last executing test programs: 12.230728398s ago: executing program 3 (id=296): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060060904001005030001000921000036012205000905810300000cfd"], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x25, @string={0x25, 0x3, "9942d04b1c40147645254bce8b77d09c9d7c554463f670586a8d6b05260e7932af0634"}}, &(0x7f0000000600)={0x0, 0x22, 0xe, {[@main=@item_012={0x2, 0x0, 0x9, "64b6"}, @global=@item_012={0x1, 0x1, 0x3, "af"}, @main=@item_012={0x1, 0x0, 0xa, 'I'}, @global=@item_012={0x2, 0x1, 0x7, "d664"}, @global=@item_012={0x0, 0x1, 0xf}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x1, 0x2, 0x4, "e8"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0xcc0}}}}, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x0, 0x8, 0x25, "a18167bf6d473f0212c3d7c7dec221e2d9b3a550c07829a855811025212e84c312b7d8600c"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0x20, 0x1, 0x75, "ec5f5f300c7a16834ae03fcc57ed8543a8f509029f42f2e6a0f456f0b90b9c7aa6c8717c7616c424a927bc21a452568b62d9de44b4e17d417c4e8014ab1b81dd49832677b4f47d2a44361e09269bc023c6bfe2e14c201b6d3af3c255a0ab76862b3aacf37bf4a5fa2cc5a64dd9a5d215d3edc3b652"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0xc4}}) 8.716618758s ago: executing program 3 (id=306): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f01a, 0x4}) (fail_nth: 4) 8.645744545s ago: executing program 0 (id=307): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x11c3682, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x6, 0x0, 0x5, 0x0, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x0, 0x2000000000000, 0x3, 0x3, 0x5, 0x9, 0x0, 0x3, 0x816, 0xf48, 0x37, 0x5}) r1 = dup(r0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r7, &(0x7f0000000040), 0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, r7, 0x1, '\x00', 0x0, r7, 0x3, 0x3, 0x4}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x0) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000003c0)='GPL\x00', 0x8, 0x22, &(0x7f0000000400)=""/34, 0x40f00, 0x40, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r2, r2, r2, 0xffffffffffffffff], 0x0, 0x10, 0xc}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) 8.570554303s ago: executing program 3 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x80, 0x2, 0xfd}}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$l2tp(0x2, 0x2, 0x73) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf2503000000200007800c000400ff0f00000000000008000100030000000800020045000000400002803c00038008000200ffffffff08000200000006000800010004000000080002000e000000080001000200000008000200cefbffff08000200010001001800058007002100696200000c00028008000400dc010000"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x21) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000540)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.642141373s ago: executing program 3 (id=310): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) set_tid_address(0x0) 6.508422322s ago: executing program 4 (id=312): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e3002a0001f14000000d190c937dc6914243b0402d6dcb70ad80851956fe6727ae888746b02cee670a5882a0ad79716584e6b04b7f62edac751478af9c62f", 0xfffff, 0xfffffffffffffffc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x24) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$unix(r6, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b08000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 6.491698935s ago: executing program 1 (id=313): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000004000/0x3000)=nil) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x80, 0x8d5558dc7bf693d6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="4d5154444389"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x4001af84, &(0x7f0000000500)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c0003"], 0x10c}}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 5.502985933s ago: executing program 4 (id=314): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0x14, 0xab, "2a787717ee9946f6de856be1da32da59ee2d69893c0741631ad9160e326ff16a18f2ba68b3dd98d2dd4094096de4de9bbec05301c10414824825b825da3cb341af8ff69a79931ce77c1edb73e41a00d4e87d42a481233fa397502ea4c276d46335e84048f1d2c15791203c21e76c13cbf86a65e1ac72535a60a42ccec7b70adc75ff778568f53bc046c72f649702b2e2b120a85781e302185ce02e3a6c60b3f8909c4ccfa9b7aa960da816"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, 0x0, 0x0, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "af1aee06db485066a395f8f42032073b84c6f81f125a198b2dda0edcac7fe4c5d3581bd12e40307a7f5433f79154ad"}}) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='ocfs2\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001600)={0x84, &(0x7f0000001200)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.48244615s ago: executing program 0 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="341800000009000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c0100000000002020207b1af8ff00000000bfa100010001000047010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xd, @mcast2, 0x7}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='ext4_es_lookup_extent_exit\x00', r2, 0x0, 0x4e9}, 0x18) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet6(r8, &(0x7f0000000540)={&(0x7f0000000100)={0xa, 0x4e22, 0xcf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000180)="1c", 0x1}], 0x1}, 0x20000001) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0xd, &(0x7f0000000b00)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b708004f50107c0ee424c39300000000007b8af8ff00000000bfa200000000000007217a7089ffffffb703000008000000b704000000000000852000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r11}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x6e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000000c0)={r10, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x7f}, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r12 = syz_io_uring_setup(0x10f, &(0x7f00000009c0)={0x0, 0x46ee, 0x10000, 0xffffdffd, 0x32e}, &(0x7f0000000140), &(0x7f0000001080)) io_uring_enter(r12, 0x3516, 0x67f, 0x64, 0x0, 0x0) 5.357965944s ago: executing program 1 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x23, 0x24, 0xd0f, 0x70bd25, 0x10000000, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) 5.026577678s ago: executing program 1 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r1, 0x0, 0xd, &(0x7f00000002c0)={0x1, 0x77, 0x2}) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00040000000000008000ffff010000000300", @ANYRES32=r4, @ANYBLOB="0c009900fdffffff040000000a0006000802110000010000"], 0x34}}, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fb0200000000000000000000850000002c000000850000000e00000095", @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESOCT=r4, @ANYRES8=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.764068365s ago: executing program 1 (id=319): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r0 = socket$inet(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fbf, @loopback}, 0x1c) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='reno', 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/4108, 0x100c}], 0x1, 0x0, 0x0, 0x407006}, 0x104) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) 4.410684146s ago: executing program 0 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) timer_create(0x1, &(0x7f0000000000)={0x0, 0x2f, 0x1, @thr={&(0x7f0000000240)="25a696df4071022ee915ee19f11954eba0096e9315ede1075468ae300284577d13fd159421c20e46e333dbfbac115c5b26e829ea3d7bf2e2669ad69fa23b9f93d130df39eb97909b47afac1807e290c9cd1c5805f3dfcc67bea7858cb2cf1f26e1cebbd0686dbefaab85f735bad4d7dfdcf71245f32cb8e872869eff516fbfa8ff393de7aa940b0f0ef045c5c3e3", &(0x7f0000000300)="784b4ca3499f0204fd19fed656566ff1a7b1613d0d57f65a4b48a1dcab6c6e85735104087f362b3e6d8eb82f4805502ef6dd3356e8fa50cfe0128e1a03ef1596d408030665dac622593ebd99d647d228ca833289355f1e58e30990b7140e0166f19ad05c51f7bf1c3af629510feec428c520a1ae912d9857bf2e1de1c23f85db3d24b378b345f3ec37967ad43144a7d8c5c081e8a416d51173ec67116e2ec90eb897d8d89b2da37024674d79"}}, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) 3.478251548s ago: executing program 3 (id=322): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060060904001005030001000921000036012205000905810300000cfd"], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x15, @string={0x15, 0x3, "9942d04b1c40147645254bce8b77d09c9d7c55"}}, &(0x7f0000000600)={0x0, 0x22, 0xe, {[@main=@item_012={0x2, 0x0, 0x9, "64b6"}, @global=@item_012={0x1, 0x1, 0x3, "af"}, @main=@item_012={0x1, 0x0, 0xa, 'I'}, @global=@item_012={0x2, 0x1, 0x7, "d664"}, @global=@item_012={0x0, 0x1, 0xf}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x1, 0x2, 0x4, "e8"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0xcc0}}}}, &(0x7f0000000840)={0x2c, &(0x7f00000006c0)={0x0, 0x8, 0x25, "a18167bf6d473f0212c3d7c7dec221e2d9b3a550c07829a855811025212e84c312b7d8600c"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0x20, 0x1, 0x75, "ec5f5f300c7a16834ae03fcc57ed8543a8f509029f42f2e6a0f456f0b90b9c7aa6c8717c7616c424a927bc21a452568b62d9de44b4e17d417c4e8014ab1b81dd49832677b4f47d2a44361e09269bc023c6bfe2e14c201b6d3af3c255a0ab76862b3aacf37bf4a5fa2cc5a64dd9a5d215d3edc3b652"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0xc4}}) 3.389099712s ago: executing program 1 (id=323): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x15) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000002c0)=0x8) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="004246446312ec00800002000000000000000000c6ce5d06"], 0x48}, 0x300}, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="040000000d005f"], 0x10}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100), 0x0, 0x2, 0x5, 0x0, r8}) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="044308156e22cf318d25055f12130100"], 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) 2.986813806s ago: executing program 0 (id=324): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d0006090582020002000110394c95186a7286a5b3a2b19519a954879254c9107fc6dd5ce4a2c1fc27e0c38f427f158c6a277ff6"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xb8\x96\x0e\x03\x00\x00\x00Y\xe7\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x101, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/vlan/config\x00') read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020}, 0x3ec5f1bbb5eb26ef) read$FUSE(r6, &(0x7f0000003ec0)={0x2020}, 0x1422) 2.310978582s ago: executing program 2 (id=325): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.130781s ago: executing program 2 (id=326): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0xffffff7e, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xfdef) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x1000, 0xf000, 0x9, 0x80, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0x41000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x85, 0x1, 0x4, 0x0, 0xe}, {0xf000, 0x8000000, 0xa, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x1, 0x92, 0x80}, {0x7000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0x80a0000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6, 0x2, 0x8}, {0x4000, 0xd000, 0xe, 0x1, 0xaa, 0x2, 0x5, 0x9, 0x1, 0x10, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcd, 0xff, 0x9}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0xff, 0x3, 0x7f, 0x1, 0xf, 0x8}, {0xdddd1000, 0x5}, {0x80a0000, 0xff81}, 0x0, 0x0, 0x6000, 0x1a1, 0x5, 0xe801, 0x8000900, 0x0, [0xb, 0x2, 0x3, 0x1be]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, r8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r9 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r9, 0x0, 0x0, 0x1, 0x3000) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fremovexattr(r10, &(0x7f0000002480)=@known='trusted.overlay.upper\x00') msgsnd(r9, &(0x7f0000000040)={0x1}, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIMINTERFACE(r11, 0x8004550f, 0x0) r12 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 2.125268132s ago: executing program 4 (id=327): socket$nl_route(0x10, 0x3, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00002e2000/0x2000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000f1a000/0x4000)=nil, 0x4000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x7, @pix={0xc6, 0xd5, 0x30395056, 0x6, 0x0, 0x0, 0xc, 0xc107, 0x1, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="83040500000000002000128008000100677265001400028008000600ac0314bb06000e0001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x64010101}}}], 0x20}}], 0x1, 0x4880) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) 1.910543481s ago: executing program 4 (id=328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_clone(0x7a8a9211, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x200a4800) sched_setscheduler(r3, 0x5, &(0x7f0000000040)=0x1000) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x8000) ioctl$sock_SIOCDELRT(r2, 0x890c, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000340)={0x0, 0x432a, 0x400, 0x2, 0x3d0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x3}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.878757865s ago: executing program 1 (id=329): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x480, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000300)=""/153, 0x99}], 0x2) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1240b10000000040ac05028100000000000109022400010000100009040000010300020009210000000122050009058103400c0000f7d5340600b73369b49a3cf8f0ef1016d0e23b8889d2f518d6c1a7882e30ab467ba826bb7e57e6f7911569304f41966cc224f59782dd29831eae4875de904ed62589585c29ecdcfe21a7e692baa56e3fb3ffce1aa3a65cc88cc4c281b149864e553ac3046a4b600b093a61757089637f5e97032bc1e3267da34c70ba8baff7e6109ed2fc8da6c8130f9a9c3ac805a02e3e7749f9471a8ddd82ed99a319dad04238ccd6748c427e465f668ad6942b9e3a3c43b4281aaa9b1b0de349346c74"], 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) close(r2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0xffffffff) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x200bc9a, 0x10100, 0x3, 0x80000210}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) r8 = fcntl$dupfd(r7, 0x406, r7) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='mode\x00', &(0x7f0000000040)='7', 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000040000100fcff06ee04000000010000000400488014000180100010800c000b8008501e80040001800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r10, 0x29, 0x10, &(0x7f0000000500)=0x5, 0x4) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000800"/24, @ANYRESOCT=r1, @ANYBLOB="fed1507beeabc1301200"/20, @ANYRES32=0x0, @ANYRES8=r5, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semop(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) 1.766172422s ago: executing program 2 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100050000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.410909632s ago: executing program 2 (id=331): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (fail_nth: 4) 966.971031ms ago: executing program 4 (id=332): syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff8000}]}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="71aaf3f67566"}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) read$msr(r0, &(0x7f0000000000)=""/2, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x2f0000, r2, 0x0, &(0x7f0000000140)={0x980924, 0x6, '\x00', @string=&(0x7f00000000c0)=0x4}}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x4, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x88c9}, 0x20000000) 927.491231ms ago: executing program 2 (id=333): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x54180, 0x80) r6 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00') execveat$binfmt(r5, r6, &(0x7f0000000340)={[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='/dev/ptmx\x00', &(0x7f0000000200)='/dev/ptmx\x00', &(0x7f0000000240)='#\\$}/(\x00', &(0x7f00000002c0)='\\\x00', &(0x7f0000000300)='/dev/ptmx\x00']}, &(0x7f0000000400)={[&(0x7f0000000380)='/dev/ptmx\x00', &(0x7f00000003c0)='{\x00']}, 0x100) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x7) 634.003834ms ago: executing program 2 (id=334): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$nfs(&(0x7f0000000040)='\x00', &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000480), 0x400, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="f6", 0x1}], 0x1}}, {{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2bed4a8cad9601b9, @my=0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)='\nv\"!', 0x4}], 0x1, &(0x7f0000000240)=[{0x10, 0x3a, 0xfa}], 0x10}}], 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x5000aea5, &(0x7f0000000040)) 604.182026ms ago: executing program 3 (id=335): socket(0xa, 0x3, 0x3a) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x4800, 0x8, 0x8}, 0x18) r3 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec29, 0x88e, 0x2, 0x1ae, 0x0, r2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r6 = mq_open(&(0x7f0000000080)='\'-\x00', 0x42, 0x0, 0x0) mq_notify(r6, &(0x7f0000000040)={0x0, 0xfffffffc, 0x1}) read(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000001900)={0x4, 0x226, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @generic={0xe, 0x81, "e6f7455fe58c1da0fed8ebbb84c12fa470842e403782c5d78db01028d6d18ad55e0659b9bcee514b4af1509332e2edc042a0f733eb4f06b0fba91d4369ec6855b0526efcd338de13bd71bbc6bc22b879a92338091797e751e873f43a439531f390dc4b55f4c060a083cb9c15d65e1c8ddb8d6dfe6f24a319fb920fe0a962ff3873"}, @calipso={0x7, 0x20, {0x2, 0x6, 0xf8, 0x7, [0x0, 0x2, 0x9]}}, @pad1, @calipso={0x7, 0x48, {0x2, 0x10, 0x3, 0xdeb, [0x5, 0x80000001, 0x100000001, 0x7fffffffffffffff, 0x9ab2, 0x200, 0x6, 0xb329]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0xf9, 0x3, [0x7, 0x9, 0x4, 0x7eb, 0x1a7c8bc8]}}, @generic={0x9, 0x1000, "655003affa29a5e27eb10c046536d4f1c55643577da58d9bd106aaf07e73f5e5ad160b9c08b60a36b4ccc6890359a05e8c0577a15949e1dc19af28c34267ab1f637740e475ed0778f123b14b4dde8299f04d4c6d1a493284e6c4fcaf399efef7e133cfc8b65d9fea8a917ac4d5177ce5c0253ab8647bf5d36296c6ff663ee2cc663097965811f9f8a2d71c8c4d04aad09b31d9f23a1b7a8495c05c3310f8372efc98dd2842b35b34f8642c08e0d71962554bb044589bfb04f8c67bee00196abb49f8feae677f91fe46daaa92b20c5cb2a8523f74b353edfb5cbfccd55aec653c64e255ab3eb771a53bef8863f1dc1a2a6e1ac8e936e585e73e1189b96e73fd1aec83cb8582e2d9736785945293c6b1471c89f6c00aa0745cf318b54edc6d56b8735ec5aec6af7e8a6beb60d6b74bbc1c4396d83500d2cac1aa0b84b089171880b367166ed0a91a0dc47a310fba87c791ab81183fbc60a88b3a20c821d07c1eba1bb525da1e2a72085671995bb59357bbe6337e19b907f0d1cd7751bc64cd4b6834c6d6366281be5ebfcbeb7652d53bb5054443550713d8b51a5b50c6af850dc1688283c1662e55be19c6b4ec0f5b4d2cef5c3961f3dec8319314f207964dd68986f964abd7677ca467f7ffefebe18791b2f8f68fb628c24b338b9480bc00721e32a547f025e5fa46c9898f967f193ea77f125128c9114e6a83f0f867e3c23e1d150a43b2b1409471a9ac4708083a09db2158bd1a3400f6af4a206d777afd19219f5b8dbd7719e1e7ced99d4a23125fded46a1ea0775f7c595761d372fe45c3bfd983835e149559a7628620b54c05b0a0bad29d7a4d34d91d2886946ab9b1fd2ce1ae3012686243263c46242d58a46ee4105f0ca380acc6430f006218ceab7805d2f1d087d0c43ea59e93015515052bd76dac672f7f435ed80ee88f2eddfef59e2c4528b8420e8cc9d9cba69ea5321efd0eb5f09d0b99b33c821576ed8a0e522f5fbe24f0be93c953c20dd9c81e133296afc0b1c827cd3bde3a2df7662dceadedc14a8e4ea0af2065235017e18466d10d4f0b98820b9f69900625bc9f8fb7473a405c3a93dc254647cfaff8d83ffd259468c54f9c4eac458c37249b482273f652d41f072599c6fe3c89f4b32084d7b0c174ded0401064143da69baef836894fc4c129155d57e905b748e0c4c44f196f31d9a16db9439a7c97b9ec3f8f294a209d238557205c27a841a3bcd928316af919b6d86f3ab3ddbe373ff295019aae5ce242d60ed252fe36312f70d71a648bc8bb9baa27d0599a86e8b023448b6c2e85de3e831a37d8995123533ff749b5a48fa01f4485e519eb9ac7eaa1ed761bc4ec3ab233900fc87da209ae1c712b81e1c93862ded7def7af6597cb13c93d956a7b675d85f71349e52bfaaa26a3493b6883b331059f956279653bc07317c76792283a8fd2ccfeb1615e8256ba11cbfadde3369679bd2e72a556da5cc1b68e251587ab8dcc712704ca51ac8436138729a904a84acaaebd4d5c1131c81e757021f6f5e267bbcef5250babdec636322e117430ced61252df6fa65389a74147a7878d36853c1d541efad80c264401f448c9322541f5e19f8b2053d7f261113453264a8c98754395e65394c48d10dc3cb913fa8d314c61768532ce578e9302e2d65f274aa13f1e093b65b342e86ed1d891911dce40b0dcfd686bb2b779a9e7aab0fbb3d1714e4f57ed475d11d70d0ecf451b89a8fd99bfd610bb8ec0b10a113540d7f9e69b2a3265a8a23554032acc69df42c041e913c4b47657a8be3ae2395481473106b0f859bee2a4ef423e076712bcf9858f36ef8070d797659de198cca89cda4d0c43f5bb697cc13bf818e73589d5a257ac366c3f9498f43fa98bda7b9c4155d796c6f3d8194f6d6ec13481dffffad6f20344edff3ed9958f9bb10483d5c2e559af712b11a52e04b5ee2238a01986a5ad229e4a8cb9a2cb4064434ae04916bbbf84fa60fd0639511e8f60e71531b82ad70c00764683a64b68d26b29bfd5724262be4e5b62bece6e3885a06e57c732efce582343add84dd6e24afbd5ad6001dbb1baf1c508fc5a8f13f35b358310db1bf4cc8749bd8a0aca059451c9a3106af4776cebd4a792290ef2c0ef21e22b99cb9fb582465102bf42281d05266e57d60dc89f806c2dfc8d10a8cb1179d9830a25d6d126f57d3fd8cd3eb62ce0f4dd2e80e6c0426a7f8f3954396e4cfe0af82a7ea3866f22cc9a612b26d2c32cb1731e3f1dbf09bc6352de7e203953b27dc4d8a9d98ac7cb926e7cc8d2a982a898a6668cff2d9317bafdef3af412f26c154fd09fc99046ebe83f18d35b8f4be4ef2f3f9c2d58af6bbcb3be6c1cede87a5e6773c0c068cfc50fbb54956350587e5d8553ae20b973bc453ca9b1f74699a15bede7e773319561ad422d75c2c12de1b6ff4fc02653954197ccd225e2088efcc9f6293401f2b0d365931cad6706556c69d73726a78c42cadfa4de9f8f93a52d055c236481a9b94c4b2dc4f7668053f204b88ac11540f5a04f8c687284118bd6ff00e9f3db08505c6a96673fc82175f9248a7ebdf6481f764d6b8635df15c43bb03af9b728e4590241904bc815ea795d334acf23653fb0a287743c96802afd8f9690b6df8106d2cd70daa9863c5a1c8d07fe0b09b08983218a75126b0b11b1e9bb55a0ec1c351c1488929554d8d5abbf15b2291eac0d850155650153cc7477816dc5d1974864c5efff54a8fe15a8c763179fbd4a56865ba8de5f28c25797d2377e585c45b264a772fa1fd1384da84a1c771ed34096e45ca607dc46e364e5facefb3da4fce2c59e21fb3997138926536e45e0b2e9b9fb53adda9ee53b3dc7ed6a9e22020e32a803894d85f04771fbbc6403779e8623d0041b0b1a9bfd7d07efabb936a8591a3983a2799c634abd7fe6393601db9aadcdce5858c4267b332356f80affa5728a7e92dd0158368cca30de674b1a2e712414b901946b9f3d88050b5c88cd156fd9e78501a547b765b385516ce76c9d7e7e017300c9fdeb52514ed4f5101224e2dbd77f01616242502238f2a5c7e9d586ac5fa09ca4c1e6cec324d3b5b73f30cda41c2f529cb69128268fa129f48c05ef5651202941ddd2c837695a4528f04996d51e52ee165a28fb6cd93f6bdee5e45b73467c626fe959c64b3f15606b48bd9dd1dccf44e61fb0a273afc9e9fd3ad9d25492305ad5b9a6b30072a0b1d6b9a0725288c063692e34488c95464af0f1d122c7a56548c5f637e78d0a9d1852ea5f11b7b931b25d38905ebeabe9a5aa08f6cfacaf7a1b6e4cc145524b7cb0306035dc8d5ea034eb75728d828890c0cf41254dffcd487181dff7c51f705ee3c46f7fb01add61042e596205bedcf71015138e2bafce88d58e0dba3c773f5c506cd05f7987cf5ddd96313db473c647f87f8fcf1b2bfa4dcc6ce8982265e673a2dfc0a0fd6b0661e22def89fbb93d8107ff8763950c55beb7c7d94c1153231f37b9aa6c86f5281f9004eb640f2354f6624333faf9205840dd6328c6330d1dc2fac07ed101918f5a04f4043e329bf6fe2b1395666aaa56de24aae8727c16ea3037afcfd222361a8130af7eb7bb5cc8d6b7519303f7f9ae309ec292f08bdf5ecdc5a24c3783876f175f67972f8490d8261436262bf5f6135f388fa41cf444b879e4e34f04d8954bd17555055f4b6ba6bac191e24aefd8e10c7ad2d1b0b0556ff32fe3d24f58f5035695f7712668c0dbd5615b63f6a3801ff96c1fca56e00cad88b146be6ca86433710172f25877bc5d799351486b0d465627b6a2bdad71d7cabf51f825025a99bdd74e24a2746352444ebfbd0e31c5122407f54dcc2d1200c5990ad415f63c7d925764ff7e3e0097a49007a35729eb886928e98ef03db55df74907746816d5d09f59a13fa679e86b00c289e395057e60322cfec6dad301566facb66a43620b86daa97bdb3b11990bb71425c4b4be28735644c30e8247ef25b60dfea79a2ad8154c9c46f9eb8e5c641fcaabaa87a7aac903d18749c15d7bc4a539925df3c3fcd2c65846583f468fa40ea2771fbc21596ac6a6a62ffbb960bd0c58907b32559d77984475a907193c469bbae320b4f417fd5b4b1b8c2e59b4735df3284cbb75ad5cb2d157a5b028148bf65332b93d8d1957df4fdf4d3437abc3380ea9f38725f96ce78a132b154a2ffa688b8f931e720127e12f592e1b6894d4b128122e3cbe4ca37329354fb0d2ebeff8d5ae1d6340a60b0567e572babbb640f3f5fcd703d0b0bae646bf1bcca4b17ca5efc996448341cf1e6bc689d8c8dfcfdfa2a24a84937084c21459ee4fd68c3ed877ac3dcdd96e6044917054274d65bd2aefcdcf303bb45093e748af72916a431c195032a2944b315629006fc01f9b79261a8a2a7c89393a2408c58c87f3f971c3d04c27c35d6e53b1eb032fcabb5c7ad5455146f1de5874ecf65525e7b7152894c4a9247e294e4ba83707089992f99b13605d3058377b8614bab3b2bcb3e98d99722a4e77b16bc1bbeb60fbc1a46dcd05da3681be1522642955a4e5ad7fa3517efa9f8c3e76fdda78625de4dbc59f9fed976e61e27668047d7726cb54842970a913847525df3f6b9cdf48ffa590df9877a91b6c890ba4d97c07d9d7ca327713b986474543111707e19ce97cc83d7b7b3cf7e8ef989e1dfea76c8f69fe3b1b231e9e60b07b4aa5948cb862261b61d751d7e34bc1340a5600b7a991ee9328e4094d319325f81cc41d797c7638ed28ef628d238db8487764eb8bf769a6e8a98a9b3cb0fe202ffaea6b6722cea05f894a681e793b908acfe348fc2cc63e4064c7148efa0a06051952aeb8af05d76cd6dccc35926c444f573f9be7ef31f296f6f61865bf0be5d703017f589b04741037788fc72ccf1d117483321a0243a04251497b6f7cfaf3a31880e90ad084a09f0d3dafa90f75d1e1dbee951eed0b64fd180b3b59d1b82255f973c3509904552409f78764d15f3fead33cf23df385f828ba1bd5eba96358faa26384285c550d0f75f5af21637ace6a3c7dff91f4c7fec6f838e306cb8a06619ac6ff2e019aabd1920fcc4c30cd9c6fc8ed18bdc10712f80751cf278600ae01da165b689d1b4baa4968d8ff4a0996f6a9d6aa64389742dc9ea5955257bad13c8a4782565181426ec8796a3edffa83b39f7fac7fc1111e77ecc723dfcab70969f82f28da6c81ee8ba521f2035cc93a42b96ae696015e7769d71af9e586c40ed89b8995c5e75ff11132701d33f0e9876e103e25871e288c6809a93b601454937b80c7351d1d310e5b9ecc1ec0c1c2ecd2fb8d6ddf60f56b57b536d1745234f4fb302697cd26f5a5f6f7b41f9cb701105ad180887e034cc0080e9690f98e1fd6f05694f8de9eef479d958820b0212b226e1d078cd9cd41028db3c674aac1efb9456716f562eed9a3c46697257b752c6d7dca9e447654cdef2ffa03b9dfd0a6f27caf3389f806c1ada3d79fc87942f38abaa6b492634275e57d215d225f468f4da80db0b8474db46080581ae18d3a4652705988efefe6ba7f7d89eb97099e9076cd59340b64e2e72d804e3d9f062b8bec14bff9e7d16b5b141670af6f249682c25606d7e3620c394ba05939a71c733f0d853c86148d2e8d489b9ccdaccd31101981597ba54856be8715b372c7b59ba4de625fc8c361e35b727323b35a18cac8c70624a9451ce438614234816b64e097834b3acb0e86fe198c9bed101adea89cd9145c50d82483775cf8819d5ebdc9ac314b7488aefa223e3198e610f89daa14ce3aef06115c5d"}]}, 0x1138) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 226.716279ms ago: executing program 0 (id=336): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r2, 0x917, 0x70bd28, 0x1000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}]}, 0x3c}, 0x1, 0x620b}, 0x0) 225.859798ms ago: executing program 0 (id=337): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0x14, 0xab, "2a787717ee9946f6de856be1da32da59ee2d69893c0741631ad9160e326ff16a18f2ba68b3dd98d2dd4094096de4de9bbec05301c10414824825b825da3cb341af8ff69a79931ce77c1edb73e41a00d4e87d42a481233fa397502ea4c276d46335e84048f1d2c15791203c21e76c13cbf86a65e1ac72535a60a42ccec7b70adc75ff778568f53bc046c72f649702b2e2b120a85781e302185ce02e3a6c60b3f8909c4ccfa9b7aa960da816"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, 0x0, 0x0, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "af1aee06db485066a395f8f42032073b84c6f81f125a198b2dda0edcac7fe4c5d3581bd12e40307a7f5433f79154ad"}}) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='ocfs2\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001600)={0x84, &(0x7f0000001200)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 4 (id=338): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prlimit64(r0, 0xe, &(0x7f0000000380)={0x200000009, 0xcab}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x4118400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x800, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xa0000001}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/wakeup_count', 0x361901, 0x10) read$char_usb(r8, &(0x7f0000000100)=""/177, 0x39) close_range(0xffffffffffffffff, r7, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="8900f9ff110081ae08060cdc03a6000000000004000000006e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f213adb01676ce01955fed0009d78f0a947ee2b49e", 0x6c}, {&(0x7f0000000400)="20af5f5a48384a15078bf0d4e98510daf8c9e006b2829cc46f94b625d7841a9ade05ab72f0fd6c54488cf7a686977678934c441ebe4f5ac6351742216ebb36262a60d3d2210710ddd772677da749058a90bfb732b4caec0a1d5df4a5f348707f4fb98ebd8412e9ae02fe232eba2bb070ba859fa0412ae00ea75e3489d16604fdf0ebf10cbbb5440096709ecd49468ddc0e9e5fa2455831cb783483d16f98bfb3786cbbe48d4a2c1c744be5f849fb9b526cace6e9f3787905b0189b2909bab2d1a680614349b075810e3e636fe4902ff3de50c1ff5023e86fdf00d708", 0xdc}], 0x2}, 0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x1000, 0x0) kernel console output (not intermixed with test programs): recv_control_msg error -71 req 02 val 2400 [ 97.515612][ T850] pwc: recv_control_msg error -71 req 02 val 2600 [ 97.522531][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 97.533981][ T5886] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 97.555762][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.563779][ T5886] usb 3-1: Product: syz [ 97.577348][ T5886] usb 3-1: Manufacturer: syz [ 97.581977][ T5886] usb 3-1: SerialNumber: syz [ 97.590731][ T850] pwc: recv_control_msg error -71 req 02 val 2900 [ 97.591069][ T850] pwc: recv_control_msg error -71 req 02 val 2800 [ 97.591491][ T850] pwc: recv_control_msg error -71 req 04 val 1100 [ 97.591803][ T850] pwc: recv_control_msg error -71 req 04 val 1200 [ 97.604644][ T850] pwc: Registered as video103. [ 97.656277][ T5886] usb 3-1: config 0 descriptor?? [ 97.667632][ T5886] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 97.706145][ T850] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 97.734404][ T850] usb 4-1: USB disconnect, device number 4 [ 97.795796][ T5926] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.868607][ T6315] netlink: 44 bytes leftover after parsing attributes in process `syz.2.102'. [ 97.955622][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.964399][ T5926] usb 2-1: config 255 has an invalid interface number: 222 but max is 0 [ 97.994408][ T5926] usb 2-1: config 255 has an invalid descriptor of length 1, skipping remainder of the config [ 98.037463][ T5926] usb 2-1: config 255 has no interface number 0 [ 98.063801][ T5926] usb 2-1: config 255 interface 222 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 98.075243][ T30] audit: type=1400 audit(1765982940.183:368): avc: denied { write } for pid=6334 comm="syz.3.108" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 98.114214][ T6338] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 98.122169][ T5926] usb 2-1: config 255 interface 222 altsetting 7 endpoint 0xA has an invalid bInterval 127, changing to 7 [ 98.133717][ T6338] audit: out of memory in audit_log_start [ 98.145306][ T5926] usb 2-1: config 255 interface 222 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 98.170311][ T30] audit: type=1400 audit(1765982940.183:369): avc: denied { read } for pid=6334 comm="syz.3.108" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 98.195176][ T5926] usb 2-1: config 255 interface 222 has no altsetting 0 [ 98.243697][ T30] audit: type=1400 audit(1765982940.183:370): avc: denied { open } for pid=6334 comm="syz.3.108" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 98.277440][ T5926] usb 2-1: New USB device found, idVendor=0803, idProduct=4310, bcdDevice=2b.0c [ 98.287280][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.295813][ T5926] usb 2-1: Product: á ‰ [ 98.301218][ T5926] usb 2-1: Manufacturer: â Š [ 98.602662][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.613467][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.640577][ T5926] usb 2-1: USB disconnect, device number 7 [ 99.116645][ T6353] netlink: 44 bytes leftover after parsing attributes in process `syz.3.113'. [ 99.241793][ T6363] FAULT_INJECTION: forcing a failure. [ 99.241793][ T6363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.275645][ T6363] CPU: 0 UID: 0 PID: 6363 Comm: syz.3.118 Not tainted syzkaller #0 PREEMPT(full) [ 99.275667][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.275679][ T6363] Call Trace: [ 99.275684][ T6363] [ 99.275690][ T6363] dump_stack_lvl+0x16c/0x1f0 [ 99.275714][ T6363] should_fail_ex+0x512/0x640 [ 99.275740][ T6363] _copy_from_user+0x2e/0xd0 [ 99.275764][ T6363] binder_ioctl+0x5df/0x7360 [ 99.275793][ T6363] ? tomoyo_path_number_perm+0x18d/0x580 [ 99.275820][ T6363] ? __pfx_binder_ioctl+0x10/0x10 [ 99.275841][ T6363] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.275862][ T6363] ? do_vfs_ioctl+0x128/0x14f0 [ 99.275882][ T6363] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.275900][ T6363] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.275929][ T6363] ? hook_file_ioctl_common+0x144/0x410 [ 99.275960][ T6363] ? selinux_file_ioctl+0x180/0x270 [ 99.275979][ T6363] ? selinux_file_ioctl+0xb4/0x270 [ 99.275999][ T6363] ? __pfx_binder_ioctl+0x10/0x10 [ 99.276019][ T6363] __x64_sys_ioctl+0x18e/0x210 [ 99.276040][ T6363] do_syscall_64+0xcd/0xf80 [ 99.276062][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.276078][ T6363] RIP: 0033:0x7f77d178f749 [ 99.276092][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.276105][ T6363] RSP: 002b:00007f77d26b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.276128][ T6363] RAX: ffffffffffffffda RBX: 00007f77d19e5fa0 RCX: 00007f77d178f749 [ 99.276137][ T6363] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 99.276145][ T6363] RBP: 00007f77d26b0090 R08: 0000000000000000 R09: 0000000000000000 [ 99.276153][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.276161][ T6363] R13: 00007f77d19e6038 R14: 00007f77d19e5fa0 R15: 00007fff628a6f28 [ 99.276181][ T6363] [ 99.470266][ T6363] binder: 6360:6363 ioctl c0306201 200000004a40 returned -14 [ 99.491982][ T6367] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 99.533157][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 99.542176][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 99.724434][ T6375] ======================================================= [ 99.724434][ T6375] WARNING: The mand mount option has been deprecated and [ 99.724434][ T6375] and is ignored by this kernel. Remove the mand [ 99.724434][ T6375] option from the mount to silence this warning. [ 99.724434][ T6375] ======================================================= [ 99.783394][ T6375] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.025415][ T6375] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 100.036415][ T6375] overlayfs: failed to look up (tracing) for ino (-66) [ 100.859793][ T5886] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 100.875884][ T5886] visor 3-1:0.0: probe with driver visor failed with error -71 [ 100.891087][ T5886] usb 3-1: USB disconnect, device number 3 [ 101.693902][ T6402] FAULT_INJECTION: forcing a failure. [ 101.693902][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 101.858698][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 101.858711][ T30] audit: type=1400 audit(1765982943.973:382): avc: denied { create } for pid=6398 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 101.895743][ T6402] CPU: 0 UID: 0 PID: 6402 Comm: syz.1.126 Not tainted syzkaller #0 PREEMPT(full) [ 101.895766][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.895775][ T6402] Call Trace: [ 101.895780][ T6402] [ 101.895786][ T6402] dump_stack_lvl+0x16c/0x1f0 [ 101.895808][ T6402] should_fail_ex+0x512/0x640 [ 101.895829][ T6402] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 101.895848][ T6402] should_failslab+0xc2/0x120 [ 101.895868][ T6402] kmem_cache_alloc_node_noprof+0x86/0x800 [ 101.895883][ T6402] ? copy_process+0x4b5/0x7430 [ 101.895910][ T6402] ? copy_process+0x4b5/0x7430 [ 101.895932][ T6402] copy_process+0x4b5/0x7430 [ 101.895968][ T6402] ? __pfx_copy_process+0x10/0x10 [ 101.895995][ T6402] ? lockdep_init_map_type+0x5c/0x270 [ 101.896015][ T6402] ? lockdep_init_map_type+0x5c/0x270 [ 101.896035][ T6402] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 101.896061][ T6402] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 101.896085][ T6402] vhost_task_create+0x1d2/0x370 [ 101.896106][ T6402] ? __pfx_vhost_task_create+0x10/0x10 [ 101.896133][ T6402] ? __pfx_vhost_task_fn+0x10/0x10 [ 101.896155][ T6402] ? __pfx___mutex_lock+0x10/0x10 [ 101.896181][ T6402] kvm_mmu_post_init_vm+0x1b7/0x380 [ 101.896200][ T6402] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 101.896219][ T6402] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 101.896247][ T6402] kvm_vcpu_ioctl+0x76d/0x16d0 [ 101.896272][ T6402] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.896295][ T6402] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.896313][ T6402] ? do_vfs_ioctl+0x128/0x14f0 [ 101.896331][ T6402] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.896347][ T6402] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 101.896374][ T6402] ? hook_file_ioctl_common+0x144/0x410 [ 101.896410][ T6402] ? selinux_file_ioctl+0x180/0x270 [ 101.896428][ T6402] ? selinux_file_ioctl+0xb4/0x270 [ 101.896448][ T6402] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.896471][ T6402] __x64_sys_ioctl+0x18e/0x210 [ 101.896490][ T6402] do_syscall_64+0xcd/0xf80 [ 101.896509][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.896524][ T6402] RIP: 0033:0x7f52d198f749 [ 101.896537][ T6402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.896552][ T6402] RSP: 002b:00007f52d2828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.896567][ T6402] RAX: ffffffffffffffda RBX: 00007f52d1be5fa0 RCX: 00007f52d198f749 [ 101.896576][ T6402] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 101.896585][ T6402] RBP: 00007f52d2828090 R08: 0000000000000000 R09: 0000000000000000 [ 101.896593][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.896602][ T6402] R13: 00007f52d1be6038 R14: 00007f52d1be5fa0 R15: 00007ffc48d456c8 [ 101.896625][ T6402] [ 102.191707][ T30] audit: type=1400 audit(1765982944.003:383): avc: denied { create } for pid=6398 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.925770][ T30] audit: type=1400 audit(1765982945.013:384): avc: denied { create } for pid=6413 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.804537][ T30] audit: type=1400 audit(1765982945.083:385): avc: denied { ioctl } for pid=6409 comm="syz.0.130" path="pid:[4026532796]" dev="nsfs" ino=4026532796 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 103.883425][ T6448] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 103.955254][ T30] audit: type=1400 audit(1765982946.063:386): avc: denied { listen } for pid=6454 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.036249][ T6458] FAULT_INJECTION: forcing a failure. [ 104.036249][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.049400][ T6458] CPU: 1 UID: 0 PID: 6458 Comm: syz.0.133 Not tainted syzkaller #0 PREEMPT(full) [ 104.049421][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.049430][ T6458] Call Trace: [ 104.049436][ T6458] [ 104.049443][ T6458] dump_stack_lvl+0x16c/0x1f0 [ 104.049468][ T6458] should_fail_ex+0x512/0x640 [ 104.049497][ T6458] _copy_from_user+0x2e/0xd0 [ 104.049523][ T6458] do_devconfig_ioctl+0x11c/0x710 [ 104.049544][ T6458] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 104.049567][ T6458] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 104.049602][ T6458] ? find_held_lock+0x2b/0x80 [ 104.049632][ T6458] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 104.049663][ T6458] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 104.049691][ T6458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.049713][ T6458] ? do_vfs_ioctl+0x128/0x14f0 [ 104.049734][ T6458] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.049753][ T6458] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.049784][ T6458] ? hook_file_ioctl_common+0x144/0x410 [ 104.049818][ T6458] ? selinux_file_ioctl+0x180/0x270 [ 104.049839][ T6458] ? selinux_file_ioctl+0xb4/0x270 [ 104.049861][ T6458] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 104.049885][ T6458] __x64_sys_ioctl+0x18e/0x210 [ 104.049907][ T6458] do_syscall_64+0xcd/0xf80 [ 104.049930][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.049947][ T6458] RIP: 0033:0x7f0b6c98f749 [ 104.049960][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.049976][ T6458] RSP: 002b:00007f0b6d7fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.049992][ T6458] RAX: ffffffffffffffda RBX: 00007f0b6cbe6180 RCX: 00007f0b6c98f749 [ 104.050002][ T6458] RDX: 0000200000000440 RSI: 0000000040946400 RDI: 000000000000000d [ 104.050012][ T6458] RBP: 00007f0b6d7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 104.050021][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.050030][ T6458] R13: 00007f0b6cbe6218 R14: 00007f0b6cbe6180 R15: 00007ffe3e31b668 [ 104.050054][ T6458] [ 104.433480][ T6461] FAULT_INJECTION: forcing a failure. [ 104.433480][ T6461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.446732][ T6461] CPU: 1 UID: 0 PID: 6461 Comm: syz.2.135 Not tainted syzkaller #0 PREEMPT(full) [ 104.446754][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.446764][ T6461] Call Trace: [ 104.446770][ T6461] [ 104.446776][ T6461] dump_stack_lvl+0x16c/0x1f0 [ 104.446804][ T6461] should_fail_ex+0x512/0x640 [ 104.446833][ T6461] _copy_to_user+0x32/0xd0 [ 104.446860][ T6461] simple_read_from_buffer+0xcb/0x170 [ 104.446885][ T6461] proc_fail_nth_read+0x197/0x240 [ 104.446905][ T6461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.446925][ T6461] ? rw_verify_area+0xcf/0x6c0 [ 104.446943][ T6461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.446961][ T6461] vfs_read+0x1e4/0xcf0 [ 104.446982][ T6461] ? __pfx___mutex_lock+0x10/0x10 [ 104.447007][ T6461] ? __pfx_vfs_read+0x10/0x10 [ 104.447034][ T6461] ? __fget_files+0x20e/0x3c0 [ 104.447065][ T6461] ksys_read+0x12a/0x250 [ 104.447092][ T6461] ? __pfx_ksys_read+0x10/0x10 [ 104.447113][ T6461] ? fput+0x70/0xf0 [ 104.447131][ T6461] do_syscall_64+0xcd/0xf80 [ 104.447154][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.447172][ T6461] RIP: 0033:0x7f4b4658e15c [ 104.447186][ T6461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.447202][ T6461] RSP: 002b:00007f4b447f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.447219][ T6461] RAX: ffffffffffffffda RBX: 00007f4b467e5fa0 RCX: 00007f4b4658e15c [ 104.447230][ T6461] RDX: 000000000000000f RSI: 00007f4b447f60a0 RDI: 0000000000000006 [ 104.447239][ T6461] RBP: 00007f4b447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 104.447249][ T6461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.447258][ T6461] R13: 00007f4b467e6038 R14: 00007f4b467e5fa0 R15: 00007ffe57979068 [ 104.447283][ T6461] [ 104.639668][ T30] audit: type=1400 audit(1765982946.093:387): avc: denied { accept } for pid=6454 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.733012][ T30] audit: type=1400 audit(1765982946.843:388): avc: denied { connect } for pid=6462 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.753470][ T6463] netlink: 72 bytes leftover after parsing attributes in process `syz.1.134'. [ 104.937466][ T30] audit: type=1400 audit(1765982947.053:389): avc: denied { setopt } for pid=6462 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.014704][ T6464] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 105.025090][ T30] audit: type=1400 audit(1765982947.123:390): avc: denied { setopt } for pid=6462 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.025247][ T30] audit: type=1400 audit(1765982947.123:391): avc: denied { bind } for pid=6462 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.195841][ T5816] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.546139][ T5816] usb 4-1: Using ep0 maxpacket: 32 [ 106.593995][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.624232][ T5816] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.663099][ T5816] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 106.701876][ T5816] usb 4-1: config 0 interface 0 has no altsetting 0 [ 106.723040][ T5816] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 106.748304][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.780294][ T5816] usb 4-1: config 0 descriptor?? [ 106.951033][ T6486] netlink: 176 bytes leftover after parsing attributes in process `syz.4.141'. [ 107.009006][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 107.009023][ T30] audit: type=1400 audit(1765982949.023:396): avc: denied { shutdown } for pid=6483 comm="syz.4.141" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.055808][ T6491] tmpfs: Bad value for 'mpol' [ 107.068146][ T6490] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 107.122446][ T30] audit: type=1400 audit(1765982949.023:397): avc: denied { read } for pid=6483 comm="syz.4.141" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.147114][ T6492] FAULT_INJECTION: forcing a failure. [ 107.147114][ T6492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.258631][ T30] audit: type=1400 audit(1765982949.063:398): avc: denied { write } for pid=6483 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.325758][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.2.143 Not tainted syzkaller #0 PREEMPT(full) [ 107.325779][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.325788][ T6492] Call Trace: [ 107.325794][ T6492] [ 107.325800][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 107.325824][ T6492] should_fail_ex+0x512/0x640 [ 107.325849][ T6492] _copy_from_iter+0x2a4/0x16c0 [ 107.325867][ T6492] ? __alloc_skb+0x220/0x410 [ 107.325883][ T6492] ? __alloc_skb+0x35d/0x410 [ 107.325898][ T6492] ? __pfx__copy_from_iter+0x10/0x10 [ 107.325915][ T6492] ? netlink_autobind.isra.0+0x158/0x370 [ 107.325943][ T6492] netlink_sendmsg+0x820/0xdd0 [ 107.325965][ T6492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.325991][ T6492] ____sys_sendmsg+0xa5d/0xc30 [ 107.326006][ T6492] ? copy_msghdr_from_user+0x10a/0x160 [ 107.326016][ T6492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.326035][ T6492] ___sys_sendmsg+0x134/0x1d0 [ 107.326045][ T6492] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.326084][ T6492] __sys_sendmsg+0x16d/0x220 [ 107.326101][ T6492] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.326130][ T6492] do_syscall_64+0xcd/0xf80 [ 107.326147][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.326157][ T6492] RIP: 0033:0x7f4b4658f749 [ 107.326166][ T6492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.326175][ T6492] RSP: 002b:00007f4b447d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.326185][ T6492] RAX: ffffffffffffffda RBX: 00007f4b467e6090 RCX: 00007f4b4658f749 [ 107.326191][ T6492] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 107.326197][ T6492] RBP: 00007f4b447d5090 R08: 0000000000000000 R09: 0000000000000000 [ 107.326204][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.326213][ T6492] R13: 00007f4b467e6128 R14: 00007f4b467e6090 R15: 00007ffe57979068 [ 107.326235][ T6492] [ 107.395870][ T30] audit: type=1400 audit(1765982949.063:399): avc: denied { nlmsg_write } for pid=6483 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.627951][ T5816] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 107.700035][ T5816] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 107.727339][ C1] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 107.761305][ T5816] usb 4-1: USB disconnect, device number 5 [ 107.795773][ T30] audit: type=1400 audit(1765982949.163:400): avc: denied { read write } for pid=6489 comm="syz.2.143" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.817855][ T6496] fido_id[6496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.855066][ T30] audit: type=1400 audit(1765982949.163:401): avc: denied { open } for pid=6489 comm="syz.2.143" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.909273][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 107.919906][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 107.933101][ T30] audit: type=1400 audit(1765982949.173:402): avc: denied { ioctl } for pid=6489 comm="syz.2.143" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.961308][ T30] audit: type=1400 audit(1765982949.663:403): avc: denied { create } for pid=6494 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.983157][ T30] audit: type=1400 audit(1765982949.663:404): avc: denied { bind } for pid=6494 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.085742][ T5928] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.187204][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 108.193475][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 108.267546][ T5928] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 108.276772][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.312797][ T5928] usb 2-1: config 0 descriptor?? [ 108.629425][ T6498] ceph: No mds server is up or the cluster is laggy [ 108.668266][ T5928] ath6kl: Failed to submit usb control message: -71 [ 108.674944][ T5928] ath6kl: unable to send the bmi data to the device: -71 [ 108.701153][ T5928] ath6kl: Unable to send get target info: -71 [ 108.719460][ T5928] ath6kl: Failed to init ath6kl core: -71 [ 108.739577][ T5928] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 108.781776][ T5928] usb 2-1: USB disconnect, device number 8 [ 108.797182][ T30] audit: type=1400 audit(1765982950.903:405): avc: denied { name_bind } for pid=6524 comm="syz.2.153" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 108.886790][ T6525] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 108.925276][ T6525] bond2 (unregistering): Released all slaves [ 109.315802][ T5932] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.332859][ T5928] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 109.855793][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 109.862169][ T5932] usb 1-1: config 8 has an invalid interface number: 3 but max is 0 [ 109.865754][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 109.870364][ T5932] usb 1-1: config 8 has no interface number 0 [ 109.877025][ T5928] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 109.892203][ T5932] usb 1-1: config 8 interface 3 has no altsetting 0 [ 109.893232][ T5928] usb 2-1: config 252 has no interface number 0 [ 109.900633][ T5932] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1101, bcdDevice= b.85 [ 109.905577][ T5928] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.917851][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.932652][ T5928] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 109.933966][ T5932] usb 1-1: Product: syz [ 109.943359][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.947267][ T5932] usb 1-1: Manufacturer: syz [ 109.955432][ T5928] usb 2-1: Product: syz [ 109.959818][ T5932] usb 1-1: SerialNumber: syz [ 109.964110][ T5928] usb 2-1: Manufacturer: syz [ 109.978851][ T5928] usb 2-1: SerialNumber: syz [ 111.292766][ T6554] input: syz1 as /devices/virtual/input/input11 [ 111.635616][ T6558] netlink: 'syz.3.161': attribute type 1 has an invalid length. [ 112.073730][ T5928] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 112.143801][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 112.143820][ T30] audit: type=1400 audit(1765982954.073:413): avc: denied { mount } for pid=6555 comm="syz.3.161" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 112.333999][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 112.646727][ T6561] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.742815][ T2114] usb 2-1: Failed to submit usb control message: -71 [ 112.803420][ T30] audit: type=1400 audit(1765982954.913:414): avc: denied { bind } for pid=6559 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.957277][ T2114] usb 2-1: unable to send the bmi data to the device: -71 [ 113.043396][ T2114] usb 2-1: unable to get target info from device [ 113.095771][ T2114] usb 2-1: could not get target info (-71) [ 113.107679][ T5928] usb 2-1: USB disconnect, device number 9 [ 113.121241][ T6558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.135937][ T2114] usb 2-1: could not probe fw (-71) [ 113.393006][ T6560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.405993][ T30] audit: type=1400 audit(1765982955.523:415): avc: denied { write } for pid=6559 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.445601][ T6560] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.464988][ T6560] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 113.501362][ T6562] veth3: entered promiscuous mode [ 113.511005][ T6562] bond1: (slave veth3): Enslaving as an active interface with a down link [ 113.547069][ T6564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.572945][ T6561] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 114.191080][ T30] audit: type=1400 audit(1765982956.303:416): avc: denied { execute } for pid=6577 comm="syz.1.165" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 114.316834][ T5932] qmi_wwan 1-1:8.3: probe with driver qmi_wwan failed with error -22 [ 114.332652][ T5932] usb 1-1: USB disconnect, device number 6 [ 114.430745][ T6595] kAFS: unable to lookup cell 'Þ({^ú@' [ 114.526108][ T5928] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.096770][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 115.105882][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 115.125846][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171'. [ 115.135457][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.253387][ T5928] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.273354][ T6599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 115.284099][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171'. [ 115.845524][ T5928] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.855942][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.967287][ T5928] usb 4-1: config 0 descriptor?? [ 116.065842][ T30] audit: type=1400 audit(1765982958.113:417): avc: denied { read } for pid=6606 comm="syz.2.173" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.203299][ T30] audit: type=1400 audit(1765982958.113:418): avc: denied { open } for pid=6606 comm="syz.2.173" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.247073][ T30] audit: type=1400 audit(1765982958.113:419): avc: denied { ioctl } for pid=6606 comm="syz.2.173" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 116.283162][ T30] audit: type=1400 audit(1765982958.303:420): avc: denied { bind } for pid=6579 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.311612][ T30] audit: type=1400 audit(1765982958.303:421): avc: denied { node_bind } for pid=6579 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 116.426339][ T30] audit: type=1326 audit(1765982958.543:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="syz.0.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b6c98f749 code=0x7ffc0000 [ 116.518822][ T6618] FAULT_INJECTION: forcing a failure. [ 116.518822][ T6618] name failslab, interval 1, probability 0, space 0, times 0 [ 116.533035][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.1.175 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.533064][ T6618] Tainted: [L]=SOFTLOCKUP [ 116.533071][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.533077][ T6618] Call Trace: [ 116.533081][ T6618] [ 116.533085][ T6618] dump_stack_lvl+0x16c/0x1f0 [ 116.533103][ T6618] should_fail_ex+0x512/0x640 [ 116.533119][ T6618] ? kmem_cache_alloc_noprof+0x62/0x770 [ 116.533132][ T6618] should_failslab+0xc2/0x120 [ 116.533146][ T6618] kmem_cache_alloc_noprof+0x83/0x770 [ 116.533156][ T6618] ? __pmd_alloc+0xbf/0x9c0 [ 116.533173][ T6618] ? __pmd_alloc+0xbf/0x9c0 [ 116.533185][ T6618] __pmd_alloc+0xbf/0x9c0 [ 116.533198][ T6618] ? __pud_alloc+0x57a/0x760 [ 116.533213][ T6618] __handle_mm_fault+0xbeb/0x2bb0 [ 116.533233][ T6618] ? __pfx___handle_mm_fault+0x10/0x10 [ 116.533257][ T6618] ? find_vma+0xbf/0x140 [ 116.533270][ T6618] ? __pfx_find_vma+0x10/0x10 [ 116.533284][ T6618] handle_mm_fault+0x3fe/0xad0 [ 116.533302][ T6618] do_user_addr_fault+0x7a6/0x1370 [ 116.533317][ T6618] ? rcu_is_watching+0x12/0xc0 [ 116.533329][ T6618] exc_page_fault+0x64/0xc0 [ 116.533343][ T6618] asm_exc_page_fault+0x26/0x30 [ 116.533352][ T6618] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 116.533374][ T6618] Code: 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 116.533390][ T6618] RSP: 0018:ffffc9000f7a7d70 EFLAGS: 00050202 [ 116.533404][ T6618] RAX: 0000000000000001 RBX: 0000200000000080 RCX: 0000000000000078 [ 116.533413][ T6618] RDX: fffff52001ef4fd3 RSI: 0000200000000080 RDI: ffffc9000f7a7e20 [ 116.533419][ T6618] RBP: 0000000000000078 R08: 0000000000000001 R09: fffff52001ef4fd2 [ 116.533425][ T6618] R10: ffffc9000f7a7e97 R11: ffff88802b09d4b0 R12: 0000000000000000 [ 116.533431][ T6618] R13: ffffc9000f7a7e20 R14: ffff8880202ce000 R15: ffffc9000f7a7e20 [ 116.533444][ T6618] _copy_from_user+0x98/0xd0 [ 116.533462][ T6618] copy_msqid_from_user.constprop.0+0x1d/0x50 [ 116.533479][ T6618] ksys_msgctl.constprop.0+0x1bb/0x330 [ 116.533495][ T6618] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.533509][ T6618] ? __pfx_ksys_msgctl.constprop.0+0x10/0x10 [ 116.533526][ T6618] ? __fget_files+0x20e/0x3c0 [ 116.533551][ T6618] do_syscall_64+0xcd/0xf80 [ 116.533564][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.533574][ T6618] RIP: 0033:0x7f52d198f749 [ 116.533582][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.533591][ T6618] RSP: 002b:00007f52d2828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 116.533600][ T6618] RAX: ffffffffffffffda RBX: 00007f52d1be5fa0 RCX: 00007f52d198f749 [ 116.533606][ T6618] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000000 [ 116.533612][ T6618] RBP: 00007f52d2828090 R08: 0000000000000000 R09: 0000000000000000 [ 116.533617][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.533623][ T6618] R13: 00007f52d1be6038 R14: 00007f52d1be5fa0 R15: 00007ffc48d456c8 [ 116.533637][ T6618] [ 117.385021][ T5886] usb 4-1: USB disconnect, device number 6 [ 118.103222][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 118.103252][ T30] audit: type=1400 audit(1765982960.133:446): avc: denied { map } for pid=6627 comm="syz.3.180" path="socket:[11599]" dev="sockfs" ino=11599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.362726][ T30] audit: type=1400 audit(1765982960.133:447): avc: denied { read } for pid=6627 comm="syz.3.180" path="socket:[11599]" dev="sockfs" ino=11599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.436082][ T30] audit: type=1400 audit(1765982960.143:448): avc: denied { setopt } for pid=6627 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.479783][ T6636] kAFS: unable to lookup cell 'Þ({^ú@' [ 118.555796][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.635849][ T6639] input: syz0 as /devices/virtual/input/input12 [ 119.185629][ T6639] mmap: syz.1.184 (6639) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.206679][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 119.213729][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.224562][ T5886] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.240506][ T5886] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 119.253968][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.260988][ T5886] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 119.270686][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.287520][ T5886] usb 3-1: config 0 descriptor?? [ 119.454953][ T6650] FAULT_INJECTION: forcing a failure. [ 119.454953][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 119.467638][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.0.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.467663][ T6650] Tainted: [L]=SOFTLOCKUP [ 119.467669][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.467679][ T6650] Call Trace: [ 119.467685][ T6650] [ 119.467692][ T6650] dump_stack_lvl+0x16c/0x1f0 [ 119.467717][ T6650] should_fail_ex+0x512/0x640 [ 119.467742][ T6650] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 119.467769][ T6650] should_failslab+0xc2/0x120 [ 119.467791][ T6650] kmem_cache_alloc_noprof+0x83/0x770 [ 119.467808][ T6650] ? skb_clone+0x190/0x3f0 [ 119.467830][ T6650] ? skb_clone+0x190/0x3f0 [ 119.467845][ T6650] skb_clone+0x190/0x3f0 [ 119.467863][ T6650] netlink_deliver_tap+0xabd/0xd30 [ 119.467888][ T6650] netlink_unicast+0x64c/0x870 [ 119.467911][ T6650] ? __pfx_netlink_unicast+0x10/0x10 [ 119.467931][ T6650] ? security_netlink_send+0x1ee/0x210 [ 119.467951][ T6650] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 119.467976][ T6650] netlink_sendmsg+0x8c8/0xdd0 [ 119.468000][ T6650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.468030][ T6650] ____sys_sendmsg+0xa5d/0xc30 [ 119.468051][ T6650] ? copy_msghdr_from_user+0x10a/0x160 [ 119.468068][ T6650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.468102][ T6650] ___sys_sendmsg+0x134/0x1d0 [ 119.468125][ T6650] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.468152][ T6650] ? rcu_is_watching+0x12/0xc0 [ 119.468181][ T6650] ? ___sys_sendmsg+0x1c/0x1d0 [ 119.468200][ T6650] __sys_sendmsg+0x16d/0x220 [ 119.468218][ T6650] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.468251][ T6650] do_syscall_64+0xcd/0xf80 [ 119.468274][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.468291][ T6650] RIP: 0033:0x7f0b6c98f749 [ 119.468305][ T6650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.468320][ T6650] RSP: 002b:00007f0b6d7fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.468336][ T6650] RAX: ffffffffffffffda RBX: 00007f0b6cbe6180 RCX: 00007f0b6c98f749 [ 119.468347][ T6650] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 119.468356][ T6650] RBP: 00007f0b6d7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 119.468366][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.468376][ T6650] R13: 00007f0b6cbe6218 R14: 00007f0b6cbe6180 R15: 00007ffe3e31b668 [ 119.468400][ T6650] [ 119.752834][ T30] audit: type=1400 audit(1765982961.863:449): avc: denied { shutdown } for pid=6652 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.760722][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.783824][ T30] audit: type=1400 audit(1765982961.893:450): avc: denied { write } for pid=6652 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.815407][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.860546][ T6659] xt_cluster: node mask cannot exceed total number of nodes [ 119.925561][ T5886] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 119.941826][ T5886] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 119.993186][ T5886] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 120.003521][ T5932] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.206772][ T5886] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 120.225558][ T5886] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 120.426107][ T5886] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 120.443904][ T5886] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints? [ 120.452208][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.609596][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.621503][ C0] hid-thrustmaster 0003:044F:B65D.0003: Unknown packet type 0x81a1, unable to proceed further with wheel init [ 120.638660][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.697011][ T5932] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.708731][ T30] audit: type=1400 audit(1765982962.823:451): avc: denied { ioctl } for pid=6664 comm="syz.0.191" path="socket:[11695]" dev="sockfs" ino=11695 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.731415][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.774912][ T5932] usb 5-1: config 0 descriptor?? [ 120.849030][ T978] usb 3-1: USB disconnect, device number 4 [ 120.990990][ T30] audit: type=1400 audit(1765982963.093:452): avc: denied { setopt } for pid=6666 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.191821][ T5932] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 121.199838][ T5932] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 121.225616][ T5932] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 121.242611][ T5932] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 121.251885][ T5932] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 121.323929][ T6676] gfs2: error -5 reading superblock [ 121.401986][ T30] audit: type=1400 audit(1765982963.493:453): avc: denied { create } for pid=6674 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 121.713380][ T5932] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 122.599109][ T30] audit: type=1400 audit(1765982964.713:454): avc: denied { read write } for pid=6684 comm="syz.3.197" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 122.641003][ T6686] FAULT_INJECTION: forcing a failure. [ 122.641003][ T6686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.674064][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.3.197 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.674084][ T6686] Tainted: [L]=SOFTLOCKUP [ 122.674088][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.674094][ T6686] Call Trace: [ 122.674098][ T6686] [ 122.674103][ T6686] dump_stack_lvl+0x16c/0x1f0 [ 122.674123][ T6686] should_fail_ex+0x512/0x640 [ 122.674143][ T6686] _copy_to_user+0x32/0xd0 [ 122.674161][ T6686] simple_read_from_buffer+0xcb/0x170 [ 122.674178][ T6686] proc_fail_nth_read+0x197/0x240 [ 122.674191][ T6686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.674203][ T6686] ? rw_verify_area+0xcf/0x6c0 [ 122.674216][ T6686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.674227][ T6686] vfs_read+0x1e4/0xcf0 [ 122.674241][ T6686] ? __pfx___mutex_lock+0x10/0x10 [ 122.674258][ T6686] ? __pfx_vfs_read+0x10/0x10 [ 122.674277][ T6686] ? __fget_files+0x20e/0x3c0 [ 122.674297][ T6686] ksys_read+0x12a/0x250 [ 122.674310][ T6686] ? __pfx_ksys_read+0x10/0x10 [ 122.674324][ T6686] ? fput+0x70/0xf0 [ 122.674336][ T6686] do_syscall_64+0xcd/0xf80 [ 122.674351][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.674362][ T6686] RIP: 0033:0x7f77d178e15c [ 122.674371][ T6686] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.674382][ T6686] RSP: 002b:00007f77d26b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.674393][ T6686] RAX: ffffffffffffffda RBX: 00007f77d19e5fa0 RCX: 00007f77d178e15c [ 122.674399][ T6686] RDX: 000000000000000f RSI: 00007f77d26b00a0 RDI: 0000000000000004 [ 122.674405][ T6686] RBP: 00007f77d26b0090 R08: 0000000000000000 R09: 0000000000000000 [ 122.674412][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.674418][ T6686] R13: 00007f77d19e6038 R14: 00007f77d19e5fa0 R15: 00007fff628a6f28 [ 122.674432][ T6686] [ 122.675083][ T30] audit: type=1400 audit(1765982964.743:455): avc: denied { open } for pid=6684 comm="syz.3.197" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 123.118266][ T5928] usb 5-1: USB disconnect, device number 4 [ 123.326715][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 123.326766][ T30] audit: type=1400 audit(1765982965.353:461): avc: denied { sys_module } for pid=6687 comm="syz.0.198" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 123.895478][ T6703] kAFS: unable to lookup cell 'Þ({^ú@' [ 124.313702][ T6710] kAFS: unable to lookup cell '(,' [ 125.506578][ T6721] kAFS: unable to lookup cell '(,' [ 125.798827][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 125.821434][ T30] audit: type=1400 audit(1765982967.933:462): avc: denied { create } for pid=6726 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.862093][ T30] audit: type=1400 audit(1765982967.953:463): avc: denied { listen } for pid=6726 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.975750][ T30] audit: type=1400 audit(1765982968.063:464): avc: denied { map } for pid=6726 comm="syz.3.209" path="socket:[12581]" dev="sockfs" ino=12581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.009031][ T30] audit: type=1400 audit(1765982968.063:465): avc: denied { read } for pid=6726 comm="syz.3.209" path="socket:[12581]" dev="sockfs" ino=12581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.463738][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.472409][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.499658][ T30] audit: type=1400 audit(1765982968.593:466): avc: denied { create } for pid=6741 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.685765][ T5816] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 126.838489][ T6754] kAFS: unable to lookup cell 'Þ({^ú@' [ 126.962543][ T5816] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 126.972675][ T5816] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 126.980420][ T5816] usb 2-1: can't read configurations, error -61 [ 127.535802][ T5816] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 127.696641][ T5816] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 127.722998][ T30] audit: type=1400 audit(1765982969.833:467): avc: denied { create } for pid=6760 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 128.492714][ T6771] 9p: Bad value for 'rfdno' [ 128.946260][ T5816] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 128.953910][ T5816] usb 2-1: can't read configurations, error -61 [ 128.960736][ T5816] usb usb2-port1: attempt power cycle [ 129.144628][ T6776] vivid-000: disconnect [ 129.389899][ T6774] vivid-000: reconnect [ 129.416289][ T5816] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 129.449457][ T5816] usb 2-1: device descriptor read/8, error -71 [ 130.453770][ T6794] syz.3.224 uses obsolete (PF_INET,SOCK_PACKET) [ 130.463025][ T30] audit: type=1400 audit(1765982972.573:468): avc: denied { create } for pid=6791 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 130.623870][ T30] audit: type=1400 audit(1765982972.733:469): avc: denied { map } for pid=6797 comm="syz.2.226" path="socket:[12812]" dev="sockfs" ino=12812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 130.649214][ T6798] FAULT_INJECTION: forcing a failure. [ 130.649214][ T6798] name failslab, interval 1, probability 0, space 0, times 0 [ 130.690370][ T6798] CPU: 0 UID: 0 PID: 6798 Comm: syz.2.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.690399][ T6798] Tainted: [L]=SOFTLOCKUP [ 130.690404][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.690414][ T6798] Call Trace: [ 130.690419][ T6798] [ 130.690425][ T6798] dump_stack_lvl+0x16c/0x1f0 [ 130.690450][ T6798] should_fail_ex+0x512/0x640 [ 130.690471][ T6798] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 130.690489][ T6798] should_failslab+0xc2/0x120 [ 130.690508][ T6798] kmem_cache_alloc_node_noprof+0x86/0x800 [ 130.690523][ T6798] ? copy_process+0x4b5/0x7430 [ 130.690551][ T6798] ? copy_process+0x4b5/0x7430 [ 130.690570][ T6798] copy_process+0x4b5/0x7430 [ 130.690605][ T6798] ? __pfx_copy_process+0x10/0x10 [ 130.690633][ T6798] ? lockdep_init_map_type+0x5c/0x270 [ 130.690654][ T6798] ? lockdep_init_map_type+0x5c/0x270 [ 130.690674][ T6798] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 130.690701][ T6798] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 130.690722][ T6798] vhost_task_create+0x1d2/0x370 [ 130.690743][ T6798] ? __pfx_vhost_task_create+0x10/0x10 [ 130.690775][ T6798] ? __pfx_vhost_task_fn+0x10/0x10 [ 130.690797][ T6798] ? __pfx___mutex_lock+0x10/0x10 [ 130.690821][ T6798] kvm_mmu_post_init_vm+0x1b7/0x380 [ 130.690842][ T6798] kvm_arch_vcpu_ioctl_run+0x66/0x1860 [ 130.690860][ T6798] ? kvm_vcpu_ioctl+0x14f8/0x16d0 [ 130.690887][ T6798] kvm_vcpu_ioctl+0x76d/0x16d0 [ 130.690912][ T6798] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 130.690935][ T6798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.690954][ T6798] ? do_vfs_ioctl+0x128/0x14f0 [ 130.690972][ T6798] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 130.690989][ T6798] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 130.691020][ T6798] ? hook_file_ioctl_common+0x144/0x410 [ 130.691049][ T6798] ? selinux_file_ioctl+0x180/0x270 [ 130.691068][ T6798] ? selinux_file_ioctl+0xb4/0x270 [ 130.691088][ T6798] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 130.691110][ T6798] __x64_sys_ioctl+0x18e/0x210 [ 130.691130][ T6798] do_syscall_64+0xcd/0xf80 [ 130.691151][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.691166][ T6798] RIP: 0033:0x7f4b4658f749 [ 130.691180][ T6798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.691195][ T6798] RSP: 002b:00007f4b447f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.691211][ T6798] RAX: ffffffffffffffda RBX: 00007f4b467e5fa0 RCX: 00007f4b4658f749 [ 130.691222][ T6798] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 130.691231][ T6798] RBP: 00007f4b447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 130.691240][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.691249][ T6798] R13: 00007f4b467e6038 R14: 00007f4b467e5fa0 R15: 00007ffe57979068 [ 130.691274][ T6798] [ 131.328521][ T6806] kAFS: unable to lookup cell 'Þ({^ú@' [ 131.784278][ T6816] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 131.840932][ T5926] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 132.024566][ T6821] vivid-004: disconnect [ 132.225079][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.256054][ T6818] vivid-004: reconnect [ 132.263758][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.301411][ T5926] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 132.357865][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.378288][ T5926] usb 2-1: config 0 descriptor?? [ 132.388977][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.401980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.618104][ T6833] FAULT_INJECTION: forcing a failure. [ 132.618104][ T6833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.637988][ T5926] usbhid 2-1:0.0: can't add hid device: -71 [ 132.646452][ T6833] CPU: 1 UID: 0 PID: 6833 Comm: syz.4.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.646471][ T6833] Tainted: [L]=SOFTLOCKUP [ 132.646474][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.646480][ T6833] Call Trace: [ 132.646484][ T6833] [ 132.646492][ T6833] dump_stack_lvl+0x16c/0x1f0 [ 132.646509][ T6833] should_fail_ex+0x512/0x640 [ 132.646527][ T6833] _copy_from_user+0x2e/0xd0 [ 132.646543][ T6833] drm_ioctl+0x4fb/0xc30 [ 132.646560][ T6833] ? __pfx_drm_mode_addfb2_ioctl+0x10/0x10 [ 132.646572][ T6833] ? __pfx_drm_ioctl+0x10/0x10 [ 132.646591][ T6833] ? selinux_file_ioctl+0x180/0x270 [ 132.646605][ T6833] ? selinux_file_ioctl+0xb4/0x270 [ 132.646619][ T6833] ? __pfx_drm_ioctl+0x10/0x10 [ 132.646633][ T6833] __x64_sys_ioctl+0x18e/0x210 [ 132.646647][ T6833] do_syscall_64+0xcd/0xf80 [ 132.646661][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.646672][ T6833] RIP: 0033:0x7fce9358f749 [ 132.646680][ T6833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.646691][ T6833] RSP: 002b:00007fce94449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.646701][ T6833] RAX: ffffffffffffffda RBX: 00007fce937e5fa0 RCX: 00007fce9358f749 [ 132.646707][ T6833] RDX: 0000200000002140 RSI: 00000000c06864b8 RDI: 0000000000000003 [ 132.646713][ T6833] RBP: 00007fce94449090 R08: 0000000000000000 R09: 0000000000000000 [ 132.646718][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.646724][ T6833] R13: 00007fce937e6038 R14: 00007fce937e5fa0 R15: 00007ffc57209108 [ 132.646737][ T6833] [ 132.647013][ T5926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 132.655786][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.664624][ T5926] usb 2-1: USB disconnect, device number 14 [ 132.727272][ T850] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.995805][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 133.001446][ T850] usb 4-1: Using ep0 maxpacket: 32 [ 133.008619][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 133.021210][ T850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.184483][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 133.437431][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 133.965910][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.977032][ T850] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.988133][ T850] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 133.997230][ T30] audit: type=1400 audit(1765982976.103:470): avc: denied { create } for pid=6844 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.001174][ T850] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.027575][ T850] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 134.036850][ T850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.047275][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.060665][ T850] usb 4-1: config 0 descriptor?? [ 134.074802][ T6847] process 'syz.1.243' launched './file2' with NULL argv: empty string added [ 134.076219][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.092395][ T30] audit: type=1400 audit(1765982976.183:471): avc: denied { execute } for pid=6846 comm="syz.1.243" name="file2" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.116381][ T30] audit: type=1400 audit(1765982976.223:472): avc: denied { execute_no_trans } for pid=6846 comm="syz.1.243" path="/47/file2" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.142223][ T9] usb 3-1: Product: syz [ 134.146630][ T9] usb 3-1: Manufacturer: syz [ 134.151357][ T9] usb 3-1: SerialNumber: syz [ 134.338597][ T30] audit: type=1400 audit(1765982976.423:473): avc: denied { write } for pid=6846 comm="syz.1.243" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 134.519584][ T9] usb 3-1: config 0 descriptor?? [ 134.580909][ T6855] FAULT_INJECTION: forcing a failure. [ 134.580909][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 134.595114][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.4.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.595145][ T6855] Tainted: [L]=SOFTLOCKUP [ 134.595151][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.595162][ T6855] Call Trace: [ 134.595167][ T6855] [ 134.595174][ T6855] dump_stack_lvl+0x16c/0x1f0 [ 134.595200][ T6855] should_fail_ex+0x512/0x640 [ 134.595225][ T6855] ? __kmalloc_noprof+0xca/0x910 [ 134.595253][ T6855] should_failslab+0xc2/0x120 [ 134.595276][ T6855] __kmalloc_noprof+0xeb/0x910 [ 134.595301][ T6855] ? comedi_alloc_devpriv+0x22/0x60 [ 134.595331][ T6855] ? comedi_alloc_devpriv+0x22/0x60 [ 134.595354][ T6855] comedi_alloc_devpriv+0x22/0x60 [ 134.595377][ T6855] ? strcmp+0x50/0xb0 [ 134.595398][ T6855] das16m1_attach+0x2a/0xc10 [ 134.595422][ T6855] comedi_device_attach+0x3b3/0x900 [ 134.595455][ T6855] do_devconfig_ioctl+0x1b1/0x710 [ 134.595473][ T6855] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 134.595497][ T6855] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 134.595533][ T6855] ? find_held_lock+0x2b/0x80 [ 134.595564][ T6855] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 134.595595][ T6855] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 134.595624][ T6855] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.595645][ T6855] ? do_vfs_ioctl+0x128/0x14f0 [ 134.595665][ T6855] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 134.595688][ T6855] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 134.595717][ T6855] ? hook_file_ioctl_common+0x144/0x410 [ 134.595748][ T6855] ? selinux_file_ioctl+0x180/0x270 [ 134.595768][ T6855] ? selinux_file_ioctl+0xb4/0x270 [ 134.595791][ T6855] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 134.595813][ T6855] __x64_sys_ioctl+0x18e/0x210 [ 134.595832][ T6855] do_syscall_64+0xcd/0xf80 [ 134.595854][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.595872][ T6855] RIP: 0033:0x7fce9358f749 [ 134.595887][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.595903][ T6855] RSP: 002b:00007fce94407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.595920][ T6855] RAX: ffffffffffffffda RBX: 00007fce937e6180 RCX: 00007fce9358f749 [ 134.595931][ T6855] RDX: 0000200000000440 RSI: 0000000040946400 RDI: 000000000000000d [ 134.595941][ T6855] RBP: 00007fce94407090 R08: 0000000000000000 R09: 0000000000000000 [ 134.595950][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.595960][ T6855] R13: 00007fce937e6218 R14: 00007fce937e6180 R15: 00007ffc57209108 [ 134.595985][ T6855] [ 134.921868][ T850] hid_parser_main: 33 callbacks suppressed [ 134.921895][ T850] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.936784][ T850] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.944643][ T850] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.953239][ T850] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.961485][ T850] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 134.973518][ T850] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 134.985849][ T850] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 135.008743][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 135.019973][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 135.030066][ C0] hid-thrustmaster 0003:044F:B65D.0005: Unknown packet type 0x81a1, unable to proceed further with wheel init [ 135.112838][ T30] audit: type=1400 audit(1765982977.223:474): avc: denied { write } for pid=6858 comm="syz.4.246" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 135.140484][ T6859] sg_write: data in/out 30362/14 bytes for SCSI command 0x0-- guessing data in; [ 135.140484][ T6859] program syz.4.246 not setting count and/or reply_len properly [ 135.360858][ T5886] usb 4-1: USB disconnect, device number 7 [ 135.478916][ T30] audit: type=1400 audit(1765982977.593:475): avc: denied { write } for pid=6863 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.550691][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 135.602554][ T6862] fido_id[6862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 136.254623][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 136.264527][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 136.336421][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 136.343919][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 136.426438][ T9] usb 3-1: USB disconnect, device number 5 [ 136.435077][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 136.464769][ T9] em28xx 3-1:0.0: Freeing device [ 136.477914][ T6879] tipc: Started in network mode [ 136.482978][ T6879] tipc: Node identity a200f303b5d, cluster identity 4711 [ 136.490658][ T6879] tipc: Enabled bearer , priority 0 [ 136.517539][ T6879] syzkaller0: entered promiscuous mode [ 136.526611][ T6879] syzkaller0: entered allmulticast mode [ 136.643176][ T6878] tipc: Resetting bearer [ 136.650870][ T6884] netlink: 'syz.3.254': attribute type 9 has an invalid length. [ 136.674478][ T6884] netlink: 'syz.3.254': attribute type 7 has an invalid length. [ 136.705636][ T6884] netlink: 'syz.3.254': attribute type 8 has an invalid length. [ 136.836096][ T6878] tipc: Disabling bearer [ 136.929740][ T6887] vivid-003: disconnect [ 137.063996][ T6885] vivid-003: reconnect [ 137.108740][ T6890] FAULT_INJECTION: forcing a failure. [ 137.108740][ T6890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.122647][ T6890] CPU: 1 UID: 0 PID: 6890 Comm: syz.4.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.122675][ T6890] Tainted: [L]=SOFTLOCKUP [ 137.122680][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.122690][ T6890] Call Trace: [ 137.122696][ T6890] [ 137.122703][ T6890] dump_stack_lvl+0x16c/0x1f0 [ 137.122728][ T6890] should_fail_ex+0x512/0x640 [ 137.122756][ T6890] _copy_from_user+0x2e/0xd0 [ 137.122780][ T6890] copy_msghdr_from_user+0x98/0x160 [ 137.122798][ T6890] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 137.122820][ T6890] ? __pfx__kstrtoull+0x10/0x10 [ 137.122843][ T6890] ___sys_sendmsg+0xfe/0x1d0 [ 137.122861][ T6890] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.122900][ T6890] ? __pfx___might_resched+0x10/0x10 [ 137.122921][ T6890] __sys_sendmmsg+0x200/0x420 [ 137.122941][ T6890] ? __pfx___sys_sendmmsg+0x10/0x10 [ 137.122965][ T6890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.122997][ T6890] ? fput+0x70/0xf0 [ 137.123011][ T6890] ? ksys_write+0x1ac/0x250 [ 137.123027][ T6890] ? __pfx_ksys_write+0x10/0x10 [ 137.123045][ T6890] __x64_sys_sendmmsg+0x9c/0x100 [ 137.123058][ T6890] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.123073][ T6890] do_syscall_64+0xcd/0xf80 [ 137.123091][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.123104][ T6890] RIP: 0033:0x7fce9358f749 [ 137.123115][ T6890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.123127][ T6890] RSP: 002b:00007fce94449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 137.123140][ T6890] RAX: ffffffffffffffda RBX: 00007fce937e5fa0 RCX: 00007fce9358f749 [ 137.123148][ T6890] RDX: 0000000000000002 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 137.123156][ T6890] RBP: 00007fce94449090 R08: 0000000000000000 R09: 0000000000000000 [ 137.123163][ T6890] R10: 0000000004044404 R11: 0000000000000246 R12: 0000000000000001 [ 137.123170][ T6890] R13: 00007fce937e6038 R14: 00007fce937e5fa0 R15: 00007ffc57209108 [ 137.123188][ T6890] [ 137.405831][ T5816] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.426183][ T6892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 137.432925][ T6892] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.488761][ T6901] FAULT_INJECTION: forcing a failure. [ 137.488761][ T6901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.505264][ T6892] vhci_hcd vhci_hcd.0: Device attached [ 137.540689][ T6896] vhci_hcd: connection closed [ 137.542457][ T616] vhci_hcd vhci_hcd.0: stop threads [ 137.555728][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 137.562498][ T5816] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 137.572894][ T5816] usb 4-1: config 0 has no interface number 0 [ 137.573786][ T616] vhci_hcd vhci_hcd.0: release socket [ 137.579043][ T5816] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 137.579070][ T5816] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 137.605672][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.4.259 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.605699][ T6901] Tainted: [L]=SOFTLOCKUP [ 137.605704][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.605714][ T6901] Call Trace: [ 137.605719][ T6901] [ 137.605725][ T6901] dump_stack_lvl+0x16c/0x1f0 [ 137.605751][ T6901] should_fail_ex+0x512/0x640 [ 137.605778][ T6901] _copy_to_user+0x32/0xd0 [ 137.605803][ T6901] simple_read_from_buffer+0xcb/0x170 [ 137.605827][ T6901] proc_fail_nth_read+0x197/0x240 [ 137.605846][ T6901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.605864][ T6901] ? rw_verify_area+0xcf/0x6c0 [ 137.605889][ T6901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.605905][ T6901] vfs_read+0x1e4/0xcf0 [ 137.605924][ T6901] ? __pfx___mutex_lock+0x10/0x10 [ 137.605947][ T6901] ? __pfx_vfs_read+0x10/0x10 [ 137.605973][ T6901] ? __fget_files+0x20e/0x3c0 [ 137.606002][ T6901] ksys_read+0x12a/0x250 [ 137.606020][ T6901] ? __pfx_ksys_read+0x10/0x10 [ 137.606037][ T6901] ? v4l2_ioctl+0x1c5/0x250 [ 137.606052][ T6901] ? fput+0x70/0xf0 [ 137.606067][ T6901] do_syscall_64+0xcd/0xf80 [ 137.606088][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.606102][ T6901] RIP: 0033:0x7fce9358e15c [ 137.606115][ T6901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 137.606130][ T6901] RSP: 002b:00007fce94449030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.606147][ T6901] RAX: ffffffffffffffda RBX: 00007fce937e5fa0 RCX: 00007fce9358e15c [ 137.606158][ T6901] RDX: 000000000000000f RSI: 00007fce944490a0 RDI: 0000000000000004 [ 137.606168][ T6901] RBP: 00007fce94449090 R08: 0000000000000000 R09: 0000000000000000 [ 137.606177][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.606187][ T6901] R13: 00007fce937e6038 R14: 00007fce937e5fa0 R15: 00007ffc57209108 [ 137.606209][ T6901] [ 137.645777][ T616] vhci_hcd vhci_hcd.0: disconnect device [ 137.706305][ T5816] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 137.959962][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.968041][ T5816] usb 4-1: Product: syz [ 137.972197][ T5816] usb 4-1: Manufacturer: syz [ 137.982900][ T5816] usb 4-1: SerialNumber: syz [ 137.990396][ T5816] usb 4-1: config 0 descriptor?? [ 137.997069][ T6884] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.004317][ T6884] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.219896][ T6884] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.235798][ T5932] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.245168][ T6884] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.260141][ T6909] FAULT_INJECTION: forcing a failure. [ 138.260141][ T6909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.324868][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: syz.0.262 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.324898][ T6909] Tainted: [L]=SOFTLOCKUP [ 138.324904][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.324913][ T6909] Call Trace: [ 138.324918][ T6909] [ 138.324926][ T6909] dump_stack_lvl+0x16c/0x1f0 [ 138.324952][ T6909] should_fail_ex+0x512/0x640 [ 138.324981][ T6909] _copy_from_iter+0x2a4/0x16c0 [ 138.325009][ T6909] ? __alloc_skb+0x220/0x410 [ 138.325033][ T6909] ? __alloc_skb+0x35d/0x410 [ 138.325054][ T6909] ? __pfx__copy_from_iter+0x10/0x10 [ 138.325079][ T6909] ? netlink_autobind.isra.0+0x158/0x370 [ 138.325109][ T6909] netlink_sendmsg+0x820/0xdd0 [ 138.325134][ T6909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.325163][ T6909] ____sys_sendmsg+0xa5d/0xc30 [ 138.325185][ T6909] ? copy_msghdr_from_user+0x10a/0x160 [ 138.325202][ T6909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.325233][ T6909] ___sys_sendmsg+0x134/0x1d0 [ 138.325252][ T6909] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.325298][ T6909] __sys_sendmsg+0x16d/0x220 [ 138.325316][ T6909] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.325349][ T6909] do_syscall_64+0xcd/0xf80 [ 138.325371][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.325388][ T6909] RIP: 0033:0x7f0b6c98f749 [ 138.325401][ T6909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.325417][ T6909] RSP: 002b:00007f0b6d83d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.325434][ T6909] RAX: ffffffffffffffda RBX: 00007f0b6cbe5fa0 RCX: 00007f0b6c98f749 [ 138.325445][ T6909] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 138.325455][ T6909] RBP: 00007f0b6d83d090 R08: 0000000000000000 R09: 0000000000000000 [ 138.325464][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.325474][ T6909] R13: 00007f0b6cbe6038 R14: 00007f0b6cbe5fa0 R15: 00007ffe3e31b668 [ 138.325497][ T6909] [ 138.640893][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.655585][ T6912] FAULT_INJECTION: forcing a failure. [ 138.655585][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 138.676379][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.711516][ T5816] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 138.722096][ T6912] CPU: 1 UID: 0 PID: 6912 Comm: syz.2.263 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.722124][ T6912] Tainted: [L]=SOFTLOCKUP [ 138.722130][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.722140][ T6912] Call Trace: [ 138.722146][ T6912] [ 138.722153][ T6912] dump_stack_lvl+0x16c/0x1f0 [ 138.722180][ T6912] should_fail_ex+0x512/0x640 [ 138.722208][ T6912] should_failslab+0xc2/0x120 [ 138.722231][ T6912] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 138.722253][ T6912] ? sidtab_sid2str_get+0x17a/0x680 [ 138.722281][ T6912] ? kmemdup_noprof+0x29/0x60 [ 138.722298][ T6912] kmemdup_noprof+0x29/0x60 [ 138.722316][ T6912] sidtab_sid2str_get+0x17a/0x680 [ 138.722341][ T6912] sidtab_entry_to_string+0x33/0x110 [ 138.722366][ T6912] security_sid_to_context_core+0x35c/0x640 [ 138.722391][ T6912] avc_audit_post_callback+0x109/0x8c0 [ 138.722419][ T6912] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 138.722443][ T6912] ? skb_put+0x138/0x1b0 [ 138.722464][ T6912] ? audit_log_n_string+0x253/0x550 [ 138.722489][ T6912] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 138.722513][ T6912] common_lsm_audit+0x24e/0x300 [ 138.722535][ T6912] ? __pfx_common_lsm_audit+0x10/0x10 [ 138.722558][ T6912] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 138.722578][ T6912] ? avc_update_node.isra.0+0x522/0xbc0 [ 138.722605][ T6912] slow_avc_audit+0x186/0x210 [ 138.722629][ T6912] ? __pfx_slow_avc_audit+0x10/0x10 [ 138.722658][ T6912] ? avc_denied+0x14a/0x190 [ 138.722684][ T6912] ? avc_has_perm_noaudit+0x306/0x3b0 [ 138.722714][ T6912] avc_has_perm+0x1b5/0x1f0 [ 138.722742][ T6912] ? __pfx_avc_has_perm+0x10/0x10 [ 138.722766][ T6912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 138.722787][ T6912] ? tomoyo_socket_listen_permission+0x150/0x370 [ 138.722812][ T6912] ? __pfx_tomoyo_socket_listen_permission+0x10/0x10 [ 138.722839][ T6912] sock_has_perm+0x251/0x2f0 [ 138.722864][ T6912] ? __pfx_sock_has_perm+0x10/0x10 [ 138.722886][ T6912] ? find_held_lock+0x2b/0x80 [ 138.722918][ T6912] ? __fget_files+0x20e/0x3c0 [ 138.722945][ T6912] security_socket_listen+0x8e/0x210 [ 138.722964][ T6912] __sys_listen_socket+0xba/0x160 [ 138.722989][ T6912] __sys_listen+0xa7/0x130 [ 138.723013][ T6912] __x64_sys_listen+0x53/0x80 [ 138.723036][ T6912] do_syscall_64+0xcd/0xf80 [ 138.723060][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.723077][ T6912] RIP: 0033:0x7f4b4658f749 [ 138.723091][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.723107][ T6912] RSP: 002b:00007f4b447f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 138.723123][ T6912] RAX: ffffffffffffffda RBX: 00007f4b467e5fa0 RCX: 00007f4b4658f749 [ 138.723134][ T6912] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 138.723144][ T6912] RBP: 00007f4b447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.723153][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.723162][ T6912] R13: 00007f4b467e6038 R14: 00007f4b467e5fa0 R15: 00007ffe57979068 [ 138.723187][ T6912] [ 138.735750][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 138.771958][ T30] audit: type=1400 audit(1765982980.763:476): avc: denied { listen } for pid=6911 comm="syz.2.263" ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.861182][ T5932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 138.866240][ T5816] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 138.895788][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.896799][ T5816] asix 4-1:0.251: probe with driver asix failed with error -5 [ 138.902923][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.902947][ T5932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.902984][ T5932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.903004][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.114315][ T6919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.264'. [ 139.125792][ T30] audit: type=1400 audit(1765982980.993:477): avc: denied { mount } for pid=6913 comm="syz.0.264" name="/" dev="ramfs" ino=13122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 139.176151][ T30] audit: type=1400 audit(1765982981.213:478): avc: denied { setopt } for pid=6913 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 139.200817][ T5816] usb 4-1: USB disconnect, device number 8 [ 139.318748][ T5932] usb 5-1: usb_control_msg returned -32 [ 139.345745][ T5932] usbtmc 5-1:16.0: can't read capabilities [ 139.454541][ T30] audit: type=1400 audit(1765982981.563:479): avc: denied { append } for pid=6925 comm="syz.3.266" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.499819][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.508110][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.782880][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.261'. [ 139.807664][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.839464][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.849600][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.880870][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.940364][ T6933] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.951742][ T6933] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.002616][ T6914] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.264'. [ 140.024671][ T6933] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.095921][ T6933] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.165781][ T5928] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.317830][ T5928] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 140.332782][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.360647][ T5928] usb 4-1: config 0 has no interface number 0 [ 140.377664][ T5928] usb 4-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 140.415915][ T5928] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 140.481543][ T5928] usb 4-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 140.503833][ T30] audit: type=1400 audit(1765982982.603:480): avc: denied { firmware_load } for pid=6935 comm="syz.1.269" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 140.557738][ T5928] usb 4-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 140.608743][ T5928] usb 4-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 140.624810][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.640499][ T5928] usb 4-1: Product: syz [ 140.651880][ T5928] usb 4-1: Manufacturer: syz [ 140.665403][ T5928] usb 4-1: SerialNumber: syz [ 140.682730][ T5928] usb 4-1: config 0 descriptor?? [ 140.699366][ T5928] symbolserial 4-1:0.175: symbol converter detected [ 140.725178][ T5928] usb 4-1: symbol converter now attached to ttyUSB0 [ 140.735933][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 140.895813][ T5928] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 140.903376][ T9] usb 2-1: device descriptor read/64, error -71 [ 140.921446][ T5932] usb 4-1: USB disconnect, device number 9 [ 140.938260][ T5932] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 140.951272][ T5932] symbolserial 4-1:0.175: device disconnected [ 141.066840][ T5928] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 141.077979][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.089198][ T5928] usb 3-1: config 0 has no interface number 0 [ 141.096327][ T5928] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 141.116870][ T5928] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.139895][ T978] usb 5-1: USB disconnect, device number 5 [ 141.155121][ T5928] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 141.165417][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.165783][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 141.176392][ T5928] usb 3-1: Product: syz [ 141.185226][ T5928] usb 3-1: Manufacturer: syz [ 141.190214][ T5928] usb 3-1: SerialNumber: syz [ 141.202221][ T5928] usb 3-1: config 0 descriptor?? [ 141.211882][ T5928] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 141.223324][ T5928] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 141.302661][ T5928] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 141.346035][ T5981] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 141.520876][ T5981] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 141.663349][ T9] usb 2-1: device descriptor read/64, error -71 [ 141.696304][ T5981] usb 1-1: config 0 has no interface number 0 [ 141.707685][ T5981] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 141.717925][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.726041][ T5981] usb 1-1: Product: syz [ 141.730275][ T5981] usb 1-1: Manufacturer: syz [ 141.734855][ T5981] usb 1-1: SerialNumber: syz [ 141.741114][ T5981] usb 1-1: config 0 descriptor?? [ 141.776562][ T9] usb usb2-port1: attempt power cycle [ 141.956603][ T6946] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 142.101217][ T6956] netlink: 27 bytes leftover after parsing attributes in process `syz.4.275'. [ 142.112897][ T6956] capability: warning: `syz.4.275' uses 32-bit capabilities (legacy support in use) [ 142.145943][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 142.160729][ T6959] FAULT_INJECTION: forcing a failure. [ 142.160729][ T6959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.177099][ T9] usb 2-1: device descriptor read/8, error -71 [ 142.183739][ T6959] CPU: 0 UID: 0 PID: 6959 Comm: syz.4.276 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.183758][ T6959] Tainted: [L]=SOFTLOCKUP [ 142.183764][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.183773][ T6959] Call Trace: [ 142.183779][ T6959] [ 142.183784][ T6959] dump_stack_lvl+0x16c/0x1f0 [ 142.183808][ T6959] should_fail_ex+0x512/0x640 [ 142.183834][ T6959] _copy_from_iter+0x2a4/0x16c0 [ 142.183852][ T6959] ? __alloc_skb+0x220/0x410 [ 142.183867][ T6959] ? __alloc_skb+0x35d/0x410 [ 142.183882][ T6959] ? __pfx__copy_from_iter+0x10/0x10 [ 142.183899][ T6959] ? netlink_autobind.isra.0+0x158/0x370 [ 142.183927][ T6959] netlink_sendmsg+0x820/0xdd0 [ 142.183949][ T6959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.183976][ T6959] ____sys_sendmsg+0xa5d/0xc30 [ 142.183997][ T6959] ? copy_msghdr_from_user+0x10a/0x160 [ 142.184012][ T6959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.184043][ T6959] ___sys_sendmsg+0x134/0x1d0 [ 142.184059][ T6959] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.184101][ T6959] __sys_sendmsg+0x16d/0x220 [ 142.184118][ T6959] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.184148][ T6959] do_syscall_64+0xcd/0xf80 [ 142.184168][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.184178][ T6959] RIP: 0033:0x7fce9358f749 [ 142.184188][ T6959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.184203][ T6959] RSP: 002b:00007fce94449038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.184219][ T6959] RAX: ffffffffffffffda RBX: 00007fce937e5fa0 RCX: 00007fce9358f749 [ 142.184228][ T6959] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003 [ 142.184237][ T6959] RBP: 00007fce94449090 R08: 0000000000000000 R09: 0000000000000000 [ 142.184246][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.184254][ T6959] R13: 00007fce937e6038 R14: 00007fce937e5fa0 R15: 00007ffc57209108 [ 142.184272][ T6959] [ 142.388734][ T5981] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 142.410215][ T5981] asix 1-1:0.251: probe with driver asix failed with error -524 [ 142.515814][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 142.616964][ T9] usb 2-1: device descriptor read/8, error -71 [ 142.633650][ T5981] usb 1-1: USB disconnect, device number 7 [ 142.719512][ T6966] FAULT_INJECTION: forcing a failure. [ 142.719512][ T6966] name failslab, interval 1, probability 0, space 0, times 0 [ 142.732385][ T6966] CPU: 0 UID: 0 PID: 6966 Comm: syz.4.278 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.732413][ T6966] Tainted: [L]=SOFTLOCKUP [ 142.732419][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.732429][ T6966] Call Trace: [ 142.732436][ T6966] [ 142.732443][ T6966] dump_stack_lvl+0x16c/0x1f0 [ 142.732470][ T6966] should_fail_ex+0x512/0x640 [ 142.732494][ T6966] ? fs_reclaim_acquire+0xae/0x150 [ 142.732520][ T6966] should_failslab+0xc2/0x120 [ 142.732543][ T6966] __kmalloc_noprof+0xeb/0x910 [ 142.732569][ T6966] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 142.732602][ T6966] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 142.732624][ T6966] tomoyo_realpath_from_path+0xc2/0x6e0 [ 142.732649][ T6966] ? tomoyo_profile+0x47/0x60 [ 142.732675][ T6966] tomoyo_path_number_perm+0x245/0x580 [ 142.732694][ T6966] ? tomoyo_path_number_perm+0x237/0x580 [ 142.732716][ T6966] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.732762][ T6966] ? find_held_lock+0x2b/0x80 [ 142.732787][ T6966] ? hook_file_ioctl_common+0x144/0x410 [ 142.732818][ T6966] ? __fget_files+0x20e/0x3c0 [ 142.732845][ T6966] security_file_ioctl+0x9b/0x240 [ 142.732869][ T6966] __x64_sys_ioctl+0xb7/0x210 [ 142.732892][ T6966] do_syscall_64+0xcd/0xf80 [ 142.732915][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.732932][ T6966] RIP: 0033:0x7fce9358f749 [ 142.732946][ T6966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.732962][ T6966] RSP: 002b:00007fce94407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.732979][ T6966] RAX: ffffffffffffffda RBX: 00007fce937e6180 RCX: 00007fce9358f749 [ 142.732990][ T6966] RDX: 0000200000000040 RSI: 0000000000001269 RDI: 0000000000000003 [ 142.733000][ T6966] RBP: 00007fce94407090 R08: 0000000000000000 R09: 0000000000000000 [ 142.733009][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.733018][ T6966] R13: 00007fce937e6218 R14: 00007fce937e6180 R15: 00007ffc57209108 [ 142.733043][ T6966] [ 142.733069][ T6966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.945943][ T30] audit: type=1400 audit(1765982985.053:481): avc: denied { ioctl } for pid=6963 comm="syz.4.278" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.970450][ T9] usb usb2-port1: unable to enumerate USB device [ 143.142965][ T6941] syz.1.269 (6941) used greatest stack depth: 19688 bytes left [ 144.004682][ T978] usb 3-1: USB disconnect, device number 6 [ 144.016876][ T978] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 144.036300][ T978] cyberjack 3-1:0.69: device disconnected [ 144.285904][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 144.435739][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 144.442247][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.452829][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.465612][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.481245][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 144.490630][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.499300][ T978] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 144.589475][ T9] usb 1-1: config 0 descriptor?? [ 144.604340][ T30] audit: type=1400 audit(1765982986.713:482): avc: denied { map } for pid=6982 comm="syz.2.283" path="socket:[13344]" dev="sockfs" ino=13344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 144.656961][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 144.670169][ T978] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.683554][ T30] audit: type=1400 audit(1765982986.713:483): avc: denied { accept } for pid=6982 comm="syz.2.283" path="socket:[13344]" dev="sockfs" ino=13344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 144.717126][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.725350][ T978] usb 2-1: Product: syz [ 144.749801][ T978] usb 2-1: Manufacturer: syz [ 144.754543][ T978] usb 2-1: SerialNumber: syz [ 144.812333][ T978] usb 2-1: config 0 descriptor?? [ 145.736259][ T6997] FAULT_INJECTION: forcing a failure. [ 145.736259][ T6997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.781723][ T6999] capability: warning: `syz.1.282' uses deprecated v2 capabilities in a way that may be insecure [ 145.921595][ T6997] CPU: 0 UID: 0 PID: 6997 Comm: syz.4.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.921626][ T6997] Tainted: [L]=SOFTLOCKUP [ 145.921633][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 145.921642][ T6997] Call Trace: [ 145.921648][ T6997] [ 145.921654][ T6997] dump_stack_lvl+0x16c/0x1f0 [ 145.921682][ T6997] should_fail_ex+0x512/0x640 [ 145.921712][ T6997] _copy_from_iter+0x2a4/0x16c0 [ 145.921741][ T6997] ? __alloc_skb+0x220/0x410 [ 145.921764][ T6997] ? __alloc_skb+0x35d/0x410 [ 145.921788][ T6997] ? __pfx__copy_from_iter+0x10/0x10 [ 145.921812][ T6997] ? netlink_autobind.isra.0+0x158/0x370 [ 145.921842][ T6997] netlink_sendmsg+0x820/0xdd0 [ 145.921867][ T6997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.921897][ T6997] ____sys_sendmsg+0xa5d/0xc30 [ 145.921921][ T6997] ? copy_msghdr_from_user+0x10a/0x160 [ 145.921938][ T6997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.921971][ T6997] ___sys_sendmsg+0x134/0x1d0 [ 145.921990][ T6997] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.922039][ T6997] __sys_sendmsg+0x16d/0x220 [ 145.922057][ T6997] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.922090][ T6997] do_syscall_64+0xcd/0xf80 [ 145.922114][ T6997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.922131][ T6997] RIP: 0033:0x7fce9358f749 [ 145.922145][ T6997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.922165][ T6997] RSP: 002b:00007fce94428038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.922181][ T6997] RAX: ffffffffffffffda RBX: 00007fce937e6090 RCX: 00007fce9358f749 [ 145.922193][ T6997] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000008 [ 145.922203][ T6997] RBP: 00007fce94428090 R08: 0000000000000000 R09: 0000000000000000 [ 145.922213][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.922223][ T6997] R13: 00007fce937e6128 R14: 00007fce937e6090 R15: 00007ffc57209108 [ 145.922247][ T6997] [ 146.465061][ T9] usb 1-1: USB disconnect, device number 8 [ 146.987814][ T7002] vivid-004: disconnect [ 147.399652][ T7000] vivid-004: reconnect [ 147.506148][ T9] usb 2-1: USB disconnect, device number 19 [ 148.125923][ T850] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.266150][ T850] usb 3-1: device descriptor read/64, error -71 [ 148.395997][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 148.508073][ T7022] FAULT_INJECTION: forcing a failure. [ 148.508073][ T7022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.535775][ T9] usb 2-1: device descriptor read/64, error -71 [ 148.649374][ T7022] CPU: 0 UID: 0 PID: 7022 Comm: syz.0.293 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.649404][ T7022] Tainted: [L]=SOFTLOCKUP [ 148.649409][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.649418][ T7022] Call Trace: [ 148.649424][ T7022] [ 148.649430][ T7022] dump_stack_lvl+0x16c/0x1f0 [ 148.649453][ T7022] should_fail_ex+0x512/0x640 [ 148.649478][ T7022] _copy_from_user+0x2e/0xd0 [ 148.649500][ T7022] copy_mount_options+0x76/0x190 [ 148.649527][ T7022] __x64_sys_mount+0x1ab/0x310 [ 148.649543][ T7022] ? __pfx___x64_sys_mount+0x10/0x10 [ 148.649566][ T7022] do_syscall_64+0xcd/0xf80 [ 148.649587][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.649603][ T7022] RIP: 0033:0x7f0b6c98f749 [ 148.649616][ T7022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.649632][ T7022] RSP: 002b:00007f0b6d83d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.649648][ T7022] RAX: ffffffffffffffda RBX: 00007f0b6cbe5fa0 RCX: 00007f0b6c98f749 [ 148.649658][ T7022] RDX: 0000200000000640 RSI: 0000200000000000 RDI: 0000000000000000 [ 148.649668][ T7022] RBP: 00007f0b6d83d090 R08: 0000200000000040 R09: 0000000000000000 [ 148.649678][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.649687][ T7022] R13: 00007f0b6cbe6038 R14: 00007f0b6cbe5fa0 R15: 00007ffe3e31b668 [ 148.649710][ T7022] [ 148.803142][ T850] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.955905][ T850] usb 3-1: device descriptor read/64, error -71 [ 148.985861][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 149.077761][ T850] usb usb3-port1: attempt power cycle [ 149.135800][ T9] usb 2-1: device descriptor read/64, error -71 [ 149.245929][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.253762][ T9] usb usb2-port1: attempt power cycle [ 149.348862][ T5886] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 149.720435][ T850] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 149.746271][ T850] usb 3-1: device descriptor read/8, error -71 [ 149.754303][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.764523][ T5932] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.773605][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.781682][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 149.790943][ T5932] usb 1-1: config 0 descriptor?? [ 149.798671][ T5932] pwc: Askey VC010 type 2 USB webcam detected. [ 149.805762][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 149.811667][ T9] usb 2-1: device descriptor read/8, error -71 [ 149.818796][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.828954][ T5886] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.838892][ T5886] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 149.853487][ T5886] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.861056][ T5886] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 149.870116][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.879789][ T5886] usb 4-1: config 0 descriptor?? [ 149.985789][ T850] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.006393][ T850] usb 3-1: device descriptor read/8, error -71 [ 150.055753][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 150.077764][ T9] usb 2-1: device descriptor read/8, error -71 [ 150.144585][ T850] usb usb3-port1: unable to enumerate USB device [ 150.186409][ T9] usb usb2-port1: unable to enumerate USB device [ 150.213306][ T5932] pwc: recv_control_msg error -32 req 02 val 2b00 [ 150.409198][ T5886] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 150.450023][ T5932] pwc: recv_control_msg error -32 req 02 val 2c00 [ 150.457575][ T5886] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 150.477648][ T5886] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 150.491003][ T5886] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 150.502934][ T5886] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 150.531897][ T5886] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 150.619018][ T5886] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 150.638707][ C0] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x81a1, unable to proceed further with wheel init [ 150.671281][ T5932] pwc: recv_control_msg error -32 req 04 val 1300 [ 150.694639][ T5932] pwc: recv_control_msg error -71 req 04 val 1400 [ 150.723530][ T5932] pwc: recv_control_msg error -71 req 02 val 2000 [ 150.731532][ T5932] pwc: recv_control_msg error -71 req 02 val 2100 [ 150.749821][ T5932] pwc: recv_control_msg error -71 req 04 val 1500 [ 150.781547][ T5932] pwc: recv_control_msg error -71 req 02 val 2500 [ 150.849846][ T7044] vivid-004: disconnect [ 151.014339][ T5932] pwc: recv_control_msg error -71 req 02 val 2400 [ 151.022438][ T5932] pwc: recv_control_msg error -71 req 02 val 2600 [ 151.034150][ T5932] pwc: recv_control_msg error -71 req 02 val 2900 [ 151.041144][ T5932] pwc: recv_control_msg error -71 req 02 val 2800 [ 151.048267][ T5932] pwc: recv_control_msg error -71 req 04 val 1100 [ 151.055507][ T7042] vivid-004: reconnect [ 151.060003][ T5932] pwc: recv_control_msg error -71 req 04 val 1200 [ 151.068217][ T5932] pwc: Registered as video103. [ 151.073052][ T978] usb 4-1: USB disconnect, device number 10 [ 151.074453][ T5932] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 151.093371][ T5932] usb 1-1: USB disconnect, device number 9 [ 151.191282][ T7050] FAULT_INJECTION: forcing a failure. [ 151.191282][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 151.204413][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.4.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.204446][ T7050] Tainted: [L]=SOFTLOCKUP [ 151.204452][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.204463][ T7050] Call Trace: [ 151.204469][ T7050] [ 151.204476][ T7050] dump_stack_lvl+0x16c/0x1f0 [ 151.204515][ T7050] should_fail_ex+0x512/0x640 [ 151.204542][ T7050] ? arch_stack_walk+0xa6/0x100 [ 151.204569][ T7050] should_failslab+0xc2/0x120 [ 151.204601][ T7050] kmem_cache_alloc_noprof+0x83/0x770 [ 151.204620][ T7050] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 151.204646][ T7050] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 151.204664][ T7050] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 151.204691][ T7050] idr_get_free+0x528/0xa30 [ 151.204728][ T7050] idr_alloc_u32+0x190/0x2f0 [ 151.204753][ T7050] ? __pfx_idr_alloc_u32+0x10/0x10 [ 151.204777][ T7050] ? lock_acquire+0x179/0x330 [ 151.204806][ T7050] idr_alloc_cyclic+0x10b/0x230 [ 151.204831][ T7050] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 151.204851][ T7050] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 151.204887][ T7050] bpf_link_prime+0x7b/0x4c0 [ 151.204913][ T7050] ? bpf_link_init_sleepable+0x91/0x220 [ 151.204942][ T7050] bpf_raw_tp_link_attach+0x2ad/0x630 [ 151.204970][ T7050] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 151.204993][ T7050] ? find_held_lock+0x2b/0x80 [ 151.205023][ T7050] ? __fget_files+0x204/0x3c0 [ 151.205066][ T7050] ? fput+0x70/0xf0 [ 151.205084][ T7050] ? __bpf_prog_get+0x97/0x2a0 [ 151.205108][ T7050] __sys_bpf+0x20c1/0x4980 [ 151.205141][ T7050] ? __pfx___sys_bpf+0x10/0x10 [ 151.205168][ T7050] ? find_held_lock+0x2b/0x80 [ 151.205199][ T7050] ? find_held_lock+0x2b/0x80 [ 151.205235][ T7050] ? __mutex_unlock_slowpath+0x161/0x790 [ 151.205283][ T7050] ? fput+0x70/0xf0 [ 151.205301][ T7050] ? ksys_write+0x1ac/0x250 [ 151.205327][ T7050] ? __pfx_ksys_write+0x10/0x10 [ 151.205358][ T7050] __x64_sys_bpf+0x78/0xc0 [ 151.205387][ T7050] ? lockdep_hardirqs_on+0x7c/0x110 [ 151.205412][ T7050] do_syscall_64+0xcd/0xf80 [ 151.205439][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.205461][ T7050] RIP: 0033:0x7fce9358f749 [ 151.205477][ T7050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.205497][ T7050] RSP: 002b:00007fce94449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.205518][ T7050] RAX: ffffffffffffffda RBX: 00007fce937e5fa0 RCX: 00007fce9358f749 [ 151.205531][ T7050] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 151.205543][ T7050] RBP: 00007fce94449090 R08: 0000000000000000 R09: 0000000000000000 [ 151.205555][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.205567][ T7050] R13: 00007fce937e6038 R14: 00007fce937e5fa0 R15: 00007ffc57209108 [ 151.205597][ T7050] [ 151.707505][ T5926] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 151.849522][ T7059] FAULT_INJECTION: forcing a failure. [ 151.849522][ T7059] name failslab, interval 1, probability 0, space 0, times 0 [ 151.862204][ T7059] CPU: 1 UID: 0 PID: 7059 Comm: syz.0.304 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.862230][ T7059] Tainted: [L]=SOFTLOCKUP [ 151.862236][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.862246][ T7059] Call Trace: [ 151.862253][ T7059] [ 151.862260][ T7059] dump_stack_lvl+0x16c/0x1f0 [ 151.862287][ T7059] should_fail_ex+0x512/0x640 [ 151.862311][ T7059] ? fs_reclaim_acquire+0xae/0x150 [ 151.862337][ T7059] should_failslab+0xc2/0x120 [ 151.862359][ T7059] __kmalloc_noprof+0xeb/0x910 [ 151.862385][ T7059] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 151.862413][ T7059] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 151.862434][ T7059] tomoyo_realpath_from_path+0xc2/0x6e0 [ 151.862470][ T7059] tomoyo_path_number_perm+0x245/0x580 [ 151.862489][ T7059] ? tomoyo_path_number_perm+0x237/0x580 [ 151.862511][ T7059] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.862562][ T7059] ? find_held_lock+0x2b/0x80 [ 151.862587][ T7059] ? hook_file_ioctl_common+0x144/0x410 [ 151.862618][ T7059] ? __fget_files+0x20e/0x3c0 [ 151.862646][ T7059] security_file_ioctl+0x9b/0x240 [ 151.862670][ T7059] __x64_sys_ioctl+0xb7/0x210 [ 151.862692][ T7059] do_syscall_64+0xcd/0xf80 [ 151.862714][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.862731][ T7059] RIP: 0033:0x7f0b6c98f749 [ 151.862744][ T7059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.862761][ T7059] RSP: 002b:00007f0b6d7fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.862777][ T7059] RAX: ffffffffffffffda RBX: 00007f0b6cbe6180 RCX: 00007f0b6c98f749 [ 151.862788][ T7059] RDX: 00002000000000c0 RSI: 000000008030ae7c RDI: 0000000000000007 [ 151.862799][ T7059] RBP: 00007f0b6d7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 151.862809][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.862818][ T7059] R13: 00007f0b6cbe6218 R14: 00007f0b6cbe6180 R15: 00007ffe3e31b668 [ 151.862842][ T7059] [ 151.862863][ T7059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.999129][ T5886] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 152.085824][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 152.100788][ T5926] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 152.117006][ T5926] usb 2-1: config 0 has no interface number 0 [ 152.285708][ T5926] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 152.481660][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.585100][ T5926] usb 2-1: Product: syz [ 152.594728][ T5926] usb 2-1: Manufacturer: syz [ 152.599799][ T5926] usb 2-1: SerialNumber: syz [ 152.625392][ T5926] usb 2-1: config 0 descriptor?? [ 152.774413][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 152.786140][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.805999][ T5886] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.821755][ T5886] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 152.851155][ T7046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.865595][ T7046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.133268][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 153.142640][ T5926] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22 [ 153.145854][ T5886] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 153.160365][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.171162][ T5886] usb 3-1: config 0 descriptor?? [ 153.177313][ T5926] usb 2-1: USB disconnect, device number 24 [ 153.269691][ T7076] wireguard0: entered promiscuous mode [ 153.275247][ T7076] wireguard0: entered allmulticast mode [ 153.623278][ T5886] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 153.623320][ T5886] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 153.623340][ T5886] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 153.623359][ T5886] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 153.623378][ T5886] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 153.941575][ T5886] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 154.128730][ T5926] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 154.367548][ T5886] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 154.376477][ T7084] FAULT_INJECTION: forcing a failure. [ 154.376477][ T7084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.410533][ C0] hid-thrustmaster 0003:044F:B65D.0007: Unknown packet type 0x81a1, unable to proceed further with wheel init [ 154.422804][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.437294][ T7084] CPU: 1 UID: 0 PID: 7084 Comm: syz.1.311 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.437312][ T7084] Tainted: [L]=SOFTLOCKUP [ 154.437315][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.437321][ T7084] Call Trace: [ 154.437324][ T7084] [ 154.437329][ T7084] dump_stack_lvl+0x16c/0x1f0 [ 154.437346][ T7084] should_fail_ex+0x512/0x640 [ 154.437364][ T7084] _copy_to_user+0x32/0xd0 [ 154.437382][ T7084] simple_read_from_buffer+0xcb/0x170 [ 154.437397][ T7084] proc_fail_nth_read+0x197/0x240 [ 154.437409][ T7084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.437421][ T7084] ? rw_verify_area+0xcf/0x6c0 [ 154.437432][ T7084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.437443][ T7084] vfs_read+0x1e4/0xcf0 [ 154.437456][ T7084] ? __pfx___mutex_lock+0x10/0x10 [ 154.437472][ T7084] ? __pfx_vfs_read+0x10/0x10 [ 154.437489][ T7084] ? __fget_files+0x20e/0x3c0 [ 154.437507][ T7084] ksys_read+0x12a/0x250 [ 154.437520][ T7084] ? __pfx_ksys_read+0x10/0x10 [ 154.437532][ T7084] ? v4l2_ioctl+0x1c5/0x250 [ 154.437543][ T7084] ? fput+0x70/0xf0 [ 154.437553][ T7084] do_syscall_64+0xcd/0xf80 [ 154.437568][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.437578][ T7084] RIP: 0033:0x7f52d198e15c [ 154.437587][ T7084] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 154.437597][ T7084] RSP: 002b:00007f52d2828030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.437607][ T7084] RAX: ffffffffffffffda RBX: 00007f52d1be5fa0 RCX: 00007f52d198e15c [ 154.437613][ T7084] RDX: 000000000000000f RSI: 00007f52d28280a0 RDI: 0000000000000004 [ 154.437619][ T7084] RBP: 00007f52d2828090 R08: 0000000000000000 R09: 0000000000000000 [ 154.437624][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.437630][ T7084] R13: 00007f52d1be6038 R14: 00007f52d1be5fa0 R15: 00007ffc48d456c8 [ 154.437648][ T7084] [ 154.639008][ T5926] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.650948][ T5926] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 154.660197][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.668228][ T5926] usb 4-1: Product: syz [ 154.672589][ T5926] usb 4-1: Manufacturer: syz [ 154.677199][ T5926] usb 4-1: SerialNumber: syz [ 154.689338][ T5926] usb 4-1: config 0 descriptor?? [ 155.344636][ T7091] vivid-002: disconnect [ 155.604157][ T5981] usb 3-1: USB disconnect, device number 11 [ 155.670247][ T7087] vivid-002: reconnect [ 155.752936][ T7095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7095 comm=syz.0.315 [ 155.925315][ T978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.099949][ T5981] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.331734][ T5981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.352083][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.372837][ T5981] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.387418][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.404192][ T5981] usb 5-1: config 0 descriptor?? [ 156.438639][ T5981] pwc: Askey VC010 type 2 USB webcam detected. [ 156.447532][ T7106] FAULT_INJECTION: forcing a failure. [ 156.447532][ T7106] name failslab, interval 1, probability 0, space 0, times 0 [ 156.460737][ T7106] CPU: 1 UID: 0 PID: 7106 Comm: syz.2.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.460764][ T7106] Tainted: [L]=SOFTLOCKUP [ 156.460770][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.460780][ T7106] Call Trace: [ 156.460785][ T7106] [ 156.460792][ T7106] dump_stack_lvl+0x16c/0x1f0 [ 156.460823][ T7106] should_fail_ex+0x512/0x640 [ 156.460847][ T7106] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 156.460874][ T7106] should_failslab+0xc2/0x120 [ 156.460898][ T7106] kmem_cache_alloc_noprof+0x83/0x770 [ 156.460915][ T7106] ? skb_clone+0x190/0x3f0 [ 156.460936][ T7106] ? skb_clone+0x190/0x3f0 [ 156.460950][ T7106] skb_clone+0x190/0x3f0 [ 156.460966][ T7106] netlink_deliver_tap+0xabd/0xd30 [ 156.460993][ T7106] netlink_unicast+0x64c/0x870 [ 156.461017][ T7106] ? __pfx_netlink_unicast+0x10/0x10 [ 156.461047][ T7106] netlink_sendmsg+0x8c8/0xdd0 [ 156.461071][ T7106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.461101][ T7106] ____sys_sendmsg+0xa5d/0xc30 [ 156.461124][ T7106] ? copy_msghdr_from_user+0x10a/0x160 [ 156.461141][ T7106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.461159][ T7106] ? strncpy_from_kernel_nofault+0xf4/0x260 [ 156.461183][ T7106] ? pt_regs_offset+0x63/0x90 [ 156.461200][ T7106] ? fixup_exception+0x8fb/0xf90 [ 156.461226][ T7106] ___sys_sendmsg+0x134/0x1d0 [ 156.461241][ T7106] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.461288][ T7106] __sys_sendmsg+0x16d/0x220 [ 156.461306][ T7106] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.461322][ T7106] ? __pfx_bpf_trace_run2+0x10/0x10 [ 156.461351][ T7106] ? syscall_trace_enter+0x1cb/0x220 [ 156.461379][ T7106] ? rcu_is_watching+0x12/0xc0 [ 156.461399][ T7106] do_syscall_64+0xcd/0xf80 [ 156.461421][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.461437][ T7106] RIP: 0033:0x7f4b4658f749 [ 156.461453][ T7106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.461469][ T7106] RSP: 002b:00007f4b447f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.461485][ T7106] RAX: ffffffffffffffda RBX: 00007f4b467e5fa0 RCX: 00007f4b4658f749 [ 156.461496][ T7106] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 156.461505][ T7106] RBP: 00007f4b447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.461515][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.461524][ T7106] R13: 00007f4b467e6038 R14: 00007f4b467e5fa0 R15: 00007ffe57979068 [ 156.461549][ T7106] [ 157.042377][ T7115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.051561][ T7115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.060316][ T7115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.073306][ T7115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.081965][ T7115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.090496][ T7115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.098935][ T7115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.107431][ T7115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.689282][ T5981] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.708546][ T7120] warning: `syz.0.320' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.831712][ T850] usb 4-1: USB disconnect, device number 11 [ 157.930648][ T7117] (syz.4.314,7117,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 158.228824][ T7117] (syz.4.314,7117,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 158.253673][ T5981] pwc: recv_control_msg error -32 req 02 val 2c00 [ 158.270670][ T7117] (syz.4.314,7117,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 158.302077][ T7117] (syz.4.314,7117,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 158.351208][ T30] audit: type=1400 audit(1766507288.309:484): avc: denied { getopt } for pid=7121 comm="syz.1.323" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.466402][ T5981] pwc: recv_control_msg error -32 req 04 val 1300 [ 158.474450][ T5981] pwc: recv_control_msg error -71 req 04 val 1400 [ 158.488096][ T5981] pwc: recv_control_msg error -71 req 02 val 2000 [ 158.498246][ T5981] pwc: recv_control_msg error -71 req 02 val 2100 [ 158.549144][ T5816] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.590116][ T850] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 158.591711][ T5981] pwc: recv_control_msg error -71 req 04 val 1500 [ 158.683308][ T5981] pwc: recv_control_msg error -71 req 02 val 2500 [ 158.700186][ T5981] pwc: recv_control_msg error -71 req 02 val 2400 [ 158.707281][ T5981] pwc: recv_control_msg error -71 req 02 val 2600 [ 158.714261][ T5981] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.764011][ T850] usb 4-1: Using ep0 maxpacket: 32 [ 158.764011][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 158.764433][ T5981] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.800986][ T5816] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 158.802300][ T850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.821016][ T850] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.822437][ T5816] usb 1-1: config 0 has no interface number 0 [ 158.837109][ T850] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 158.857607][ T850] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.865423][ T850] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 158.876017][ T850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.876232][ T5981] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.908402][ T5816] usb 1-1: config 0 interface 184 has no altsetting 0 [ 158.911171][ T850] usb 4-1: config 0 descriptor?? [ 158.937711][ T5816] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 158.951357][ T5981] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.959929][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.977725][ T5981] pwc: Registered as video103. [ 158.986251][ T5816] usb 1-1: Product: syz [ 158.995126][ T5816] usb 1-1: Manufacturer: syz [ 159.012421][ T5981] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 159.027446][ T5816] usb 1-1: SerialNumber: syz [ 159.047027][ T5816] usb 1-1: config 0 descriptor?? [ 159.066926][ T5981] usb 5-1: USB disconnect, device number 6 [ 159.079120][ T5816] smsc75xx v1.0.0 [ 159.351463][ T850] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 159.373705][ T850] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 159.383823][ T850] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 159.393308][ T850] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 159.407024][ T30] audit: type=1400 audit(1766507289.346:485): avc: denied { ioctl } for pid=7138 comm="syz.4.328" path="socket:[14600]" dev="sockfs" ino=14600 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.432321][ T850] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 159.568803][ T850] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 159.581752][ T5816] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 159.598609][ T5816] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 159.612666][ T30] audit: type=1400 audit(1766507289.385:486): avc: denied { connect } for pid=7138 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.632230][ T850] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints? [ 159.647308][ C0] hid-thrustmaster 0003:044F:B65D.0008: Unknown packet type 0x81a1, unable to proceed further with wheel init [ 159.673991][ T5816] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 159.697936][ T5816] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 159.780940][ T7150] FAULT_INJECTION: forcing a failure. [ 159.780940][ T7150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.801717][ T7150] CPU: 1 UID: 0 PID: 7150 Comm: syz.2.331 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.801744][ T7150] Tainted: [L]=SOFTLOCKUP [ 159.801750][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.801758][ T7150] Call Trace: [ 159.801761][ T7150] [ 159.801766][ T7150] dump_stack_lvl+0x16c/0x1f0 [ 159.801783][ T7150] should_fail_ex+0x512/0x640 [ 159.801801][ T7150] _copy_to_iter+0x463/0x1710 [ 159.801820][ T7150] ? __pfx__copy_to_iter+0x10/0x10 [ 159.801836][ T7150] ? find_held_lock+0x2b/0x80 [ 159.801853][ T7150] ? igmp_mc_seq_stop+0xab/0x150 [ 159.801868][ T7150] seq_read_iter+0xd02/0x12d0 [ 159.801889][ T7150] seq_read+0x3a3/0x570 [ 159.801902][ T7150] ? __pfx_seq_read+0x10/0x10 [ 159.801918][ T7150] ? get_pid_task+0xfc/0x250 [ 159.801941][ T7150] ? avc_policy_seqno+0x9/0x20 [ 159.801967][ T7150] ? __pfx_seq_read+0x10/0x10 [ 159.801980][ T7150] proc_reg_read+0x240/0x330 [ 159.801994][ T7150] ? __pfx_proc_reg_read+0x10/0x10 [ 159.802008][ T7150] vfs_read+0x1e4/0xcf0 [ 159.802024][ T7150] ? __pfx_vfs_read+0x10/0x10 [ 159.802036][ T7150] ? find_held_lock+0x2b/0x80 [ 159.802051][ T7150] ? __fget_files+0x204/0x3c0 [ 159.802068][ T7150] ? __fget_files+0x20e/0x3c0 [ 159.802081][ T7150] ? __fget_files+0x130/0x3c0 [ 159.802099][ T7150] __x64_sys_pread64+0x1eb/0x250 [ 159.802113][ T7150] ? __pfx___x64_sys_pread64+0x10/0x10 [ 159.802131][ T7150] do_syscall_64+0xcd/0xf80 [ 159.802146][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.802156][ T7150] RIP: 0033:0x7f4b4658f749 [ 159.802165][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.802175][ T7150] RSP: 002b:00007f4b447f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 159.802185][ T7150] RAX: ffffffffffffffda RBX: 00007f4b467e5fa0 RCX: 00007f4b4658f749 [ 159.802191][ T7150] RDX: 0000000000001000 RSI: 0000200000002280 RDI: 0000000000000004 [ 159.802197][ T7150] RBP: 00007f4b447f6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.802203][ T7150] R10: 0000000000000d33 R11: 0000000000000246 R12: 0000000000000001 [ 159.802208][ T7150] R13: 00007f4b467e6038 R14: 00007f4b467e5fa0 R15: 00007ffe57979068 [ 159.802222][ T7150] [ 160.035966][ T978] usb 4-1: USB disconnect, device number 12 [ 160.050190][ T30] audit: type=1400 audit(1766507289.972:487): avc: denied { write } for pid=7127 comm="syz.0.324" path="socket:[13916]" dev="sockfs" ino=13916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.252087][ T5816] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 160.376862][ T850] usb 1-1: USB disconnect, device number 10 [ 160.388792][ T5816] usb 2-1: device descriptor read/64, error -71 [ 160.420639][ T30] audit: type=1400 audit(1766507290.344:488): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 160.423180][ T7155] sp0: Synchronizing with TNC [ 160.477938][ T30] audit: type=1400 audit(1766507290.374:489): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.540512][ T30] audit: type=1400 audit(1766507290.374:490): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.563463][ T30] audit: type=1400 audit(1766507290.374:491): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.585250][ T5932] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.596274][ T30] audit: type=1400 audit(1766507290.384:492): avc: denied { read } for pid=5480 comm="dhcpcd" name="n100" dev="tmpfs" ino=2869 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.623860][ T30] audit: type=1400 audit(1766507290.384:493): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2869 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.653760][ T5816] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 160.668071][ T7159] nfs: Bad value for 'source' [ 160.749194][ T5932] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 160.765940][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.776184][ T5932] usb 5-1: Product: syz [ 160.792713][ T5932] usb 5-1: Manufacturer: syz [ 160.792713][ T5816] usb 2-1: device descriptor read/64, error -71 [ 160.805168][ T5932] usb 5-1: SerialNumber: syz [ 160.812220][ T5932] usb 5-1: config 0 descriptor?? [ 160.821666][ T5932] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 160.900589][ T5816] usb usb2-port1: attempt power cycle [ 161.032436][ T7156] netlink: 'syz.4.332': attribute type 4 has an invalid length. [ 161.148541][ T5928] net_ratelimit: 68 callbacks suppressed [ 161.148558][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.219044][ T5932] gspca_sunplus: reg_r err -71 [ 161.224192][ T5932] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 161.234459][ T5932] usb 5-1: USB disconnect, device number 7 [ 161.245317][ T5816] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 162.221148][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.234366][ T5816] usb 2-1: device descriptor read/8, error -71 [ 162.242660][ T850] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 184.026869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.673413][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 267.680386][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7171/1:b..l [ 267.688647][ C0] rcu: (detected by 0, t=10502 jiffies, g=15381, q=305 ncpus=2) [ 267.696348][ C0] task:dhcpcd state:R running task stack:27208 pid:7171 tgid:7171 ppid:5480 task_flags:0x40014c flags:0x00080000 [ 267.710264][ C0] Call Trace: [ 267.713542][ C0] [ 267.716469][ C0] ? __schedule+0x10b9/0x6150 [ 267.721139][ C0] __schedule+0x1139/0x6150 [ 267.725651][ C0] ? __pfx___schedule+0x10/0x10 [ 267.730491][ C0] ? mark_held_locks+0x49/0x80 [ 267.735249][ C0] preempt_schedule_irq+0x51/0x90 [ 267.740267][ C0] irqentry_exit+0x1d8/0x8c0 [ 267.744848][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.750815][ C0] RIP: 0010:unwind_next_frame+0x16a5/0x20b0 [ 267.756698][ C0] Code: 4e 05 00 00 49 8b 45 10 48 39 dd 0f 87 e4 f7 ff ff 48 39 d8 0f 86 db f7 ff ff 48 8d 53 08 48 39 d5 0f 92 c1 48 39 d0 0f 93 c0 <84> c1 0f 84 c3 f7 ff ff 48 39 5c 24 10 0f 82 b8 f7 ff ff 48 b8 00 [ 267.776293][ C0] RSP: 0018:ffffc9000466f738 EFLAGS: 00000202 [ 267.782348][ C0] RAX: ffffc90004670001 RBX: ffffc9000466fdd8 RCX: ffffc90004670001 [ 267.790307][ C0] RDX: ffffc9000466fde0 RSI: ffffc9000466fdb0 RDI: ffffc9000466f7b8 [ 267.798266][ C0] RBP: ffffc90004668000 R08: 0000000000000001 R09: 000000002d64dbdc [ 267.806221][ C0] R10: 0000000000000002 R11: 0000000000007b2b R12: ffffc9000466f7f8 [ 267.814179][ C0] R13: ffffc9000466f7a8 R14: ffffc9000466fdd8 R15: ffffc9000466f7dc [ 267.822151][ C0] ? unwind_next_frame+0x1519/0x20b0 [ 267.827435][ C0] ? __mmput+0x12a/0x410 [ 267.831674][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 267.837818][ C0] arch_stack_walk+0x94/0x100 [ 267.842497][ C0] ? mmput+0x62/0x70 [ 267.846388][ C0] stack_trace_save+0x8e/0xc0 [ 267.851059][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 267.856422][ C0] ? __lock_acquire+0x436/0x2890 [ 267.861350][ C0] kasan_save_stack+0x33/0x60 [ 267.866019][ C0] ? kasan_save_stack+0x33/0x60 [ 267.870878][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 267.876248][ C0] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 267.882306][ C0] ? kmem_cache_free+0x171/0x770 [ 267.887231][ C0] ? exit_mmap+0x507/0xb60 [ 267.891638][ C0] ? __mmput+0x12a/0x410 [ 267.895905][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 267.901095][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 267.907243][ C0] __call_rcu_common.constprop.0+0xa5/0xa10 [ 267.913132][ C0] kmem_cache_free+0x171/0x770 [ 267.917885][ C0] ? exit_mmap+0x507/0xb60 [ 267.922304][ C0] ? exit_mmap+0x507/0xb60 [ 267.926712][ C0] exit_mmap+0x507/0xb60 [ 267.930946][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 267.935706][ C0] ? __lock_acquire+0x436/0x2890 [ 267.940641][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 267.946182][ C0] __mmput+0x12a/0x410 [ 267.950244][ C0] mmput+0x62/0x70 [ 267.953959][ C0] do_exit+0x7d7/0x2bd0 [ 267.958106][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 267.963120][ C0] ? __pfx_do_exit+0x10/0x10 [ 267.967696][ C0] ? rcu_is_watching+0x12/0xc0 [ 267.972451][ C0] do_group_exit+0xd3/0x2a0 [ 267.976941][ C0] __x64_sys_exit_group+0x3e/0x50 [ 267.981952][ C0] x64_sys_call+0x151c/0x1740 [ 267.986622][ C0] do_syscall_64+0xcd/0xf80 [ 267.991119][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.997000][ C0] RIP: 0033:0x7f3b1f3866c5 [ 268.001408][ C0] RSP: 002b:00007ffc02f04b88 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 268.009809][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3b1f3866c5 [ 268.017781][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 268.025742][ C0] RBP: 00007ffc02f05198 R08: 000055e009a152c0 R09: 0000000000000002 [ 268.033703][ C0] R10: 00000000000000e0 R11: 0000000000000206 R12: 00007ffc02f04bd0 [ 268.041661][ C0] R13: 000055e009a168a0 R14: 00007ffc02f04e10 R15: 00007ffc02f04bc0 [ 268.049629][ C0] [ 268.052633][ C0] rcu: rcu_preempt kthread starved for 10538 jiffies! g15381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 268.063809][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 268.073757][ C0] rcu: RCU grace-period kthread stack dump: [ 268.079624][ C0] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 268.093102][ C0] Call Trace: [ 268.096367][ C0] [ 268.099286][ C0] ? __schedule+0x10b9/0x6150 [ 268.103954][ C0] __schedule+0x1139/0x6150 [ 268.108457][ C0] ? __pfx___schedule+0x10/0x10 [ 268.113295][ C0] ? find_held_lock+0x2b/0x80 [ 268.117966][ C0] ? schedule+0x2d7/0x3a0 [ 268.122288][ C0] schedule+0xe7/0x3a0 [ 268.126361][ C0] schedule_timeout+0x123/0x290 [ 268.131222][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 268.136590][ C0] ? __pfx_process_timeout+0x10/0x10 [ 268.141872][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 268.147666][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 268.153118][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 268.157892][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 268.163186][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.168379][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 268.173308][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 268.178154][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 268.183952][ C0] rcu_gp_kthread+0x26d/0x380 [ 268.188628][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 268.193835][ C0] ? rcu_is_watching+0x12/0xc0 [ 268.198593][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.203790][ C0] ? __kthread_parkme+0x19e/0x250 [ 268.208803][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 268.213992][ C0] kthread+0x3c5/0x780 [ 268.218058][ C0] ? __pfx_kthread+0x10/0x10 [ 268.222637][ C0] ? rcu_is_watching+0x12/0xc0 [ 268.227392][ C0] ? __pfx_kthread+0x10/0x10 [ 268.231974][ C0] ret_from_fork+0x983/0xb10 [ 268.236562][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 268.241665][ C0] ? __switch_to+0x7af/0x10d0 [ 268.246332][ C0] ? __pfx_kthread+0x10/0x10 [ 268.250910][ C0] ret_from_fork_asm+0x1a/0x30 [ 268.255678][ C0] [ 268.258682][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 268.265003][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.275506][ C0] Tainted: [L]=SOFTLOCKUP [ 268.279815][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.289855][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 268.295497][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 268.315092][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 268.321147][ C0] RAX: 00000000011664bf RBX: 0000000000000000 RCX: ffffffff8b7806d9 [ 268.329103][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdbe3 RDI: ffffffff8bf2b380 [ 268.337061][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 268.345023][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 268.352985][ C0] R13: ffffffff8e097b40 R14: ffffffff9088afd0 R15: 0000000000000000 [ 268.360946][ C0] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 268.369870][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.376439][ C0] CR2: 000055dfeb267660 CR3: 0000000077ad7000 CR4: 00000000003526f0 [ 268.384409][ C0] Call Trace: [ 268.387689][ C0] [ 268.390617][ C0] default_idle+0x13/0x20 [ 268.394949][ C0] default_idle_call+0x6c/0xb0 [ 268.399705][ C0] do_idle+0x38d/0x510 [ 268.403769][ C0] ? __pfx_do_idle+0x10/0x10 [ 268.408362][ C0] cpu_startup_entry+0x4f/0x60 [ 268.413116][ C0] rest_init+0x16b/0x2b0 [ 268.417350][ C0] ? acpi_subsystem_init+0x133/0x180 [ 268.422621][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 268.428156][ C0] start_kernel+0x3ef/0x4d0 [ 268.432655][ C0] x86_64_start_reservations+0x18/0x30 [ 268.438109][ C0] x86_64_start_kernel+0x130/0x190 [ 268.443214][ C0] common_startup_64+0x13e/0x148 [ 268.448155][ C0]