ? lock_acquire+0x1d1/0x380 [ 214.241321][ T7460] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 214.241351][ T7460] ? mark_held_locks+0x40/0x70 [ 214.241371][ T7460] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 214.241401][ T7460] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 214.241425][ T7460] ? rcu_is_watching+0x13/0xc0 [ 214.241449][ T7460] ? trace_sched_exit_tp+0x120/0x160 [ 214.241474][ T7460] ? __schedule+0x126b/0x6920 [ 214.241493][ T7460] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 214.241515][ T7460] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 214.241562][ T7460] ? __lock_acquire+0x5c0/0x1f40 [ 214.241584][ T7460] ? __lock_acquire+0x5c0/0x1f40 [ 214.241609][ T7460] ? vma_is_special_huge+0x23f/0x2d0 [ 214.241634][ T7460] ? __pfx_vma_is_special_huge+0x10/0x10 [ 214.241657][ T7460] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.241681][ T7460] ? policy_nodemask+0xed/0x4f0 [ 214.241708][ T7460] alloc_pages_mpol+0x201/0x550 [ 214.241733][ T7460] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 214.241756][ T7460] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 214.241779][ T7460] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 214.241809][ T7460] alloc_pages_noprof+0x1a/0x160 [ 214.241837][ T7460] __pmd_alloc+0x3b/0x950 [ 214.241863][ T7460] __handle_mm_fault+0xa9d/0x2f60 [ 214.241893][ T7460] ? __pfx___handle_mm_fault+0x10/0x10 [ 214.241918][ T7460] ? __pfx___schedule+0x10/0x10 [ 214.241958][ T7460] handle_mm_fault+0x363/0xa20 [ 214.241989][ T7460] do_user_addr_fault+0x745/0x12f0 [ 214.242022][ T7460] exc_page_fault+0x6f/0xd0 [ 214.242044][ T7460] asm_exc_page_fault+0x26/0x30 [ 214.242063][ T7460] RIP: 0010:__get_user_4+0x14/0x30 [ 214.242082][ T7460] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 214.242100][ T7460] RSP: 0018:ffffc9000e16fc20 EFLAGS: 00050287 [ 214.242116][ T7460] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 214.242128][ T7460] RDX: 00007ffffffff000 RSI: ffffffff82615621 RDI: ffffffff8c621080 [ 214.242139][ T7460] RBP: ffff888036d953d0 R08: 00000000000495a9 R09: 00000000000001c9 [ 214.242151][ T7460] R10: 0000000000000200 R11: 0000000000000000 R12: ffff8880307b0000 [ 214.242161][ T7460] R13: ffff8880377d4000 R14: ffff8880307b0060 R15: ffffffff8f06c460 [ 214.242181][ T7460] ? __might_fault+0x111/0x140 [ 214.242211][ T7460] __ext4_ioctl+0x68e/0x4200 [ 214.242243][ T7460] ? __pfx___ext4_ioctl+0x10/0x10 [ 214.242275][ T7460] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 214.242298][ T7460] ? do_vfs_ioctl+0x226/0x13e0 [ 214.242323][ T7460] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 214.242339][ T7460] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 214.242369][ T7460] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 214.242403][ T7460] ? __fget_files+0x34/0x3d0 [ 214.242442][ T7460] ? selinux_file_ioctl+0x13b/0x290 [ 214.242459][ T7460] ? selinux_file_ioctl+0xb6/0x290 [ 214.242484][ T7460] ? __pfx_ext4_ioctl+0x10/0x10 [ 214.242512][ T7460] __x64_sys_ioctl+0x18e/0x210 [ 214.242544][ T7460] do_syscall_64+0x123/0x790 [ 214.242576][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.242595][ T7460] RIP: 0033:0x7fa68f39e159 [ 214.242611][ T7460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.242628][ T7460] RSP: 002b:00007fa690183028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.242645][ T7460] RAX: ffffffffffffffda RBX: 00007fa68f625fa0 RCX: 00007fa68f39e159 [ 214.242656][ T7460] RDX: 0000000000000000 RSI: 0000000040086607 RDI: 0000000000000004 [ 214.242684][ T7460] RBP: 00007fa690183090 R08: 0000000000000000 R09: 0000000000000000 [ 214.242701][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.242724][ T7460] R13: 00007fa68f626038 R14: 00007fa68f625fa0 R15: 00007ffcace58c38 [ 214.242776][ T7460] [ 214.452620][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.454307][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=ce.79 [ 214.579953][ T10] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 214.579991][ T10] usb 4-1: chopping to 0 config(s) [ 214.580013][ T10] usb 4-1: can't read configurations, error -32 [ 214.662572][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 214.662589][ T31] audit: type=1400 audit(1788778597.275:2129): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 214.741030][ T7260] lo speed is unknown, defaulting to 1000 [ 214.753541][ T31] audit: type=1400 audit(1788778597.355:2130): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 214.863184][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 214.997202][ T10] usb 4-1: device descriptor read/64, error -32 [ 215.008833][ T31] audit: type=1400 audit(1788778597.625:2131): avc: denied { bind } for pid=7461 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.029847][ T31] audit: type=1400 audit(1788778597.645:2132): avc: denied { write } for pid=7461 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.068305][ T7260] lo speed is unknown, defaulting to 1000 [ 215.117493][ T10] usb usb4-port1: attempt power cycle [ 215.190984][ T31] audit: type=1400 audit(1788778597.805:2133): avc: denied { map_create } for pid=7466 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 215.210501][ T986] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 215.218326][ T31] audit: type=1400 audit(1788778597.805:2134): avc: denied { map_read map_write } for pid=7466 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 215.291932][ T7387] lo speed is unknown, defaulting to 1000 [ 215.299890][ T7403] lo speed is unknown, defaulting to 1000 [ 215.399443][ T986] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 215.409715][ T986] usb 1-1: config 219 has too many interfaces: 243, using maximum allowed: 32 [ 215.409752][ T986] usb 1-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 215.409781][ T986] usb 1-1: config 219 has 1 interface, different from the descriptor's value: 243 [ 215.879150][ T5611] Bluetooth: hci5: command tx timeout [ 215.920401][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 215.931694][ T986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.947178][ T986] usb 1-1: Product: syz [ 215.948766][ T986] usb 1-1: Manufacturer: syz [ 215.951595][ T986] usb 1-1: SerialNumber: syz [ 215.972332][ T10] usb 4-1: device descriptor read/8, error -32 [ 216.199061][ T31] audit: type=1400 audit(1788778598.815:2135): avc: denied { read write } for pid=7470 comm="syz.1.337" name="event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 216.199144][ T31] audit: type=1400 audit(1788778598.815:2136): avc: denied { open } for pid=7470 comm="syz.1.337" path="/dev/input/event1" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 216.247880][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 216.277500][ T10] usb 4-1: device descriptor read/8, error -32 [ 216.311342][ T31] audit: type=1400 audit(1788778598.925:2137): avc: denied { prog_load } for pid=7470 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.311407][ T31] audit: type=1400 audit(1788778598.925:2138): avc: denied { bpf } for pid=7470 comm="syz.1.337" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.387614][ T10] usb usb4-port1: unable to enumerate USB device [ 217.122084][ T7480] /dev/nullb0: Can't open blockdev [ 217.163365][ T5866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.957785][ T5611] Bluetooth: hci5: command tx timeout [ 218.932053][ T5866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.985722][ T986] usbsevseg 1-1:219.0: USB 7 Segment device now attached [ 219.022701][ T986] usb 1-1: USB disconnect, device number 12 [ 219.023462][ T986] usbsevseg 1-1:219.0: USB 7 Segment now disconnected [ 219.138234][ T5866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.184629][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 219.245275][ T5866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.192546][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.192636][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.192775][ T7403] bridge_slave_0: entered allmulticast mode [ 220.214489][ T7403] bridge_slave_0: entered promiscuous mode [ 220.225066][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.226469][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 220.226507][ T31] audit: type=1400 audit(1788778602.835:2153): avc: denied { read } for pid=7501 comm="syz.2.343" name="direction" dev="configfs" ino=14852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 220.228857][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.229361][ T7403] bridge_slave_1: entered allmulticast mode [ 220.233835][ T7403] bridge_slave_1: entered promiscuous mode [ 220.249168][ T7502] UDC core: g1: couldn't find an available UDC or it's busy [ 220.351612][ T5866] bridge_slave_1: left allmulticast mode [ 220.351681][ T5866] bridge_slave_1: left promiscuous mode [ 220.353674][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.366867][ T5866] bridge_slave_0: left allmulticast mode [ 220.366893][ T5866] bridge_slave_0: left promiscuous mode [ 220.367137][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.467356][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.617887][ T25] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 220.628367][ T25] usb 1-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 220.638706][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 220.638738][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 220.638775][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.682600][ C1] ================================================================== [ 220.682617][ C1] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 220.682650][ C1] Read of size 1 at addr ffff8880754cc6ab by task swapper/1/0 [ 220.682668][ C1] [ 220.682679][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.682706][ C1] Tainted: [L]=SOFTLOCKUP [ 220.682713][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 220.682725][ C1] Call Trace: [ 220.682731][ C1] [ 220.682739][ C1] dump_stack_lvl+0x100/0x190 [ 220.682766][ C1] print_report+0x13d/0x4b0 [ 220.682792][ C1] ? __virt_addr_valid+0x239/0x430 [ 220.682813][ C1] ? find_endpoint+0x2a3/0x2c0 [ 220.682837][ C1] kasan_report+0xdf/0x1c0 [ 220.682870][ C1] ? find_endpoint+0x2a3/0x2c0 [ 220.682896][ C1] find_endpoint+0x2a3/0x2c0 [ 220.682923][ C1] dummy_timer+0x500/0x3700 [ 220.682957][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 220.682982][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 220.683009][ C1] ? rcu_is_watching+0x13/0xc0 [ 220.683036][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 220.683058][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 220.683085][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 220.683122][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 220.683151][ C1] handle_softirqs+0x1e6/0x9d0 [ 220.683175][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 220.683195][ C1] ? _raw_spin_unlock+0x28/0x50 [ 220.683214][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 220.683243][ C1] __irq_exit_rcu+0x16a/0x210 [ 220.683262][ C1] irq_exit_rcu+0x9/0x30 [ 220.683279][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 220.683302][ C1] [ 220.683309][ C1] [ 220.683316][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.683338][ C1] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 220.683363][ C1] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 83 e9 fb 09 e8 4e 1e 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 220.683383][ C1] RSP: 0018:ffffc900001a7c38 EFLAGS: 00000206 [ 220.683402][ C1] RAX: 0000000000e8ff7d RBX: ffff88801f6c4b00 RCX: 0000000000000000 [ 220.683416][ C1] RDX: 0000000000000001 RSI: ffffffff8e3ebf9c RDI: ffff88801f6c6210 [ 220.683429][ C1] RBP: ffffc900001a7c90 R08: 0000000000000001 R09: 0000000000000000 [ 220.683442][ C1] R10: 0000000000000001 R11: ffffffff81d73ed9 R12: ffff888033212580 [ 220.683456][ C1] R13: 0000000000000001 R14: ffffffff91454404 R15: ffff8880b853bf00 [ 220.683472][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 220.683500][ C1] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 220.683525][ C1] __schedule+0x1261/0x6920 [ 220.683544][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 220.683576][ C1] ? __pfx___schedule+0x10/0x10 [ 220.683596][ C1] ? rcu_is_watching+0x13/0xc0 [ 220.683619][ C1] ? tick_nohz_idle_exit+0x1a1/0x3f0 [ 220.683644][ C1] schedule_idle+0x54/0x80 [ 220.683665][ C1] do_idle+0x365/0x5b0 [ 220.683688][ C1] ? __pfx_do_idle+0x10/0x10 [ 220.683709][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 220.683734][ C1] cpu_startup_entry+0x4f/0x60 [ 220.683757][ C1] start_secondary+0x21d/0x2d0 [ 220.683778][ C1] ? __pfx_start_secondary+0x10/0x10 [ 220.683800][ C1] common_startup_64+0x13e/0x158 [ 220.683832][ C1] [ 220.683838][ C1] [ 220.683843][ C1] Allocated by task 6972: [ 220.683852][ C1] kasan_save_stack+0x30/0x50 [ 220.683875][ C1] kasan_save_track+0x14/0x30 [ 220.683893][ C1] __kasan_kmalloc+0xaa/0xb0 [ 220.683910][ C1] __kmalloc_noprof+0x32f/0x840 [ 220.683928][ C1] usb_copy_descriptors+0xcd/0x320 [ 220.683952][ C1] f_midi2_bind+0x1dad/0x2770 [ 220.683972][ C1] usb_add_function+0x219/0x890 [ 220.683992][ C1] configfs_composite_bind+0xd83/0x1960 [ 220.684016][ C1] gadget_bind_driver+0x28c/0xbf0 [ 220.684043][ C1] really_probe+0x241/0xa60 [ 220.684061][ C1] __driver_probe_device+0x210/0x460 [ 220.684080][ C1] driver_probe_device+0x4a/0x140 [ 220.684098][ C1] __driver_attach+0x21f/0x5b0 [ 220.684116][ C1] bus_for_each_dev+0x13e/0x1d0 [ 220.684140][ C1] bus_add_driver+0x305/0x5b0 [ 220.684165][ C1] driver_register+0x1e2/0x360 [ 220.684185][ C1] usb_gadget_register_driver_owner+0x132/0x210 [ 220.684213][ C1] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 220.684233][ C1] configfs_write_iter+0x302/0x4e0 [ 220.684259][ C1] vfs_write+0x6af/0x1050 [ 220.684276][ C1] ksys_write+0x12a/0x250 [ 220.684292][ C1] do_syscall_64+0x123/0x790 [ 220.684313][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.684331][ C1] [ 220.684336][ C1] Freed by task 7188: [ 220.684344][ C1] kasan_save_stack+0x30/0x50 [ 220.684362][ C1] kasan_save_track+0x14/0x30 [ 220.684381][ C1] kasan_save_free_info+0x3b/0x70 [ 220.684406][ C1] __kasan_slab_free+0x5f/0x80 [ 220.684426][ C1] kfree+0x22b/0x6d0 [ 220.684449][ C1] usb_free_all_descriptors+0x81/0x1a0 [ 220.684471][ C1] purge_configs_funcs+0x285/0x510 [ 220.684491][ C1] configfs_composite_unbind+0xae/0x210 [ 220.684513][ C1] gadget_unbind_driver+0x20c/0x4f0 [ 220.684530][ C1] device_remove+0xcb/0x180 [ 220.684547][ C1] device_release_driver_internal+0x44e/0x620 [ 220.684567][ C1] driver_detach+0xd8/0x1b0 [ 220.684585][ C1] bus_remove_driver+0x13b/0x2e0 [ 220.684611][ C1] driver_unregister+0x76/0xb0 [ 220.684630][ C1] usb_gadget_unregister_driver+0x49/0x70 [ 220.684658][ C1] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 220.684678][ C1] configfs_write_iter+0x302/0x4e0 [ 220.684703][ C1] vfs_write+0x6af/0x1050 [ 220.684719][ C1] ksys_write+0x12a/0x250 [ 220.684736][ C1] do_syscall_64+0x123/0x790 [ 220.684756][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.684774][ C1] [ 220.684779][ C1] The buggy address belongs to the object at ffff8880754cc600 [ 220.684779][ C1] which belongs to the cache kmalloc-256 of size 256 [ 220.684794][ C1] The buggy address is located 171 bytes inside of [ 220.684794][ C1] freed 256-byte region [ffff8880754cc600, ffff8880754cc700) [ 220.684813][ C1] [ 220.684818][ C1] The buggy address belongs to the physical page: [ 220.684826][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880754cd600 pfn:0x754cc [ 220.684845][ C1] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 220.684865][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 220.684882][ C1] page_type: f5(slab) [ 220.684898][ C1] raw: 00fff00000000240 ffff88801c02fb40 ffffea0001ea8c10 ffffea00009ba910 [ 220.684915][ C1] raw: ffff8880754cd600 000000000010000d 00000000f5000000 0000000000000000 [ 220.684931][ C1] head: 00fff00000000240 ffff88801c02fb40 ffffea0001ea8c10 ffffea00009ba910 [ 220.684947][ C1] head: ffff8880754cd600 000000000010000d 00000000f5000000 0000000000000000 [ 220.684962][ C1] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 220.684977][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 220.684987][ C1] page dumped because: kasan: bad access detected [ 220.684994][ C1] page_owner tracks the page as allocated [ 220.685000][ C1] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4976, tgid 4976 (udevd), ts 70895580949 [ 220.685030][ C1] post_alloc_hook+0xfd/0x120 [ 220.685055][ C1] get_page_from_freelist+0x110d/0x35d0 [ 220.685080][ C1] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 220.685106][ C1] new_slab+0xa9/0x6e0 [ 220.685129][ C1] refill_objects+0xe3/0x410 [ 220.685152][ C1] __pcs_replace_empty_main+0x35e/0x650 [ 220.685176][ C1] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 220.685200][ C1] inode_doinit_use_xattr+0x54/0x330 [ 220.685224][ C1] inode_doinit_with_dentry+0x10fc/0x1340 [ 220.685252][ C1] selinux_d_instantiate+0x26/0x40 [ 220.685267][ C1] security_d_instantiate+0x14c/0x1b0 [ 220.685289][ C1] d_splice_alias_ops+0xd7/0x15b0 [ 220.685306][ C1] kernfs_iop_lookup+0x23f/0x2d0 [ 220.685330][ C1] lookup_open+0xa79/0x1990 [ 220.685355][ C1] path_openat+0xa2c/0x2440 [ 220.685375][ C1] do_file_open+0x20e/0x430 [ 220.685396][ C1] page last free pid 5807 tgid 5806 ts 70859274561 stack trace: [ 220.685409][ C1] __free_frozen_pages+0x79f/0x10f0 [ 220.685433][ C1] qlist_free_all+0x47/0xf0 [ 220.685449][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 220.685468][ C1] __kasan_slab_alloc+0x69/0x90 [ 220.685488][ C1] __kmalloc_cache_noprof+0x278/0x6d0 [ 220.685511][ C1] ref_tracker_alloc+0x190/0x590 [ 220.685532][ C1] sk_alloc+0x2e9/0xe80 [ 220.685547][ C1] __netlink_create+0x5e/0x2c0 [ 220.685570][ C1] netlink_create+0x29b/0x610 [ 220.685591][ C1] __sock_create+0x339/0x860 [ 220.685613][ C1] __sys_socket+0x14d/0x260 [ 220.685635][ C1] __x64_sys_socket+0x72/0xb0 [ 220.685658][ C1] do_syscall_64+0x123/0x790 [ 220.685696][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.685712][ C1] [ 220.685717][ C1] Memory state around the buggy address: [ 220.685726][ C1] ffff8880754cc580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.685739][ C1] ffff8880754cc600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.685752][ C1] >ffff8880754cc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.685762][ C1] ^ [ 220.685771][ C1] ffff8880754cc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.685784][ C1] ffff8880754cc780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.685793][ C1] ================================================================== [ 220.685803][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.619241][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.629730][ C1] Tainted: [L]=SOFTLOCKUP [ 221.634043][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 221.644082][ C1] Call Trace: [ 221.647344][ C1] [ 221.650173][ C1] dump_stack_lvl+0x100/0x190 [ 221.654857][ C1] vpanic+0x553/0x970 [ 221.658822][ C1] ? __pfx_vpanic+0x10/0x10 [ 221.663402][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 221.668429][ C1] ? find_endpoint+0x2a3/0x2c0 [ 221.673203][ C1] panic+0xd1/0xe0 [ 221.676933][ C1] ? __pfx_panic+0x10/0x10 [ 221.681338][ C1] ? end_report.part.0+0x23/0x90 [ 221.686269][ C1] ? rcu_is_watching+0x13/0xc0 [ 221.691041][ C1] ? end_report.part.0+0x23/0x90 [ 221.695970][ C1] check_panic_on_warn.cold+0x19/0x34 [ 221.701341][ C1] end_report.part.0+0x3a/0x90 [ 221.706154][ C1] kasan_report.cold+0xe/0x18 [ 221.710827][ C1] ? find_endpoint+0x2a3/0x2c0 [ 221.715585][ C1] find_endpoint+0x2a3/0x2c0 [ 221.720163][ C1] dummy_timer+0x500/0x3700 [ 221.724665][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.730476][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 221.735409][ C1] ? rcu_is_watching+0x13/0xc0 [ 221.740165][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.745959][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 221.750891][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 221.756084][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 221.761186][ C1] handle_softirqs+0x1e6/0x9d0 [ 221.765941][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 221.771210][ C1] ? _raw_spin_unlock+0x28/0x50 [ 221.776045][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 221.781669][ C1] __irq_exit_rcu+0x16a/0x210 [ 221.786347][ C1] irq_exit_rcu+0x9/0x30 [ 221.790662][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 221.796290][ C1] [ 221.799207][ C1] [ 221.802126][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.808095][ C1] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 221.814590][ C1] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 83 e9 fb 09 e8 4e 1e 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 221.834184][ C1] RSP: 0018:ffffc900001a7c38 EFLAGS: 00000206 [ 221.840237][ C1] RAX: 0000000000e8ff7d RBX: ffff88801f6c4b00 RCX: 0000000000000000 [ 221.848225][ C1] RDX: 0000000000000001 RSI: ffffffff8e3ebf9c RDI: ffff88801f6c6210 [ 221.856181][ C1] RBP: ffffc900001a7c90 R08: 0000000000000001 R09: 0000000000000000 [ 221.864176][ C1] R10: 0000000000000001 R11: ffffffff81d73ed9 R12: ffff888033212580 [ 221.872163][ C1] R13: 0000000000000001 R14: ffffffff91454404 R15: ffff8880b853bf00 [ 221.880123][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 221.886012][ C1] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 221.891901][ C1] __schedule+0x1261/0x6920 [ 221.896406][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.901615][ C1] ? __pfx___schedule+0x10/0x10 [ 221.906467][ C1] ? rcu_is_watching+0x13/0xc0 [ 221.911228][ C1] ? tick_nohz_idle_exit+0x1a1/0x3f0 [ 221.916503][ C1] schedule_idle+0x54/0x80 [ 221.920904][ C1] do_idle+0x365/0x5b0 [ 221.924975][ C1] ? __pfx_do_idle+0x10/0x10 [ 221.929551][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 221.935438][ C1] cpu_startup_entry+0x4f/0x60 [ 221.940195][ C1] start_secondary+0x21d/0x2d0 [ 221.944959][ C1] ? __pfx_start_secondary+0x10/0x10 [ 221.950241][ C1] common_startup_64+0x13e/0x158 [ 221.955220][ C1] [ 221.958438][ C1] Kernel Offset: disabled [ 221.962744][ C1] Rebooting in 86400 seconds..