last executing test programs: 8.240764098s ago: executing program 0 (id=681): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_OIF={0x8}]}, 0x2c}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffff7fffffff7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1}) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)=0x2) close(r1) 7.993220372s ago: executing program 2 (id=686): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x1ff, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'pim6reg1\x00'}, 0x18) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x10}}], 0x30}, 0x200000e0) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000037000100fcff070004000000010000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000092a000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x0, 0x0}]}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) 6.95500649s ago: executing program 4 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='5', 0x1) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0xc4, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xb1, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f7", @typed={0x4, 0xe9}]}]}, 0xc4}], 0x1, 0x0, 0x0, 0x40004}, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xf7) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240), 0x2000001, &(0x7f0000000240)=ANY=[]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) syz_fuse_handle_req(r7, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x24, 0x0, {0x0, 0x0, 0x0, {0x0, 0x1, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xa000, 0x40, r9, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f00000004c0)="e1", 0x1}], 0x1) ioctl$EVIOCRMFF(r11, 0x40044581, 0x0) ioctl(r4, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") 6.905864823s ago: executing program 2 (id=689): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0xf21, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) close(r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r6, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0xa1328f59b7fd100f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x65d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r13, &(0x7f0000000180)={0x0, 0x188d, 0x500, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36c, 0x80000, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffdfffc, 0x1000, 0x0, 0x45}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x1000, 0x2, 0x82}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) 6.587226006s ago: executing program 4 (id=692): r0 = socket(0x10, 0x803, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x9, 0x7, 0x6, 0x7f, @random="f42b835595ee"}, 0x10) (async) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r2, 0x0, 0xffffffff000) (async) sendmmsg(r1, &(0x7f0000002880)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x40, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x11e0}}], 0x1, 0x4000) (async) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) r7 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x8}}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x4d9b6eaf) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9d2}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @printk={@lu}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x8, 0xd2, &(0x7f0000000380)=""/210, 0x41000, 0x10, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000480)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xf, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r7, r6, r7, r6], &(0x7f0000000580)=[{0x1, 0x3, 0x3, 0x1}, {0x2, 0x8001, 0x1, 0x6}, {0x2, 0x1, 0x2, 0x5}, {0x0, 0x5, 0x8, 0x4}, {0x4, 0x4, 0xe, 0x3}], 0x10, 0xfffffffd}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x37c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}, @IFLA_VFINFO_LIST={0x310, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7, 0x7fff, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x851, 0x1}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x4}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x6f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2}}]}, {0xb8, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x10001, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x8f51}}, @IFLA_VF_RATE={0x10, 0x6, {0x280, 0x62, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x55}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffff7fff, 0x80000001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xc, 0x800}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x800, 0xfffffff7}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x48d, 0x3, 0x8100}}, {0x14, 0x1, {0xd, 0x452, 0x6, 0x8100}}, {0x14, 0x1, {0xa, 0xfda, 0x3, 0x8100}}]}]}, {0x84, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x3d48, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x917, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x3ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x25, 0xb}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffff8, 0x5}}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x6}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x96a, 0x55e, 0x3ff80, 0x8100}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0xb}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x566d54df}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1000, 0x263, 0xb}}, @IFLA_VF_RATE={0x10, 0x6, {0xd92d, 0x7, 0xfffffffb}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8612, 0x3}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x800, @remote}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x45}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x100, 0xc31, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xd4fa, 0x101}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x9c5}}, @IFLA_VF_VLAN={0x10, 0x2, {0xffffffff, 0x354, 0x7}}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0xc}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0xc}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x40, 0x3, 0x700b}}]}]}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x37c}}, 0x0) 6.499241549s ago: executing program 4 (id=693): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x8, 0x0, &(0x7f0000000380)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) prlimit64(0x0, 0xb, &(0x7f0000000380)={0x8, 0x2000000000000a}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='p:s/p ./file0:0', 0xf) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x43, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002a059a44063071510e6fe0102030109023100010a04e0020904080803ff219a0509050210200007010802e8766109050d0c1000070508090506100004001302"], &(0x7f0000000880)={0x2, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x5, 0xf, 0x0, 0x8, 0x92}, 0x2d, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r6, r7, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.220503794s ago: executing program 3 (id=695): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x80000000, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.083701431s ago: executing program 3 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='add ', 0x4) 5.938280759s ago: executing program 0 (id=697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 5.904403145s ago: executing program 2 (id=698): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000005c0)=""/199, &(0x7f00000006c0)=0xc7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x57) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000200)={0x1d, r8}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r9, @ANYRES64=r8, @ANYRES64=r7, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r9, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x401, 0x8, 0x2, 0x3, 0x2, 0x0, [{0x6e, 0xc, 0x7, '\x00', 0x2801}, {0x2, 0x373, 0x7, '\x00', 0xa}]}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000380)={0x631, {{0x2, 0x4e23, @remote}}, 0x1}, 0x90) 5.852970578s ago: executing program 3 (id=699): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5401000010000100feffffbf0001000000000000000000000000000000000000000000000000ffffac1414bb000103944e210005000000003a000000f966beb8ca696b73", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r1], 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x10) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x3818c1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x4a0}, {r1, 0x4000}, {r3, 0x480}, {r0, 0x10}, {r1, 0x505}], 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000011) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r7, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r7, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x4000000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb", 0x1}], 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x3a, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x403, 0x1, 0xf8, 0x0, 0x7, 0xb}]}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) 5.635340427s ago: executing program 0 (id=700): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x1ff, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'pim6reg1\x00'}, 0x18) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x10}}], 0x30}, 0x200000e0) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000037000100fcff070004000000010000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000092a000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x0, 0x0}]}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) 5.633431145s ago: executing program 1 (id=701): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) (fail_nth: 3) 4.817604926s ago: executing program 2 (id=702): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r1}, 0x20) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000380)=@raw=[@generic={0xb, 0x0, 0x8, 0x1, 0x1}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x98}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8d}, @alu={0x7, 0x0, 0x2, 0x7, 0x1, 0x18, 0xfffffffffffffffc}, @alu={0x3, 0x0, 0xa, 0x0, 0x1, 0x80, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x3e}], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x1, 0x6, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r0], 0x0, 0x10, 0x9}, 0x94) ioctl$VIDIOC_QUERYMENU(r2, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x8}) 3.927820412s ago: executing program 1 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x46, r5}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_setlink={0x7c, 0x13, 0x100, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x1a49, 0x10000}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7ff}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 3.927620438s ago: executing program 1 (id=704): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x8, 0x5f, 0x0, 0xfffa, 0x2}) 3.884886241s ago: executing program 0 (id=705): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000340)={0x1, 0x836, 0x7, 0x5, 0xf}) r9 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r12 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r9, 0x2) syz_ublk_setup_queues(r12, r11, &(0x7f0000000280)={0x0, 0xd601, 0x0, 0x0, 0x391}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbc22, 0x1, 0x1, 0x26, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x285e, 0x4, 0x2, 0x121, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x63fe, 0x2, 0x2, 0x175, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b7, 0x40000, 0x2, 0x87, 0x0, r5}}], 0x4, &(0x7f0000003080)={0x2e, 0x6, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, r10, '\x00', {0x3, 0x888, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r12, r11, &(0x7f0000000700), &(0x7f0000000800)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a46}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x10000}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 3.828036886s ago: executing program 1 (id=706): syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, 0x0) r0 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x1) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.769370532s ago: executing program 0 (id=707): r0 = socket(0x10, 0x803, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0xc8) open_by_handle_at(r1, 0x0, 0x4f0280) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000700039022dbd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100c9"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) 2.693529016s ago: executing program 1 (id=708): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0xf21, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000500)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) close(r2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r6, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000200)={0x2e, 0xa1328f59b7fd100f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x65d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x60}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r13, &(0x7f0000000180)={0x0, 0x188d, 0x500, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36c, 0x80000, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffdfffc, 0x1000, 0x0, 0x45}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x1000, 0x2, 0x82}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) 2.611865729s ago: executing program 0 (id=709): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5401000010000100feffffbf0001000000000000000000000000000000000000000000000000ffffac1414bb000103944e210005000000003a000000f966beb8ca696b73", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r1], 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x10) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x4a0}, {r1, 0x4000}, {0xffffffffffffffff, 0x480}, {r0, 0x10}, {r1, 0x505}], 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r6, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x4000000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb", 0x1}], 0x1, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x3a, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x403, 0x1, 0xf8, 0x0, 0x7, 0xb}]}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) bind$bt_hci(r7, 0x0, 0x0) 2.550934013s ago: executing program 3 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130229bd7000fbdbdf251700000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x24000014) 2.431619002s ago: executing program 2 (id=711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000002a00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = getpid() prlimit64(r2, 0xf, &(0x7f0000000280)={0xfffffffffffffc00, 0x80}, 0x0) landlock_create_ruleset(&(0x7f00000014c0)={0xf26e, 0x1}, 0x30, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000001500)=ANY=[@ANYRESOCT=r1, @ANYBLOB="e3f9e76a4b3a87d39940b8ec8ec31dd5e041dba10b32cc7c4d860214b18b57b483c17de0fd4e017edda6e79b70553cb06064db19f6714bba70530262692e90af30cfcaad5cf63feb92f387f0b5bfb9b11c60f6fc0e180bd47f517233a864226ac5a83283e34028ddc0cf6bd04ca3c02b1cf9e1f9d2eab27a7b9ca7742389c5957225df6e9df803d271ecd97c5bfd8844ab14cb3003826bd7ce1c271e8e891ba128ace9251680535806932d9212906731856af3ccb2bbad215078ed9dc6a0631abd", @ANYBLOB="dcc039e5b6bba02528aa89d789500c1cbc83da9e2cdbc73e49b58dc9aaaff35594f396175c491d39bd557c38c211ae8279222e8175ad8c0b1b2aa556585255446655ac4bd4f19de2d7b9e06ba218f6b2ffe1dec640338323ddd3cd993847222c62fbeb7eeeb738667363153b7f956cb1a85358c0823d1469e348a34ffa167fc3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r5 = openat(r4, &(0x7f0000001480)='./file0\x00', 0x228840, 0x8) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='devtmpfs\x00', 0x0, &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)="d7", 0x1) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100039042cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11980400519806001c00128009000100626f6e64000000000c0200800500062001000000"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x40110) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read(r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES16=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547e841fd74eabc89b6f5b32", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.431183208s ago: executing program 4 (id=712): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xa, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0x4}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x20004450) r10 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000380), 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 2.418988114s ago: executing program 3 (id=713): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) socket$inet6(0xa, 0x80002, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000300)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000000206010200000000000000000200000314000780080008400000003708000640000008000e0003006269746d61703a6970000000050005000a00000005000400040000000900020073797a310000000005000100070000000d0003006c6973743a73657400000000"], 0x74}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5111) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r7 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r7, 0xffffffffffffffff, 0x80000) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x7) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x800) 1.730339313s ago: executing program 2 (id=714): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) socket$inet6(0xa, 0x80002, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000300)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000000206010200000000000000000200000314000780080008400000003708000640000008000e0003006269746d61703a6970000000050005000a00000005000400040000000900020073797a310000000005000100070000000d0003006c6973743a73657400000000"], 0x74}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5111) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r7 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r7, 0xffffffffffffffff, 0x80000) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x7) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x800) 906.191666ms ago: executing program 4 (id=715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x0) 904.456382ms ago: executing program 3 (id=716): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x1ff, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'pim6reg1\x00'}, 0x18) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0x10}}], 0x30}, 0x200000e0) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000037000100fcff070004000000010000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000092a000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x0, 0x0}]}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) 839.01649ms ago: executing program 4 (id=717): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9401", @ANYRES64], 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/ramdisk_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/ramdisk_0/rd\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/ramdisk_0/rd/control\x00', 0x100, 0x0) write(r1, &(0x7f0000000240), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/ramdisk_0/rd/enable\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000740)='./config/target/core/ramdisk_0/rd\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/port1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000003c0)='0x1d', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') 0s ago: executing program 1 (id=718): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = io_uring_setup(0x6bd, &(0x7f00000000c0)={0x0, 0x18a9, 0x2, 0x1, 0x5e}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x212a7, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0xde, 0xe, 0x2, 0x7f, 0x7, 0x2, 0x81, 0x2, 0x5, 0x2, 0xe, 0xd, 0xb, 0x6}, 0xe) close_range(r2, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) kernel console output (not intermixed with test programs): d, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.647138][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.696607][ T42] usb 2-1: Product: syz [ 190.697707][ T5705] rndis_host 1-1:255.97: ACM capabilities 01, not really RNDIS? [ 190.719137][ T42] usb 2-1: Manufacturer: syz [ 190.733731][ T42] usb 2-1: SerialNumber: syz [ 190.761309][ T42] cdc_mbim 2-1:1.0: skipping garbage [ 190.779241][ T5705] usb 1-1: USB disconnect, device number 12 [ 190.865543][ T4927] Bluetooth: hci3: command 0x0406 tx timeout [ 190.865597][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 190.871678][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 190.881974][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 190.989482][ T991] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 190.991318][ T7103] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 191.042704][ T7129] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 191.061513][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 191.122362][ T7132] netlink: 100 bytes leftover after parsing attributes in process `syz.4.344'. [ 191.157294][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.174206][ T991] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.212957][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.251781][ T7133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.267234][ T991] usb 4-1: config 0 descriptor?? [ 191.437467][ T42] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 191.446092][ T42] cdc_mbim 2-1:1.0: bind() failure [ 191.467035][ T42] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 191.515558][ T5849] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 191.533186][ T42] cdc_ncm 2-1:1.1: bind() failure [ 191.549331][ T29] audit: type=1400 audit(1785947462.720:417): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.551587][ T42] usb 2-1: USB disconnect, device number 15 [ 191.698343][ T5849] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 191.717449][ T29] audit: type=1400 audit(1785947462.720:418): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.721522][ T7143] FAULT_INJECTION: forcing a failure. [ 191.721522][ T7143] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 191.741533][ T29] audit: type=1400 audit(1785947462.720:419): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.771387][ T5849] usb 5-1: config 255 has no interface number 0 [ 191.775200][ T29] audit: type=1400 audit(1785947462.720:420): avc: denied { read } for pid=5272 comm="dhcpcd" name="n30" dev="tmpfs" ino=3337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.803508][ T29] audit: type=1400 audit(1785947462.720:421): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.805104][ T5849] usb 5-1: config 255 interface 97 has no altsetting 0 [ 191.827472][ T29] audit: type=1400 audit(1785947462.720:422): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3337 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.858690][ T29] audit: type=1400 audit(1785947462.810:423): avc: denied { bind } for pid=7117 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 191.878678][ T29] audit: type=1400 audit(1785947462.810:424): avc: denied { listen } for pid=7117 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 191.880367][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.2.347 Not tainted syzkaller #0 PREEMPT(full) [ 191.880388][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 191.880397][ T7143] Call Trace: [ 191.880403][ T7143] [ 191.880409][ T7143] dump_stack_lvl+0x100/0x190 [ 191.880433][ T7143] should_fail_ex.cold+0x5/0xa [ 191.880453][ T7143] _copy_to_user+0x32/0xd0 [ 191.880476][ T7143] simple_read_from_buffer+0xcb/0x170 [ 191.880497][ T7143] proc_fail_nth_read+0x1af/0x230 [ 191.880521][ T7143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.880546][ T7143] ? rw_verify_area+0xce/0x6d0 [ 191.880567][ T7143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.880589][ T7143] vfs_read+0x1e4/0xb40 [ 191.880614][ T7143] ? __pfx_vfs_read+0x10/0x10 [ 191.880636][ T7143] ? __fget_files+0x215/0x3d0 [ 191.880657][ T7143] ? __fget_files+0x21f/0x3d0 [ 191.880678][ T7143] ksys_read+0x12a/0x250 [ 191.880700][ T7143] ? __pfx_ksys_read+0x10/0x10 [ 191.880729][ T7143] do_syscall_64+0x115/0x870 [ 191.880747][ T7143] ? clear_bhb_loop+0x40/0x90 [ 191.880766][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.880781][ T7143] RIP: 0033:0x7f1918d5e90e [ 191.880794][ T7143] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.880808][ T7143] RSP: 002b:00007f1919c63fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.880824][ T7143] RAX: ffffffffffffffda RBX: 00007f1919c646c0 RCX: 00007f1918d5e90e [ 191.880835][ T7143] RDX: 000000000000000f RSI: 00007f1919c640a0 RDI: 0000000000000003 [ 191.880844][ T7143] RBP: 00007f1919c64090 R08: 0000000000000000 R09: 0000000000000000 [ 191.880853][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.880862][ T7143] R13: 00007f1919026038 R14: 00007f1919025fa0 R15: 00007ffcdf5600d8 [ 191.880883][ T7143] [ 191.936391][ T5849] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 192.087503][ T29] audit: type=1400 audit(1785947462.820:425): avc: denied { accept } for pid=7117 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.113783][ T29] audit: type=1400 audit(1785947463.300:426): avc: denied { read } for pid=7144 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.136991][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.137015][ T5849] usb 5-1: Product: syz [ 192.137028][ T5849] usb 5-1: Manufacturer: syz [ 192.137042][ T5849] usb 5-1: SerialNumber: syz [ 192.349092][ T991] usbhid 4-1:0.0: can't add hid device: -71 [ 192.356839][ T991] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 192.387830][ T991] usb 4-1: USB disconnect, device number 15 [ 192.446200][ T5705] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 192.585652][ T5705] usb 3-1: device descriptor read/64, error -71 [ 192.654118][ T7164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.351'. [ 192.675360][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 192.703759][ T7164] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 192.778040][ T7164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.835526][ T5705] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 192.877917][ T7169] bond1: (slave geneve2): making interface the new active one [ 192.928139][ T7169] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 192.976691][ T5705] usb 3-1: device descriptor read/64, error -71 [ 193.114881][ T5705] usb usb3-port1: attempt power cycle [ 193.475992][ T5705] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 193.526486][ T5705] usb 3-1: device descriptor read/8, error -71 [ 193.724713][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 193.794319][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'. [ 193.811423][ T5705] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 193.871782][ T5705] usb 3-1: device descriptor read/8, error -71 [ 193.915264][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.923041][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.005847][ T5705] usb usb3-port1: unable to enumerate USB device [ 194.154141][ T5733] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 194.169867][ T5849] rndis_host 5-1:255.97: ACM capabilities 01, not really RNDIS? [ 194.211974][ T5849] usb 5-1: USB disconnect, device number 13 [ 194.327261][ T5733] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.350853][ T5733] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 194.396037][ T5733] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 194.411907][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.429676][ T5733] usb 1-1: Product: syz [ 194.443662][ T5733] usb 1-1: Manufacturer: syz [ 194.459192][ T5733] usb 1-1: SerialNumber: syz [ 195.025470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.075481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 195.177638][ T7241] virtio-fs: tag not found [ 195.185471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.415486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 195.935093][ T7250] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 196.015012][ T7248] SELinux: invalid class [ 196.055888][ C1] usb 1-1: received EP1 urb->status = -71 [ 196.078262][ T5733] snd-usb-caiaq 1-1:1.0: unable to initialize device, too many streams. [ 196.106343][ T5733] snd-usb-caiaq 1-1:1.0: Unable to set up audio system (ret=-22) [ 196.126188][ T7248] SELinux: failed to load policy [ 196.141470][ T5733] usb 1-1: unable to init card! (ret=-22) [ 196.155131][ T5733] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 196.189961][ T5733] usb 1-1: USB disconnect, device number 13 [ 196.359224][ T7253] loop3: detected capacity change from 0 to 7 [ 196.429469][ T7253] Dev loop3: unable to read RDB block 7 [ 196.461663][ T7253] loop3: unable to read partition table [ 196.476698][ T7253] loop3: partition table beyond EOD, truncated [ 196.485545][ T7253] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 196.740974][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 196.740989][ T29] audit: type=1400 audit(1785947467.930:450): avc: denied { write } for pid=7259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.117506][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.368'. [ 197.375723][ T29] audit: type=1400 audit(1785947468.450:451): avc: denied { create } for pid=7276 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.416688][ T7285] 0x000000000007-0x000000020000 : "" [ 197.500905][ T7285] ftl_cs: FTL header corrupt! [ 198.106182][ T29] audit: type=1400 audit(1785947468.460:452): avc: denied { ioctl } for pid=7276 comm="syz.1.368" path="socket:[16007]" dev="sockfs" ino=16007 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.314600][ T29] audit: type=1400 audit(1785947469.500:453): avc: denied { write } for pid=7278 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.611022][ T29] audit: type=1400 audit(1785947469.780:454): avc: denied { create } for pid=7287 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 198.687613][ T29] audit: type=1400 audit(1785947469.780:455): avc: denied { ioctl } for pid=7287 comm="syz.4.363" path="socket:[16032]" dev="sockfs" ino=16032 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.745599][ T29] audit: type=1400 audit(1785947469.840:456): avc: denied { setopt } for pid=7287 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.790060][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 198.808535][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 199.368583][ T7309] : renamed from bond_slave_0 (while UP) [ 199.577088][ T29] audit: type=1400 audit(1785947470.770:457): avc: denied { mount } for pid=7313 comm="syz.0.376" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 200.114515][ T7320] virtio-fs: tag not found [ 200.158712][ T29] audit: type=1400 audit(1785947470.770:458): avc: denied { mounton } for pid=7313 comm="syz.0.376" path="/75/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 200.189404][ T42] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 200.238945][ T29] audit: type=1400 audit(1785947471.430:459): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 200.335913][ T42] usb 2-1: device descriptor read/64, error -71 [ 200.364466][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.381'. [ 200.655974][ T42] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 200.847213][ T42] usb 2-1: device descriptor read/64, error -71 [ 200.971924][ T42] usb usb2-port1: attempt power cycle [ 201.030737][ T7340] netlink: 100 bytes leftover after parsing attributes in process `syz.4.384'. [ 201.119224][ T5849] IPVS: starting estimator thread 0... [ 201.257465][ T7347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.309207][ T7345] IPVS: using max 41 ests per chain, 98400 per kthread [ 201.321667][ T991] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 201.349131][ T42] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 201.401681][ T42] usb 2-1: device descriptor read/8, error -71 [ 201.526952][ T991] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.563520][ T991] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 201.604628][ T991] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 201.617688][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.628554][ T991] usb 1-1: Product: syz [ 201.644293][ T991] usb 1-1: Manufacturer: syz [ 201.655806][ T7351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'. [ 201.659237][ T991] usb 1-1: SerialNumber: syz [ 201.675517][ T42] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 201.707848][ T42] usb 2-1: device descriptor read/8, error -71 [ 201.816491][ T42] usb usb2-port1: unable to enumerate USB device [ 201.825748][ T5849] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 201.830240][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 201.957137][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 201.957687][ T29] audit: type=1400 audit(1785947473.150:463): avc: denied { accept } for pid=7350 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 201.977235][ T5849] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 202.019830][ T5849] usb 5-1: config 255 has no interface number 0 [ 202.053163][ T5849] usb 5-1: config 255 interface 97 has no altsetting 0 [ 202.084254][ T5849] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 202.113452][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.137930][ T5849] usb 5-1: Product: syz [ 202.156837][ T5849] usb 5-1: Manufacturer: syz [ 202.161608][ T5849] usb 5-1: SerialNumber: syz [ 202.509727][ T7351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7351 comm=syz.2.379 [ 202.548854][ C1] usb 1-1: received EP1 urb->status = -71 [ 202.570778][ T991] snd-usb-caiaq 1-1:1.0: unable to initialize device, too many streams. [ 202.600074][ T991] snd-usb-caiaq 1-1:1.0: Unable to set up audio system (ret=-22) [ 202.630952][ T991] usb 1-1: unable to init card! (ret=-22) [ 202.637685][ T991] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 202.653849][ T991] usb 1-1: USB disconnect, device number 14 [ 202.826563][ T7362] xt_hashlimit: size too large, truncated to 1048576 [ 203.554632][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 203.915850][ T991] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 204.038264][ T5849] rndis_host 5-1:255.97: ACM capabilities 01, not really RNDIS? [ 204.112398][ T7382] 0x000000000007-0x000000020000 : "" [ 204.140201][ T7382] ftl_cs: FTL header corrupt! [ 204.168190][ T991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.263686][ T991] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 204.338485][ T5849] usb 5-1: USB disconnect, device number 14 [ 204.353539][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.526708][ T991] usb 2-1: config 0 descriptor?? [ 204.785901][ T7390] 0x000000000007-0x000000020000 : "" [ 204.804095][ T7390] ftl_cs: FTL header corrupt! [ 206.483488][ T991] ath6kl: Failed to read usb control message: -71 [ 206.490540][ T991] ath6kl: Unable to read the bmi data from the device: -71 [ 206.547056][ T991] ath6kl: Unable to recv target info: -71 [ 206.620077][ T991] ath6kl: Failed to init ath6kl core: -71 [ 206.657955][ T991] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 206.732358][ T991] usb 2-1: USB disconnect, device number 20 [ 206.749840][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 206.785587][ T42] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 206.945586][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 206.960740][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.013613][ T42] usb 3-1: config 0 has no interfaces? [ 207.033929][ T42] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 207.064662][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.118257][ T42] usb 3-1: Product: syz [ 207.141123][ T42] usb 3-1: Manufacturer: syz [ 207.157490][ T42] usb 3-1: SerialNumber: syz [ 207.185179][ T42] usb 3-1: config 0 descriptor?? [ 207.257786][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 207.468720][ T5706] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 207.640968][ T5692] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 207.741737][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.754166][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.900103][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 207.915496][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 207.930227][ T5706] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.168430][ T5692] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 208.180688][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.189311][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.406100][ T5692] usb 2-1: Product: syz [ 208.410321][ T5692] usb 2-1: Manufacturer: syz [ 208.414947][ T5692] usb 2-1: SerialNumber: syz [ 208.440538][ T5706] usb 4-1: config 0 descriptor?? [ 208.452266][ T5692] usb 2-1: config 0 descriptor?? [ 208.478141][ T5692] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 209.009834][ T5692] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 209.256523][ T5705] usb 3-1: USB disconnect, device number 23 [ 209.759413][ T10] usb 2-1: USB disconnect, device number 21 [ 209.772677][ T5706] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input7 [ 209.810642][ T5706] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 209.907633][ T5706] usb 4-1: USB disconnect, device number 16 [ 210.495814][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 210.665518][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 211.361348][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 211.371532][ T10] usb 2-1: config 2 has an invalid interface number: 232 but max is 0 [ 211.380049][ T10] usb 2-1: config 2 has no interface number 0 [ 211.386477][ T10] usb 2-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.403651][ T10] usb 2-1: config 2 interface 232 has no altsetting 0 [ 211.412924][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 211.422799][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.431165][ T10] usb 2-1: Product: syz [ 211.435410][ T10] usb 2-1: Manufacturer: syz [ 211.440280][ T10] usb 2-1: SerialNumber: syz [ 211.476155][ T29] audit: type=1400 audit(1785947482.660:464): avc: denied { map } for pid=7459 comm="syz.4.415" path="socket:[16676]" dev="sockfs" ino=16676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.500606][ T29] audit: type=1400 audit(1785947482.660:465): avc: denied { read write } for pid=7459 comm="syz.4.415" path="socket:[16676]" dev="sockfs" ino=16676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.549772][ T7461] netlink: 88 bytes leftover after parsing attributes in process `syz.4.415'. [ 211.675755][ T5849] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 211.800829][ T10] usb 2-1: USB disconnect, device number 22 [ 211.808626][ T7465] netlink: 100 bytes leftover after parsing attributes in process `syz.0.414'. [ 211.837241][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.850271][ T29] audit: type=1400 audit(1785947483.040:466): avc: denied { create } for pid=7466 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.855948][ T5849] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 211.881242][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.912377][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.955184][ T29] audit: type=1400 audit(1785947483.140:467): avc: denied { connect } for pid=7466 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.956585][ T5849] usb 4-1: config 0 descriptor?? [ 212.003084][ T7469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.016590][ T29] audit: type=1400 audit(1785947483.140:468): avc: denied { bind } for pid=7466 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.088878][ T29] audit: type=1400 audit(1785947483.160:469): avc: denied { read } for pid=7466 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.117469][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 212.126402][ T29] audit: type=1400 audit(1785947483.240:470): avc: denied { write } for pid=7466 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 212.548279][ T5849] ath6kl: Failed to read usb control message: -71 [ 212.573602][ T5849] ath6kl: Unable to read the bmi data from the device: -71 [ 212.597904][ T5849] ath6kl: Unable to recv target info: -71 [ 212.626896][ T5849] ath6kl: Failed to init ath6kl core: -71 [ 212.663237][ T5849] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 212.698543][ T5849] usb 4-1: USB disconnect, device number 17 [ 212.707861][ T5706] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 212.805570][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 212.945879][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 212.955235][ T5706] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 212.963644][ T5706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.974299][ T5706] usb 3-1: config 0 has no interface number 0 [ 212.980786][ T5706] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 212.992615][ T5706] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 213.002951][ T5706] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 213.014659][ T5706] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 213.069331][ T7487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.107546][ T121] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 213.416960][ T10] usb 1-1: config 255 has an invalid interface number: 97 but max is 0 [ 213.430283][ T5706] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 213.443957][ T10] usb 1-1: config 255 has no interface number 0 [ 213.450649][ T10] usb 1-1: config 255 interface 97 has no altsetting 0 [ 213.457657][ T5706] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 213.468254][ T5706] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 213.481797][ T5706] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.492304][ T5706] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 213.502461][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 213.512438][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.520796][ T10] usb 1-1: Product: syz [ 213.525150][ T10] usb 1-1: Manufacturer: syz [ 213.530154][ T10] usb 1-1: SerialNumber: syz [ 213.542599][ T5706] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 213.553316][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.561579][ T5706] usb 3-1: Product: syz [ 213.566591][ T5706] usb 3-1: Manufacturer: syz [ 213.578847][ T5706] usb 3-1: SerialNumber: syz [ 213.587511][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.599583][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.614735][ T5706] usb 3-1: config 0 descriptor?? [ 213.620177][ T121] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 213.620437][ T7477] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 213.629714][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.658759][ T121] usb 2-1: config 0 descriptor?? [ 213.665398][ T5706] usb 3-1: will this work? Command EP is not usually 12 [ 213.675186][ T5706] usb 3-1: will this work? Response EP is not usually 3 [ 213.686497][ T5706] usb 3-1: will this work? Image data EP is not usually 2 [ 213.878776][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.888923][ T5706] scsi host1: microtekX6 [ 213.920897][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.098281][ T5906] usb 3-1: error -90 submitting URB [ 214.175940][ T5875] usb 3-1: error -90 submitting URB [ 214.225632][ T5875] usb 3-1: error -90 submitting URB [ 214.275637][ T5875] usb 3-1: error -90 submitting URB [ 215.171752][ T7499] netlink: 'syz.2.418': attribute type 27 has an invalid length. [ 215.317590][ T29] audit: type=1400 audit(1786471774.473:471): avc: denied { getopt } for pid=7475 comm="syz.2.418" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.829388][ T121] usbhid 2-1:0.0: can't add hid device: -71 [ 216.045134][ T121] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 216.055183][ T121] usb 2-1: USB disconnect, device number 23 [ 217.247512][ T7521] 0x000000000007-0x000000020000 : "" [ 217.288311][ T7521] ftl_cs: FTL header corrupt! [ 217.361386][ T5849] usb 3-1: USB disconnect, device number 24 [ 217.850896][ T10] rndis_host 1-1:255.97: ACM capabilities 01, not really RNDIS? [ 218.015394][ T10] usb 1-1: USB disconnect, device number 15 [ 218.261372][ T29] audit: type=1400 audit(1786471777.283:472): avc: denied { create } for pid=7529 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.330223][ T29] audit: type=1400 audit(1786471777.341:473): avc: denied { setopt } for pid=7529 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.402583][ T29] audit: type=1400 audit(1786471777.341:474): avc: denied { connect } for pid=7529 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.478673][ T29] audit: type=1400 audit(1786471777.341:475): avc: denied { read } for pid=7529 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.509692][ T29] audit: type=1400 audit(1786471777.409:476): avc: denied { write } for pid=7529 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.793512][ T5822] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 218.824190][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.432'. [ 218.832582][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 218.843172][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 218.960550][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.965628][ T7540] netlink: 'syz.2.432': attribute type 1 has an invalid length. [ 218.972151][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.033963][ T5822] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 219.116483][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.230973][ T5822] usb 2-1: config 0 descriptor?? [ 219.276958][ T7540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.354381][ T7542] bond1: (slave geneve2): making interface the new active one [ 219.438748][ T7542] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 219.450408][ T7548] 0x000000000007-0x000000020000 : "" [ 219.484025][ T7548] ftl_cs: FTL header corrupt! [ 219.530088][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 219.752258][ T5822] hid (null): report_id 0 is invalid [ 220.102302][ T5822] hid-steam 0003:28DE:1142.0004: report_id 0 is invalid [ 220.299936][ T5822] hid-steam 0003:28DE:1142.0004: item 0 1 1 8 parsing failed [ 220.446880][ T5822] hid-steam 0003:28DE:1142.0004: steam_probe:parse of hid interface failed [ 220.463237][ T29] audit: type=1400 audit(1786471779.386:477): avc: denied { ioctl } for pid=7535 comm="syz.1.430" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17850 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 220.503872][ T5822] hid-steam 0003:28DE:1142.0004: probe with driver hid-steam failed with error -22 [ 220.632431][ T10] usb 2-1: USB disconnect, device number 24 [ 220.735868][ T7557] 0x000000000007-0x000000020000 : "" [ 221.883623][ T29] audit: type=1400 audit(1786471780.910:478): avc: denied { cmd } for pid=7559 comm="syz.3.436" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 222.126754][ T29] audit: type=1400 audit(1786471781.037:479): avc: denied { read } for pid=7559 comm="syz.3.436" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 222.274960][ T7557] ftl_cs: FTL header corrupt! [ 222.282808][ T29] audit: type=1400 audit(1786471781.037:480): avc: denied { open } for pid=7559 comm="syz.3.436" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 222.406060][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 222.463620][ T29] audit: type=1400 audit(1786471781.047:481): avc: denied { ioctl } for pid=7559 comm="syz.3.436" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 223.416697][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 223.416711][ T29] audit: type=1400 audit(1786471782.408:488): avc: denied { write } for pid=7591 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 223.543933][ T7601] 0x000000000007-0x000000020000 : "" [ 223.570636][ T7601] ftl_cs: FTL header corrupt! [ 223.644254][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 224.580227][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 224.625636][ T7608] 0x000000000007-0x000000020000 : "" [ 225.032638][ T7610] netlink: 'syz.0.448': attribute type 4 has an invalid length. [ 225.067384][ T7608] ftl_cs: FTL header corrupt! [ 225.628070][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.452'. [ 225.653768][ T29] audit: type=1400 audit(1786471784.606:489): avc: denied { write } for pid=7612 comm="syz.3.449" name="subsystems" dev="configfs" ino=3359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.700164][ T29] audit: type=1400 audit(1786471784.636:490): avc: denied { add_name } for pid=7612 comm="syz.3.449" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.100537][ T29] audit: type=1400 audit(1786471784.655:491): avc: denied { write } for pid=7612 comm="syz.3.449" name="ports" dev="configfs" ino=3360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.170919][ T29] audit: type=1400 audit(1786471784.655:492): avc: denied { create } for pid=7612 comm="syz.3.449" name="1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 226.210518][ T29] audit: type=1400 audit(1786471784.665:493): avc: denied { write } for pid=7612 comm="syz.3.449" name="subsystems" dev="configfs" ino=18147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.277989][ T35] nvmet: connect request for invalid subsystem testnqn! [ 226.306519][ T7624] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 226.308548][ T29] audit: type=1400 audit(1786471784.665:494): avc: denied { create } for pid=7612 comm="syz.3.449" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 226.425798][ T29] audit: type=1400 audit(1786471784.734:495): avc: denied { read write } for pid=7612 comm="syz.3.449" name="attr_allow_any_host" dev="configfs" ino=18154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 226.484474][ T7640] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 226.517270][ T29] audit: type=1400 audit(1786471784.734:496): avc: denied { open } for pid=7612 comm="syz.3.449" path="/95/config/nvmet/subsystems/testnqn/attr_allow_any_host" dev="configfs" ino=18154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 226.590195][ T29] audit: type=1800 audit(1786471784.763:497): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.449" name="attr_allow_any_host" dev="configfs" ino=18154 res=0 errno=0 [ 226.648456][ T7640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.749516][ T7643] bond1: (slave geneve2): making interface the new active one [ 227.298612][ T7643] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 228.740070][ T7662] CacheFiles: Empty directory specified [ 228.772446][ T7662] syzkaller1: entered promiscuous mode [ 228.791675][ T7662] syzkaller1: entered allmulticast mode [ 228.854247][ T991] IPVS: starting estimator thread 0... [ 228.857420][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 229.014952][ T7669] IPVS: using max 52 ests per chain, 124800 per kthread [ 229.757258][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.468'. [ 229.910344][ T7676] bond1: entered promiscuous mode [ 229.946041][ T7676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.033428][ T29] audit: type=1400 audit(1786471788.920:498): avc: denied { setopt } for pid=7684 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 230.316935][ T7687] libceph: resolve '12I.0.0.1' (ret=-3): failed [ 230.333462][ T29] audit: type=1400 audit(1786471789.206:499): avc: denied { append } for pid=7682 comm="syz.2.471" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.484610][ T5822] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 230.636517][ T991] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 230.665620][ T5822] usb 1-1: device descriptor read/64, error -71 [ 230.861914][ T991] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 230.934205][ T991] usb 4-1: config 0 has no interface number 0 [ 230.948238][ T7688] mmap: syz.2.471 (7688) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.961651][ T5822] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 231.014380][ T991] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 231.147189][ T5822] usb 1-1: device descriptor read/64, error -71 [ 231.295973][ T5822] usb usb1-port1: attempt power cycle [ 231.309169][ T991] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 231.384241][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.466887][ T991] usb 4-1: Product: syz [ 231.483859][ T991] usb 4-1: Manufacturer: syz [ 231.494109][ T991] usb 4-1: SerialNumber: syz [ 231.524139][ T991] usb 4-1: config 0 descriptor?? [ 231.548351][ T7693] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 232.086841][ T7705] virtio-fs: tag not found [ 232.506425][ T5822] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 232.545598][ T991] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ba:09:eb:70:62:b7 [ 232.580244][ T5822] usb 1-1: device descriptor read/8, error -71 [ 232.620131][ T7710] 0x000000000007-0x000000020000 : "" [ 232.645429][ T7710] ftl_cs: FTL header corrupt! [ 232.965669][ T5822] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 233.180922][ T5822] usb 1-1: device descriptor read/8, error -71 [ 233.402077][ T7693] netlink: 'syz.3.473': attribute type 4 has an invalid length. [ 233.425545][ T5822] usb usb1-port1: unable to enumerate USB device [ 234.032363][ T121] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 234.166908][ T5705] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 234.230520][ T121] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.253425][ T121] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 234.284694][ T121] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 234.300187][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.316706][ T121] usb 3-1: Product: syz [ 234.325811][ T121] usb 3-1: Manufacturer: syz [ 234.336970][ T121] usb 3-1: SerialNumber: syz [ 234.337565][ T29] audit: type=1400 audit(1786471793.170:500): avc: denied { write } for pid=7721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.359811][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.402644][ T5705] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 234.425710][ T5705] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 234.435889][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.459873][ T5705] usb 5-1: Product: syz [ 234.464115][ T5705] usb 5-1: Manufacturer: syz [ 234.468734][ T5705] usb 5-1: SerialNumber: syz [ 234.528422][ T29] audit: type=1400 audit(1786471793.358:501): avc: denied { write } for pid=7736 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.155695][ T5822] usb 4-1: USB disconnect, device number 18 [ 235.246502][ T5822] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 235.569660][ T29] audit: type=1400 audit(1786471794.388:502): avc: denied { module_request } for pid=7748 comm="syz.0.481" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 235.615091][ C0] usb 3-1: received EP1 urb->status = -71 [ 235.654163][ T121] snd-usb-caiaq 3-1:1.0: unable to initialize device, too many streams. [ 235.683111][ T121] snd-usb-caiaq 3-1:1.0: Unable to set up audio system (ret=-22) [ 235.701622][ T29] audit: type=1400 audit(1786471794.517:503): avc: denied { write } for pid=7743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.705296][ T121] usb 3-1: unable to init card! (ret=-22) [ 235.788763][ T7751] syzkaller0: entered promiscuous mode [ 235.790876][ T121] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 235.814519][ C0] usb 5-1: received EP1 urb->status = -71 [ 235.825899][ T5705] snd-usb-caiaq 5-1:1.0: unable to initialize device, too many streams. [ 235.834577][ T7751] syzkaller0: entered allmulticast mode [ 235.840451][ T5705] snd-usb-caiaq 5-1:1.0: Unable to set up audio system (ret=-22) [ 235.848531][ T5705] usb 5-1: unable to init card! (ret=-22) [ 235.860314][ T29] audit: type=1400 audit(1786471794.676:504): avc: denied { write } for pid=7766 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.866827][ T121] usb 3-1: USB disconnect, device number 25 [ 235.887896][ T5705] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 235.911134][ T5705] usb 5-1: USB disconnect, device number 15 [ 235.932131][ T29] audit: type=1400 audit(1786471794.745:505): avc: denied { write } for pid=7767 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.019639][ T29] audit: type=1400 audit(1786471794.834:506): avc: denied { bind } for pid=7748 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.121577][ T29] audit: type=1400 audit(1786471794.933:507): avc: denied { append } for pid=7772 comm="syz.1.483" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 236.204245][ T29] audit: type=1400 audit(1786471794.973:508): avc: denied { ioctl } for pid=7772 comm="syz.1.483" path="socket:[18530]" dev="sockfs" ino=18530 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.311408][ T29] audit: type=1400 audit(1786471794.983:509): avc: denied { bind } for pid=7772 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.320810][ T7796] virtio-fs: tag not found [ 240.632661][ T7791] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 240.639401][ T7791] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 240.649682][ T7791] vhci_hcd vhci_hcd.0: Device attached [ 240.677492][ T7791] netlink: 88 bytes leftover after parsing attributes in process `syz.0.488'. [ 240.721923][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 240.821210][ T5822] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 240.821842][ T29] audit: type=1400 audit(1786471799.597:510): avc: denied { watch } for pid=7790 comm="syz.0.488" path="/96" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 240.881894][ T5822] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 241.123265][ T7821] netlink: 64 bytes leftover after parsing attributes in process `syz.2.494'. [ 241.167314][ T7801] vhci_hcd: connection reset by peer [ 241.178146][ T7828] syzkaller1: entered promiscuous mode [ 241.180071][ T35] vhci_hcd vhci_hcd.0: stop threads [ 241.215626][ T35] vhci_hcd vhci_hcd.0: release socket [ 241.234119][ T7828] syzkaller1: entered allmulticast mode [ 241.242601][ T35] vhci_hcd vhci_hcd.0: disconnect device [ 241.306448][ T29] audit: type=1400 audit(1786471800.084:511): avc: denied { write } for pid=7803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.505595][ T5733] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 241.524378][ T29] audit: type=1400 audit(1786471800.293:512): avc: denied { write } for pid=7831 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.707669][ T5733] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.730378][ T5733] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 241.766992][ T5733] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.792484][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.827559][ T5733] usb 3-1: Product: syz [ 241.831817][ T5733] usb 3-1: Manufacturer: syz [ 241.845971][ T5733] usb 3-1: SerialNumber: syz [ 241.945684][ T5733] cdc_mbim 3-1:1.0: skipping garbage [ 242.051547][ T7845] FAULT_INJECTION: forcing a failure. [ 242.051547][ T7845] name failslab, interval 1, probability 0, space 0, times 0 [ 242.064819][ T7845] CPU: 0 UID: 0 PID: 7845 Comm: syz.4.491 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.064849][ T7845] Tainted: [L]=SOFTLOCKUP [ 242.064855][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.064865][ T7845] Call Trace: [ 242.064871][ T7845] [ 242.064878][ T7845] dump_stack_lvl+0x100/0x190 [ 242.064906][ T7845] should_fail_ex.cold+0x5/0xa [ 242.064928][ T7845] should_failslab+0xc2/0x120 [ 242.064952][ T7845] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 242.064983][ T7845] ? sidtab_sid2str_get+0x17a/0x670 [ 242.065007][ T7845] kmemdup_noprof+0x29/0x60 [ 242.065027][ T7845] sidtab_sid2str_get+0x17a/0x670 [ 242.065048][ T7845] security_sid_to_context_core+0x35a/0x6d0 [ 242.065077][ T7845] ? avc_audit_post_callback+0x115/0x910 [ 242.065099][ T7845] avc_audit_post_callback+0x1aa/0x910 [ 242.065119][ T7845] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 242.065140][ T7845] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 242.065159][ T7845] ? skb_put+0x138/0x180 [ 242.065185][ T7845] ? audit_log_n_string+0x2a3/0x5a0 [ 242.065211][ T7845] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 242.065230][ T7845] common_lsm_audit+0x23f/0x2b0 [ 242.065250][ T7845] ? __pfx_common_lsm_audit+0x10/0x10 [ 242.065269][ T7845] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 242.065294][ T7845] slow_avc_audit+0x186/0x210 [ 242.065314][ T7845] ? __pfx_slow_avc_audit+0x10/0x10 [ 242.065338][ T7845] ? avc_denied+0x14a/0x190 [ 242.065360][ T7845] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 242.065385][ T7845] avc_has_perm+0x1a6/0x1e0 [ 242.065407][ T7845] ? __pfx_avc_has_perm+0x10/0x10 [ 242.065437][ T7845] inode_has_perm+0x166/0x1d0 [ 242.065460][ T7845] __file_has_perm+0x39c/0x460 [ 242.065486][ T7845] ? __pfx___file_has_perm+0x10/0x10 [ 242.065515][ T7845] ? find_held_lock+0x2b/0x80 [ 242.065535][ T7845] selinux_file_permission+0x4ac/0x6d0 [ 242.065566][ T7845] security_file_permission+0x91/0x210 [ 242.065584][ T7845] rw_verify_area+0xb8/0x6d0 [ 242.065611][ T7845] do_sendfile+0xaaa/0xe20 [ 242.065642][ T7845] ? __pfx_do_sendfile+0x10/0x10 [ 242.065666][ T7845] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.065690][ T7845] ? __fget_files+0x21f/0x3d0 [ 242.065715][ T7845] __x64_sys_sendfile64+0x1d8/0x220 [ 242.065733][ T7845] ? ksys_write+0x1ac/0x250 [ 242.065749][ T7845] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 242.065777][ T7845] do_syscall_64+0x115/0x870 [ 242.065799][ T7845] ? clear_bhb_loop+0x40/0x90 [ 242.065821][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.065840][ T7845] RIP: 0033:0x7fe52999e0d9 [ 242.065854][ T7845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.065870][ T7845] RSP: 002b:00007fe52a7f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 242.065888][ T7845] RAX: ffffffffffffffda RBX: 00007fe529c26180 RCX: 00007fe52999e0d9 [ 242.065899][ T7845] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 242.065909][ T7845] RBP: 00007fe52a7f4090 R08: 0000000000000000 R09: 0000000000000000 [ 242.065919][ T7845] R10: 000000008000fb00 R11: 0000000000000246 R12: 0000000000000001 [ 242.065929][ T7845] R13: 00007fe529c26218 R14: 00007fe529c26180 R15: 00007ffc82e36308 [ 242.065954][ T7845] [ 242.387346][ T29] audit: type=1400 audit(1786471800.829:513): avc: denied { write } for pid=7839 comm="syz.4.491" path="socket:[18675]" dev="sockfs" ino=18675 scontext=root:sysadm_r:sysadm_t tsid=148 tclass=kcm_socket permissive=1 [ 242.417246][ T7821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.443990][ T7838] 0x000000000007-0x000000020000 : "" [ 242.471036][ T7838] ftl_cs: FTL header corrupt! [ 242.523069][ T7846] netlink: 'syz.0.495': attribute type 4 has an invalid length. [ 243.242968][ T29] audit: type=1400 audit(1786471802.002:514): avc: denied { write } for pid=7833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.298369][ T5733] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 243.312824][ T5733] cdc_mbim 3-1:1.0: bind() failure [ 243.321684][ T5733] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 243.347146][ T121] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 243.365589][ T5733] cdc_ncm 3-1:1.1: bind() failure [ 243.405307][ T29] audit: type=1400 audit(1786471802.162:515): avc: denied { write } for pid=7856 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.460378][ T5733] usb 3-1: USB disconnect, device number 26 [ 243.540962][ T121] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.579684][ T121] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 243.613042][ T121] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 243.633035][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.656559][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'. [ 243.668090][ T121] usb 5-1: Product: syz [ 243.678629][ T121] usb 5-1: Manufacturer: syz [ 243.685138][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 243.692796][ T121] usb 5-1: SerialNumber: syz [ 243.713479][ T7859] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 243.762488][ T7859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.954344][ T7870] 0x000000000007-0x000000020000 : "" [ 243.979560][ T7870] ftl_cs: FTL header corrupt! [ 244.038757][ T7871] netlink: 'syz.3.498': attribute type 4 has an invalid length. [ 244.884774][ T5733] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 244.936741][ C0] usb 5-1: received EP1 urb->status = -71 [ 244.983897][ T121] snd-usb-caiaq 5-1:1.0: unable to initialize device, too many streams. [ 244.996048][ T121] snd-usb-caiaq 5-1:1.0: Unable to set up audio system (ret=-22) [ 245.012821][ T121] usb 5-1: unable to init card! (ret=-22) [ 245.019789][ T121] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 245.045356][ T121] usb 5-1: USB disconnect, device number 16 [ 245.050491][ T29] audit: type=1400 audit(1786471803.803:516): avc: denied { write } for pid=7860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.094527][ T5733] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.111180][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 245.120564][ T5733] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 245.133960][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.151258][ T5733] usb 3-1: Product: syz [ 245.179865][ T5733] usb 3-1: Manufacturer: syz [ 245.467117][ T5733] usb 3-1: SerialNumber: syz [ 245.492875][ T29] audit: type=1400 audit(1786471804.241:517): avc: denied { write } for pid=7890 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.541008][ T5733] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 246.293580][ T7898] virtio-fs: tag not found [ 246.650106][ T5733] gspca_mr97310a: reg write [21] error -110 [ 246.961772][ T5733] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 247.014950][ T5822] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 247.346451][ T5706] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 247.538574][ T7912] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 247.878754][ T5733] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 248.060359][ T5733] usb 5-1: Using ep0 maxpacket: 8 [ 248.074187][ T5733] usb 5-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 248.097290][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.121167][ T5733] usb 5-1: Product: syz [ 248.127049][ T5733] usb 5-1: Manufacturer: syz [ 248.141322][ T5733] usb 5-1: SerialNumber: syz [ 248.152090][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 248.164579][ T5706] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 248.183319][ T5706] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 248.194001][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.202213][ T5706] usb 2-1: Product: syz [ 248.208740][ T5706] usb 2-1: Manufacturer: syz [ 248.214828][ T5706] usb 2-1: SerialNumber: syz [ 248.381956][ T7912] netlink: 148 bytes leftover after parsing attributes in process `syz.4.508'. [ 248.454290][ T5706] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 248.508453][ T7912] netlink: 148 bytes leftover after parsing attributes in process `syz.4.508'. [ 248.931585][ T42] usb 3-1: USB disconnect, device number 27 [ 249.322482][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.506'. [ 249.469734][ T5706] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 249.571338][ T5706] usb 2-1: USB disconnect, device number 25 [ 249.578744][ T7928] 0x000000000007-0x000000020000 : "" [ 249.612086][ T7928] ftl_cs: FTL header corrupt! [ 249.623512][ T5733] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 249.711772][ T7932] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 250.600269][ T7933] 0x000000000007-0x000000020000 : "" [ 250.621836][ T7933] ftl_cs: FTL header corrupt! [ 250.696546][ T5733] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 250.829278][ T5733] usb 5-1: unable to issue vendor read request (ret = -71) [ 250.863626][ T5733] usb 5-1: unable to issue vendor read request (ret = -71) [ 250.898644][ T5733] usb 5-1: unable to issue vendor read request (ret = -71) [ 250.930824][ T5733] usb 5-1: unable to issue vendor read request (ret = -71) [ 251.021957][ T5733] usb 5-1: USB disconnect, device number 17 [ 251.069407][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 251.171141][ T5849] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 251.343383][ T5849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.465689][ T5849] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 251.512499][ T5822] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 251.615512][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.669455][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 251.719856][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.910322][ T5822] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 252.066824][ T5822] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 252.139650][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.179831][ T5822] usb 3-1: Product: syz [ 252.200840][ T7950] netlink: 100 bytes leftover after parsing attributes in process `syz.4.516'. [ 252.212972][ T5822] usb 3-1: Manufacturer: syz [ 252.229032][ T5822] usb 3-1: SerialNumber: syz [ 252.393676][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'. [ 252.422929][ T5849] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 252.456209][ T7951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.556752][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.730001][ T5849] wwan wwan0: port wwan0qmi0 attached [ 252.735705][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.778166][ T6217] udevd[6217]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.950246][ T5849] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 86:8a:98:01:f1:48 [ 252.966885][ T121] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 252.988869][ T5849] usb 1-1: USB disconnect, device number 20 [ 253.000835][ T5849] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 253.160515][ T5849] wwan wwan0: port wwan0qmi0 disconnected [ 253.171059][ T121] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 253.194891][ T121] usb 5-1: config 255 has no interface number 0 [ 253.603554][ T121] usb 5-1: config 255 interface 97 has no altsetting 0 [ 253.620620][ T121] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 253.644233][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.666287][ T121] usb 5-1: Product: syz [ 253.678408][ T121] usb 5-1: Manufacturer: syz [ 253.692468][ T121] usb 5-1: SerialNumber: syz [ 253.796302][ C1] usb 3-1: received EP1 urb->status = -71 [ 253.813056][ T5822] snd-usb-caiaq 3-1:1.0: unable to initialize device, too many streams. [ 253.841704][ T5822] snd-usb-caiaq 3-1:1.0: Unable to set up audio system (ret=-22) [ 253.861061][ T5822] usb 3-1: unable to init card! (ret=-22) [ 253.878764][ T5822] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 254.002933][ T5822] usb 3-1: USB disconnect, device number 28 [ 254.217565][ T121] rndis_host 5-1:255.97: ACM capabilities 01, not really RNDIS? [ 254.274288][ T121] usb 5-1: USB disconnect, device number 18 [ 255.191234][ T29] audit: type=1400 audit(1786471813.865:518): avc: denied { write } for pid=7968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.836278][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.858130][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.052775][ T29] audit: type=1400 audit(1786471814.763:519): avc: denied { write } for pid=8003 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.227337][ T29] audit: type=1400 audit(1786471815.940:520): avc: denied { mounton } for pid=8023 comm="syz.2.531" path="/91/file0" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 257.345286][ T8024] FAULT_INJECTION: forcing a failure. [ 257.345286][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 257.367829][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 257.389283][ T8024] CPU: 1 UID: 0 PID: 8024 Comm: syz.2.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.389315][ T8024] Tainted: [L]=SOFTLOCKUP [ 257.389320][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 257.389330][ T8024] Call Trace: [ 257.389336][ T8024] [ 257.389343][ T8024] dump_stack_lvl+0x100/0x190 [ 257.389371][ T8024] should_fail_ex.cold+0x5/0xa [ 257.389395][ T8024] should_failslab+0xc2/0x120 [ 257.389418][ T8024] __kmalloc_noprof+0xfc/0x820 [ 257.389448][ T8024] ? fuse_perform_write+0x2d3/0x1c50 [ 257.389472][ T8024] fuse_perform_write+0x2d3/0x1c50 [ 257.389494][ T8024] ? __pfx_fuse_xattr_get+0x10/0x10 [ 257.389517][ T8024] ? fuse_xattr_get+0x7e/0xb0 [ 257.389544][ T8024] ? __pfx___vfs_getxattr+0x10/0x10 [ 257.389565][ T8024] ? __pfx_fuse_perform_write+0x10/0x10 [ 257.389600][ T8024] ? __pfx_generic_write_checks+0x10/0x10 [ 257.389626][ T8024] ? file_update_time_flags+0x373/0x500 [ 257.389654][ T8024] fuse_file_write_iter+0x3d5/0x960 [ 257.389677][ T8024] vfs_write+0x6ac/0x1050 [ 257.389706][ T8024] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 257.389727][ T8024] ? __pfx_vfs_write+0x10/0x10 [ 257.389769][ T8024] ksys_write+0x12a/0x250 [ 257.389783][ T8024] ? __pfx_ksys_write+0x10/0x10 [ 257.389805][ T8024] do_syscall_64+0x115/0x870 [ 257.389824][ T8024] ? clear_bhb_loop+0x40/0x90 [ 257.389844][ T8024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.389861][ T8024] RIP: 0033:0x7f1918d9e0d9 [ 257.389877][ T8024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.389893][ T8024] RSP: 002b:00007f1919c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.389911][ T8024] RAX: ffffffffffffffda RBX: 00007f1919025fa0 RCX: 00007f1918d9e0d9 [ 257.389922][ T8024] RDX: 00000000000005e6 RSI: 0000000000000000 RDI: 0000000000000003 [ 257.389931][ T8024] RBP: 00007f1919c64090 R08: 0000000000000000 R09: 0000000000000000 [ 257.389940][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.389950][ T8024] R13: 00007f1919026038 R14: 00007f1919025fa0 R15: 00007ffcdf5600d8 [ 257.389973][ T8024] [ 258.055449][ T8045] netlink: 100 bytes leftover after parsing attributes in process `syz.2.535'. [ 258.135681][ T29] audit: type=1400 audit(1786471816.848:521): avc: denied { write } for pid=8028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.248436][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 258.360790][ T5822] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 258.388419][ T8052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.558417][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.624864][ T5822] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 258.778506][ T5706] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 258.779212][ T5822] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 258.912346][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.926323][ T5822] usb 1-1: Product: syz [ 258.930791][ T5822] usb 1-1: Manufacturer: syz [ 258.951936][ T5822] usb 1-1: SerialNumber: syz [ 259.045054][ T5706] usb 3-1: config 255 has an invalid interface number: 97 but max is 0 [ 259.057518][ T29] audit: type=1400 audit(1786471817.766:522): avc: denied { write } for pid=8061 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.098826][ T5706] usb 3-1: config 255 has no interface number 0 [ 259.123466][ T5706] usb 3-1: config 255 interface 97 has no altsetting 0 [ 259.165014][ T5706] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 259.241606][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.276660][ T5706] usb 3-1: Product: syz [ 259.298611][ T5706] usb 3-1: Manufacturer: syz [ 259.365362][ T5706] usb 3-1: SerialNumber: syz [ 259.855732][ T5706] rndis_host 3-1:255.97: ACM capabilities 01, not really RNDIS? [ 259.966916][ C1] usb 1-1: received EP1 urb->status = -71 [ 259.982604][ T5822] snd-usb-caiaq 1-1:1.0: unable to initialize device, too many streams. [ 260.047041][ T5706] usb 3-1: USB disconnect, device number 29 [ 260.391992][ T5822] snd-usb-caiaq 1-1:1.0: Unable to set up audio system (ret=-22) [ 260.400645][ T5822] usb 1-1: unable to init card! (ret=-22) [ 260.407911][ T5822] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 260.422466][ T5822] usb 1-1: USB disconnect, device number 21 [ 260.424220][ T8078] netlink: 100 bytes leftover after parsing attributes in process `syz.3.543'. [ 261.096543][ T5706] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 261.599748][ T8081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.663369][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 261.722343][ T5706] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 261.771912][ T5706] usb 3-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 261.877822][ T5822] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 262.015582][ T5706] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 262.098989][ T5822] usb 4-1: config 255 has an invalid interface number: 97 but max is 0 [ 262.116008][ T5822] usb 4-1: config 255 has no interface number 0 [ 262.122605][ T5706] usb 3-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 262.161029][ T5822] usb 4-1: config 255 interface 97 has no altsetting 0 [ 262.171101][ T5706] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 262.180993][ T5822] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 262.186030][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.201741][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.213650][ T5706] usb 3-1: Product: syz [ 262.246532][ T5822] usb 4-1: Product: syz [ 262.258077][ T5822] usb 4-1: Manufacturer: syz [ 262.266032][ T5822] usb 4-1: SerialNumber: syz [ 262.335682][ T5706] usb 3-1: Manufacturer: syz [ 262.342137][ T5706] usb 3-1: SerialNumber: syz [ 262.352253][ T5706] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 262.364301][ T5706] ti_usb_3410_5052 3-1:2.0: missing endpoints [ 262.622446][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'. [ 262.666886][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 262.716068][ T8118] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 263.543580][ T8118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 263.603424][ T5822] rndis_host 4-1:255.97: ACM capabilities 01, not really RNDIS? [ 263.622430][ T121] usb 3-1: USB disconnect, device number 30 [ 263.643655][ T5822] usb 4-1: USB disconnect, device number 19 [ 263.769178][ T29] audit: type=1400 audit(1786471822.468:523): avc: denied { mount } for pid=8124 comm="syz.0.556" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 263.832857][ T29] audit: type=1400 audit(1786471822.538:524): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 263.900430][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.561'. [ 264.150955][ T5822] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 264.354187][ T5822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.378199][ T5822] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 264.416701][ T5822] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 264.430842][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.449147][ T5822] usb 4-1: Product: syz [ 264.459409][ T5822] usb 4-1: Manufacturer: syz [ 264.477987][ T5822] usb 4-1: SerialNumber: syz [ 265.470985][ T8153] netlink: 100 bytes leftover after parsing attributes in process `syz.2.566'. [ 265.626007][ T8158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.954254][ T121] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 265.970100][ T29] audit: type=1400 audit(1786471824.665:525): avc: denied { write } for pid=8163 comm="syz.4.571" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 266.007831][ T29] audit: type=1400 audit(1786471824.695:526): avc: denied { ioctl } for pid=8162 comm="syz.1.570" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 266.053697][ T29] audit: type=1400 audit(1786471824.705:527): avc: denied { set_context_mgr } for pid=8162 comm="syz.1.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 266.165372][ T121] usb 3-1: config 255 has an invalid interface number: 97 but max is 0 [ 266.183714][ T121] usb 3-1: config 255 has no interface number 0 [ 266.190044][ T121] usb 3-1: config 255 interface 97 has no altsetting 0 [ 266.192583][ C1] usb 4-1: received EP1 urb->status = -71 [ 266.213988][ T5822] snd-usb-caiaq 4-1:1.0: unable to initialize device, too many streams. [ 266.214627][ T121] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 266.254759][ T5822] snd-usb-caiaq 4-1:1.0: Unable to set up audio system (ret=-22) [ 266.261189][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.274638][ T5822] usb 4-1: unable to init card! (ret=-22) [ 266.290900][ T121] usb 3-1: Product: syz [ 266.303207][ T121] usb 3-1: Manufacturer: syz [ 266.303364][ T5822] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 266.320026][ T121] usb 3-1: SerialNumber: syz [ 266.366160][ T5822] usb 4-1: USB disconnect, device number 20 [ 266.775582][ T121] rndis_host 3-1:255.97: ACM capabilities 01, not really RNDIS? [ 266.823623][ T121] usb 3-1: USB disconnect, device number 31 [ 266.824176][ T8171] syzkaller0: entered promiscuous mode [ 266.841492][ T8171] syzkaller0: entered allmulticast mode [ 266.884171][ T8173] lo speed is unknown, defaulting to 1000 [ 267.021786][ T8173] lo speed is unknown, defaulting to 1000 [ 267.051021][ T8173] lo speed is unknown, defaulting to 1000 [ 267.087233][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 267.205117][ T5822] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 267.457663][ T5822] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 267.483938][ T5822] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 267.505118][ T29] audit: type=1400 audit(1786471826.193:528): avc: denied { setopt } for pid=8183 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.529292][ T5822] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 267.568802][ T5822] usb 2-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 267.609799][ T5822] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 267.639860][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.660839][ T5822] usb 2-1: Product: syz [ 267.669684][ T5822] usb 2-1: Manufacturer: syz [ 267.679824][ T5822] usb 2-1: SerialNumber: syz [ 267.693686][ T5822] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 267.719140][ T5822] ti_usb_3410_5052 2-1:2.0: missing endpoints [ 267.832665][ T5822] lo speed is unknown, defaulting to 1000 [ 267.840306][ T8173] infiniband syz2: set active [ 267.853255][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 267.870084][ T8173] infiniband syz2: added lo [ 267.910208][ T8173] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 267.947297][ T8173] infiniband syz2: Couldn't open port 1 [ 267.981196][ T8173] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 268.004985][ T8206] syz_tun: entered allmulticast mode [ 268.011842][ T8173] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 268.032803][ T8202] syz_tun: left allmulticast mode [ 268.046002][ T8173] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 268.207955][ T121] usb 2-1: USB disconnect, device number 26 [ 268.212464][ T8173] RDS/IB: syz2: added [ 268.268382][ T8173] smc: adding ib device syz2 with port count 1 [ 268.275622][ T8173] smc: ib device syz2 port 1 has no pnetid [ 268.289160][ T9] lo speed is unknown, defaulting to 1000 [ 268.307668][ T8173] lo speed is unknown, defaulting to 1000 [ 268.417839][ T5706] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 268.563596][ T8173] lo speed is unknown, defaulting to 1000 [ 268.568475][ T5822] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 268.588040][ T5706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.606672][ T5706] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 268.634614][ T5706] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 268.652135][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.667416][ T5706] usb 4-1: Product: syz [ 268.678889][ T5706] usb 4-1: Manufacturer: syz [ 268.690950][ T5706] usb 4-1: SerialNumber: syz [ 268.723266][ T8217] FAULT_INJECTION: forcing a failure. [ 268.723266][ T8217] name failslab, interval 1, probability 0, space 0, times 0 [ 268.738010][ T8217] CPU: 1 UID: 0 PID: 8217 Comm: syz.2.587 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.738043][ T8217] Tainted: [L]=SOFTLOCKUP [ 268.738048][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 268.738059][ T8217] Call Trace: [ 268.738065][ T8217] [ 268.738072][ T8217] dump_stack_lvl+0x100/0x190 [ 268.738099][ T8217] should_fail_ex.cold+0x5/0xa [ 268.738123][ T8217] should_failslab+0xc2/0x120 [ 268.738147][ T8217] __kmalloc_noprof+0xfc/0x820 [ 268.738167][ T8217] ? rcu_is_watching+0x12/0xc0 [ 268.738192][ T8217] ? tomoyo_realpath_from_path+0xb6/0x690 [ 268.738216][ T8217] tomoyo_realpath_from_path+0xb6/0x690 [ 268.738238][ T8217] tomoyo_path_number_perm+0x23c/0x580 [ 268.738263][ T8217] ? tomoyo_path_number_perm+0x22e/0x580 [ 268.738290][ T8217] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.738341][ T8217] ? find_held_lock+0x2b/0x80 [ 268.738356][ T8217] ? __fget_files+0x215/0x3d0 [ 268.738370][ T8217] ? hook_file_ioctl_common+0x140/0x440 [ 268.738388][ T8217] ? __fget_files+0x215/0x3d0 [ 268.738410][ T8217] ? __fget_files+0x21f/0x3d0 [ 268.738433][ T8217] security_file_ioctl+0xd3/0x230 [ 268.738461][ T8217] __x64_sys_ioctl+0xb7/0x210 [ 268.738488][ T8217] do_syscall_64+0x115/0x870 [ 268.738508][ T8217] ? clear_bhb_loop+0x40/0x90 [ 268.738529][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.738546][ T8217] RIP: 0033:0x7f1918d9e0d9 [ 268.738560][ T8217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.738577][ T8217] RSP: 002b:00007f1919c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.738594][ T8217] RAX: ffffffffffffffda RBX: 00007f1919025fa0 RCX: 00007f1918d9e0d9 [ 268.738606][ T8217] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004 [ 268.738617][ T8217] RBP: 00007f1919c64090 R08: 0000000000000000 R09: 0000000000000000 [ 268.738627][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.738637][ T8217] R13: 00007f1919026038 R14: 00007f1919025fa0 R15: 00007ffcdf5600d8 [ 268.738660][ T8217] [ 268.738871][ T8217] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.909919][ T8173] lo speed is unknown, defaulting to 1000 [ 268.923569][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 268.973717][ T5822] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 268.984716][ T5822] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 269.078947][ T5822] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 269.088302][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.108868][ T5822] usb 1-1: Product: syz [ 269.118981][ T5822] usb 1-1: Manufacturer: syz [ 269.131752][ T5822] usb 1-1: SerialNumber: syz [ 269.462228][ C0] usb 4-1: received EP1 urb->status = -71 [ 269.470062][ T5706] snd-usb-caiaq 4-1:1.0: unable to initialize device, too many streams. [ 269.479328][ T5706] snd-usb-caiaq 4-1:1.0: Unable to set up audio system (ret=-22) [ 269.497774][ T5706] usb 4-1: unable to init card! (ret=-22) [ 269.503807][ T5706] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 269.525990][ T5706] usb 4-1: USB disconnect, device number 21 [ 269.540382][ T5822] usb 1-1: usb_control_msg returned -71 [ 269.548738][ T5822] usbtmc 1-1:1.0: can't read capabilities [ 269.558257][ T5822] usbtmc 1-1:1.0: Failed to submit iin_urb [ 269.573999][ T5822] usbtmc 1-1:1.0: probe with driver usbtmc failed with error -90 [ 269.587038][ T5822] usbtouchscreen 1-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 269.620372][ T5822] usb 1-1: USB disconnect, device number 22 [ 269.669605][ T5849] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 269.677558][ T29] audit: type=1400 audit(1786471828.371:529): avc: denied { mount } for pid=8225 comm="syz.1.591" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 269.678840][ T8226] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 269.702387][ T8173] lo speed is unknown, defaulting to 1000 [ 269.727862][ T29] audit: type=1400 audit(1786471828.411:530): avc: denied { search } for pid=8225 comm="syz.1.591" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 269.754020][ T29] audit: type=1400 audit(1786471828.411:531): avc: denied { read } for pid=8225 comm="syz.1.591" name="trace_pipe" dev="tracefs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 269.780825][ T29] audit: type=1400 audit(1786471828.411:532): avc: denied { open } for pid=8225 comm="syz.1.591" path="/117/debug/tracing/trace_pipe" dev="tracefs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 269.805227][ T29] audit: type=1400 audit(1786471828.441:533): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 269.838366][ T5849] usb 3-1: device descriptor read/64, error -71 [ 269.909475][ T8173] lo speed is unknown, defaulting to 1000 [ 269.924626][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 270.050106][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.593'. [ 270.059398][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 270.072493][ T8232] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 270.078346][ T5849] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 270.098448][ T8232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.156345][ T8232] bond2: (slave geneve2): making interface the new active one [ 270.172365][ T8232] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 270.228704][ T5849] usb 3-1: device descriptor read/64, error -71 [ 270.359311][ T5849] usb usb3-port1: attempt power cycle [ 270.849403][ T5849] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 270.973112][ T5849] usb 3-1: device descriptor read/8, error -71 [ 271.249321][ T5849] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 272.100117][ T8251] lo speed is unknown, defaulting to 1000 [ 272.114836][ T8253] virtio-fs: tag not found [ 272.698892][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 272.708270][ T5849] usb 3-1: device descriptor read/8, error -71 [ 272.875627][ T5849] usb usb3-port1: unable to enumerate USB device [ 273.002006][ T8263] netlink: 100 bytes leftover after parsing attributes in process `syz.2.602'. [ 273.211985][ T8267] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 273.310120][ T8271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.775081][ T5705] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 273.776946][ T8280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.608'. [ 273.808349][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 273.842170][ T8280] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 273.857743][ T8283] netlink: 100 bytes leftover after parsing attributes in process `syz.4.609'. [ 273.941866][ T5849] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 273.957153][ T8280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.962246][ T5705] usb 3-1: config 255 has an invalid interface number: 97 but max is 0 [ 273.976838][ T5705] usb 3-1: config 255 has no interface number 0 [ 273.992058][ T5705] usb 3-1: config 255 interface 97 has no altsetting 0 [ 274.092402][ T5705] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 274.111170][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.130675][ T5849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.149524][ T8287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.197241][ T5705] usb 3-1: Product: syz [ 274.205961][ T5705] usb 3-1: Manufacturer: syz [ 274.210894][ T5705] usb 3-1: SerialNumber: syz [ 274.218850][ T8281] bond1: (slave geneve2): making interface the new active one [ 274.363445][ T5849] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 274.394501][ T8281] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 274.414879][ T5849] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 274.431622][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.452814][ T5849] usb 1-1: Product: syz [ 274.465588][ T5849] usb 1-1: Manufacturer: syz [ 274.482110][ T5849] usb 1-1: SerialNumber: syz [ 274.567347][ T8290] rdma_rxe: rxe_newlink: failed to add lo [ 274.602565][ T5706] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 274.775667][ T5706] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 274.786146][ T5706] usb 5-1: config 255 has no interface number 0 [ 274.794234][ T5706] usb 5-1: config 255 interface 97 has no altsetting 0 [ 274.821361][ T5706] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 274.831691][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.839965][ T5706] usb 5-1: Product: syz [ 274.844502][ T5706] usb 5-1: Manufacturer: syz [ 274.849799][ T5706] usb 5-1: SerialNumber: syz [ 275.152553][ T5733] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 275.239181][ C1] usb 1-1: received EP1 urb->status = -71 [ 275.247361][ T5849] snd-usb-caiaq 1-1:1.0: unable to initialize device, too many streams. [ 275.264065][ T5849] snd-usb-caiaq 1-1:1.0: Unable to set up audio system (ret=-22) [ 275.281434][ T5849] usb 1-1: unable to init card! (ret=-22) [ 275.295134][ T5849] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 275.311013][ T5849] usb 1-1: USB disconnect, device number 23 [ 275.334089][ T5733] usb 2-1: device descriptor read/64, error -71 [ 275.506551][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 275.572858][ T5733] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 275.723204][ T5733] usb 2-1: device descriptor read/64, error -71 [ 275.829735][ T29] audit: type=1400 audit(1786471834.515:534): avc: denied { read } for pid=8307 comm="syz.3.614" name="subsystems" dev="configfs" ino=3359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.857529][ T5733] usb usb2-port1: attempt power cycle [ 275.874998][ T29] audit: type=1400 audit(1786471834.515:535): avc: denied { read open } for pid=8307 comm="syz.3.614" path="/128/config/nvmet/subsystems" dev="configfs" ino=3359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.901784][ T29] audit: type=1400 audit(1786471834.545:536): avc: denied { write } for pid=8307 comm="syz.3.614" name="subsystems" dev="configfs" ino=3359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.997030][ T5705] rndis_host 3-1:255.97: ACM capabilities 01, not really RNDIS? [ 276.045797][ T5705] usb 3-1: USB disconnect, device number 36 [ 276.203292][ T5733] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 276.338273][ T8318] lo speed is unknown, defaulting to 1000 [ 276.767369][ T29] audit: type=1400 audit(1786471834.955:537): avc: denied { accept } for pid=8310 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 276.806067][ T5733] usb 2-1: device descriptor read/8, error -71 [ 276.942536][ T29] audit: type=1400 audit(1786471834.965:538): avc: denied { create } for pid=8310 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 277.032240][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.618'. [ 277.090754][ T5733] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 277.119211][ T29] audit: type=1400 audit(1786471834.965:539): avc: denied { sys_admin } for pid=8310 comm="syz.0.616" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 277.208560][ T5706] rndis_host 5-1:255.97: ACM capabilities 01, not really RNDIS? [ 277.223623][ T5733] usb 2-1: device descriptor read/8, error -71 [ 277.285790][ T5706] usb 5-1: USB disconnect, device number 19 [ 277.302729][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.621'. [ 277.362391][ T8331] netlink: 'syz.2.621': attribute type 1 has an invalid length. [ 277.391971][ T5733] usb usb2-port1: unable to enumerate USB device [ 277.398475][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 277.502667][ T8331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.830225][ T29] audit: type=1400 audit(1786471836.514:540): avc: denied { read write } for pid=8343 comm="syz.2.625" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 277.909836][ T29] audit: type=1400 audit(1786471836.514:541): avc: denied { open } for pid=8343 comm="syz.2.625" path="/104/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 277.995807][ T29] audit: type=1400 audit(1786471836.514:542): avc: denied { ioctl } for pid=8343 comm="syz.2.625" path="/104/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 278.094053][ T29] audit: type=1400 audit(1786471836.574:543): avc: denied { map } for pid=8346 comm="syz.4.626" path="socket:[22561]" dev="sockfs" ino=22561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 278.201547][ T8353] FAULT_INJECTION: forcing a failure. [ 278.201547][ T8353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.231012][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.1.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.231042][ T8353] Tainted: [L]=SOFTLOCKUP [ 278.231049][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 278.231059][ T8353] Call Trace: [ 278.231065][ T8353] [ 278.231072][ T8353] dump_stack_lvl+0x100/0x190 [ 278.231099][ T8353] should_fail_ex.cold+0x5/0xa [ 278.231121][ T8353] _copy_from_iter+0x1f4/0x1690 [ 278.231152][ T8353] ? __pfx__copy_from_iter+0x10/0x10 [ 278.231176][ T8353] ? find_held_lock+0x2b/0x80 [ 278.231190][ T8353] ? dev_get_by_index+0x180/0x380 [ 278.231210][ T8353] ? dev_get_by_index+0x180/0x380 [ 278.231236][ T8353] packet_sendmsg+0x1bb3/0x5100 [ 278.231259][ T8353] ? avc_has_perm_noaudit+0x2ea/0x3b0 [ 278.231282][ T8353] ? __pfx___schedule+0x10/0x10 [ 278.231307][ T8353] ? sock_has_perm+0x25a/0x2f0 [ 278.231330][ T8353] ? __pfx_sock_has_perm+0x10/0x10 [ 278.231359][ T8353] ? __pfx_packet_sendmsg+0x10/0x10 [ 278.231387][ T8353] ? selinux_socket_sendmsg+0x198/0x2f0 [ 278.231416][ T8353] ____sys_sendmsg+0xa4d/0xbe0 [ 278.231443][ T8353] ? __pfx_packet_sendmsg+0x10/0x10 [ 278.231473][ T8353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.231502][ T8353] ? rcu_is_watching+0x12/0xc0 [ 278.231531][ T8353] ___sys_sendmsg+0x190/0x1e0 [ 278.231550][ T8353] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.231565][ T8353] ? find_held_lock+0x2b/0x80 [ 278.231578][ T8353] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 278.231609][ T8353] ? __rcu_read_unlock+0x26a/0x5e0 [ 278.231646][ T8353] __sys_sendmsg+0x160/0x210 [ 278.231669][ T8353] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.231696][ T8353] ? trace_hardirqs_off+0x70/0x170 [ 278.231724][ T8353] do_syscall_64+0x115/0x870 [ 278.231743][ T8353] ? clear_bhb_loop+0x40/0x90 [ 278.231764][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.231782][ T8353] RIP: 0033:0x7f8b8159e0d9 [ 278.231798][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.231814][ T8353] RSP: 002b:00007f8b82399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.231832][ T8353] RAX: ffffffffffffffda RBX: 00007f8b81825fa0 RCX: 00007f8b8159e0d9 [ 278.231843][ T8353] RDX: 000000000400c0c8 RSI: 00002000000000c0 RDI: 0000000000000003 [ 278.231853][ T8353] RBP: 00007f8b82399090 R08: 0000000000000000 R09: 0000000000000000 [ 278.231863][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.231873][ T8353] R13: 00007f8b81826038 R14: 00007f8b81825fa0 R15: 00007ffe6199f168 [ 278.231896][ T8353] [ 278.504758][ T8355] netlink: 100 bytes leftover after parsing attributes in process `syz.3.628'. [ 278.626427][ T8357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.924949][ T5705] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 279.090610][ T5705] usb 4-1: config 255 has an invalid interface number: 97 but max is 0 [ 279.144194][ T5705] usb 4-1: config 255 has no interface number 0 [ 279.164539][ T5705] usb 4-1: config 255 interface 97 has no altsetting 0 [ 279.193237][ T5705] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 279.214555][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.280328][ T5705] usb 4-1: Product: syz [ 279.302490][ T5705] usb 4-1: Manufacturer: syz [ 279.332530][ T5705] usb 4-1: SerialNumber: syz [ 280.778908][ T8377] virtio-fs: tag not found [ 280.856609][ T8375] lo speed is unknown, defaulting to 1000 [ 281.271642][ T5705] rndis_host 4-1:255.97: ACM capabilities 01, not really RNDIS? [ 281.342810][ T5705] usb 4-1: USB disconnect, device number 22 [ 282.741060][ T8388] pim6reg: entered allmulticast mode [ 282.881184][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 282.881195][ T29] audit: type=1400 audit(1786471841.561:545): avc: denied { getopt } for pid=8391 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 283.042078][ T8386] pim6reg: left allmulticast mode [ 283.120744][ T8388] 9pnet_virtio: no channels available for device syz [ 283.167136][ T5705] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 283.224118][ T8405] FAULT_INJECTION: forcing a failure. [ 283.224118][ T8405] name failslab, interval 1, probability 0, space 0, times 0 [ 283.242612][ T8405] CPU: 0 UID: 0 PID: 8405 Comm: syz.2.642 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.242645][ T8405] Tainted: [L]=SOFTLOCKUP [ 283.242652][ T8405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 283.242662][ T8405] Call Trace: [ 283.242670][ T8405] [ 283.242678][ T8405] dump_stack_lvl+0x100/0x190 [ 283.242707][ T8405] should_fail_ex.cold+0x5/0xa [ 283.242730][ T8405] should_failslab+0xc2/0x120 [ 283.242755][ T8405] __kmalloc_cache_noprof+0x91/0x6c0 [ 283.242784][ T8405] ? rcu_is_watching+0x12/0xc0 [ 283.242811][ T8405] ? vhost_task_create+0xee/0x370 [ 283.242833][ T8405] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 283.242864][ T8405] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 283.242887][ T8405] vhost_task_create+0xee/0x370 [ 283.242908][ T8405] ? __pfx_vhost_task_create+0x10/0x10 [ 283.242949][ T8405] ? __pfx_vhost_task_fn+0x10/0x10 [ 283.242974][ T8405] ? __pfx___mutex_lock+0x10/0x10 [ 283.242997][ T8405] ? kasan_quarantine_put+0x104/0x240 [ 283.243024][ T8405] kvm_mmu_post_init_vm+0x1b3/0x360 [ 283.243052][ T8405] kvm_arch_vcpu_ioctl_run+0x66/0x1960 [ 283.243079][ T8405] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 283.243104][ T8405] kvm_vcpu_ioctl+0x730/0x1700 [ 283.243127][ T8405] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.243148][ T8405] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.243172][ T8405] ? do_vfs_ioctl+0x226/0x13e0 [ 283.243199][ T8405] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 283.243233][ T8405] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 283.243270][ T8405] ? __fget_files+0x215/0x3d0 [ 283.243287][ T8405] ? hook_file_ioctl_common+0x140/0x440 [ 283.243315][ T8405] ? selinux_file_ioctl+0x13b/0x290 [ 283.243342][ T8405] ? selinux_file_ioctl+0xb6/0x290 [ 283.243369][ T8405] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 283.243391][ T8405] __x64_sys_ioctl+0x18e/0x210 [ 283.243419][ T8405] do_syscall_64+0x115/0x870 [ 283.243440][ T8405] ? clear_bhb_loop+0x40/0x90 [ 283.243463][ T8405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.243482][ T8405] RIP: 0033:0x7f1918d9e0d9 [ 283.243499][ T8405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.243516][ T8405] RSP: 002b:00007f1919c64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.243534][ T8405] RAX: ffffffffffffffda RBX: 00007f1919025fa0 RCX: 00007f1918d9e0d9 [ 283.243545][ T8405] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 283.243556][ T8405] RBP: 00007f1919c64090 R08: 0000000000000000 R09: 0000000000000000 [ 283.243566][ T8405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.243576][ T8405] R13: 00007f1919026038 R14: 00007f1919025fa0 R15: 00007ffcdf5600d8 [ 283.243601][ T8405] [ 283.652027][ T5705] usb 4-1: Invalid ep0 maxpacket: 64 [ 283.706478][ T29] audit: type=1400 audit(1786471842.381:546): avc: denied { mounton } for pid=8383 comm="syz.1.638" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 283.787460][ T5705] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 283.948306][ T5705] usb 4-1: Invalid ep0 maxpacket: 64 [ 283.956426][ T5705] usb usb4-port1: attempt power cycle [ 284.246613][ T8416] netlink: 100 bytes leftover after parsing attributes in process `syz.4.645'. [ 284.403128][ T5705] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 284.472221][ T5705] usb 4-1: Invalid ep0 maxpacket: 64 [ 284.655198][ T8419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.677684][ T5705] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 284.700050][ T5705] usb 4-1: Invalid ep0 maxpacket: 64 [ 284.705709][ T5705] usb usb4-port1: unable to enumerate USB device [ 284.736373][ T8426] geneve3: entered promiscuous mode [ 284.753237][ T8427] netlink: 332 bytes leftover after parsing attributes in process `syz.0.646'. [ 284.769788][ T8426] geneve3: entered allmulticast mode [ 284.840803][ T29] audit: type=1400 audit(1786471843.511:547): avc: denied { firmware_load } for pid=8417 comm="syz.0.646" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 284.938375][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 284.986307][ T8422] syz.0.646 (8422) used greatest stack depth: 19768 bytes left [ 285.040137][ T8434] netlink: 124 bytes leftover after parsing attributes in process `syz.1.650'. [ 285.086708][ T8435] syz.2.649 uses obsolete (PF_INET,SOCK_PACKET) [ 285.129259][ T24] usb 5-1: config 255 has an invalid interface number: 97 but max is 0 [ 285.288094][ T5705] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 285.308150][ T121] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 285.455044][ T5705] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 285.465181][ T5705] usb 2-1: config 0 has no interface number 0 [ 285.473029][ T5705] usb 2-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 285.492011][ T121] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.502564][ T5705] usb 2-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 285.522771][ T121] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 285.533768][ T5705] usb 2-1: config 0 interface 49 has no altsetting 0 [ 285.549076][ T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.570637][ T5705] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 285.592300][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.608484][ T121] usb 1-1: config 0 descriptor?? [ 285.642685][ T5705] usb 2-1: Product: syz [ 285.678762][ T5705] usb 2-1: Manufacturer: syz [ 285.745179][ T5705] usb 2-1: SerialNumber: syz [ 285.903728][ T5705] usb 2-1: config 0 descriptor?? [ 286.293766][ T24] usb 5-1: config 255 has no interface number 0 [ 286.300928][ T24] usb 5-1: config 255 interface 97 has no altsetting 0 [ 286.312362][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 286.321596][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.325516][ T5705] usb 2-1: USB disconnect, device number 31 [ 286.329620][ T24] usb 5-1: Product: syz [ 286.329640][ T24] usb 5-1: Manufacturer: syz [ 286.329654][ T24] usb 5-1: SerialNumber: syz [ 286.362799][ T121] ath6kl: Failed to read usb control message: -71 [ 286.386756][ T121] ath6kl: Unable to read the bmi data from the device: -71 [ 286.401808][ T121] ath6kl: Unable to recv target info: -71 [ 286.428729][ T121] ath6kl: Failed to init ath6kl core: -71 [ 286.434771][ T121] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 286.511665][ T121] usb 1-1: USB disconnect, device number 24 [ 286.589151][ T8443] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 286.661110][ T8447] netlink: 100 bytes leftover after parsing attributes in process `syz.2.654'. [ 286.843493][ T8450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.217149][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'. [ 287.235405][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 287.253496][ T8453] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 287.301964][ T8453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.328825][ T121] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 287.344781][ T8458] netlink: 64 bytes leftover after parsing attributes in process `syz.0.657'. [ 287.379894][ T8458] syzkaller1: entered promiscuous mode [ 287.385624][ T8458] syzkaller1: entered allmulticast mode [ 287.548298][ T121] usb 3-1: config 255 has an invalid interface number: 97 but max is 0 [ 287.610980][ T121] usb 3-1: config 255 has no interface number 0 [ 287.617510][ T121] usb 3-1: config 255 interface 97 has no altsetting 0 [ 287.623849][ T24] rndis_host 5-1:255.97: ACM capabilities 01, not really RNDIS? [ 287.628732][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 287.678411][ T24] usb 5-1: USB disconnect, device number 20 [ 287.737900][ T121] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 287.747390][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.756025][ T121] usb 3-1: Product: syz [ 287.763373][ T121] usb 3-1: Manufacturer: syz [ 287.772890][ T121] usb 3-1: SerialNumber: syz [ 287.791895][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.803375][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 287.827891][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.839846][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.848227][ T10] usb 1-1: Product: syz [ 287.852779][ T10] usb 1-1: Manufacturer: syz [ 287.857550][ T10] usb 1-1: SerialNumber: syz [ 287.877168][ T10] cdc_mbim 1-1:1.0: skipping garbage [ 288.200004][ T8458] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 288.404848][ T29] audit: type=1400 audit(1786471846.999:548): avc: denied { bind } for pid=8473 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.703435][ T10] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 288.710472][ T10] cdc_mbim 1-1:1.0: bind() failure [ 288.723140][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 288.731750][ T10] cdc_ncm 1-1:1.1: bind() failure [ 288.750418][ T10] usb 1-1: USB disconnect, device number 25 [ 289.052095][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.664'. [ 290.020435][ T121] rndis_host 3-1:255.97: ACM capabilities 01, not really RNDIS? [ 290.098703][ T8494] FAULT_INJECTION: forcing a failure. [ 290.098703][ T8494] name failslab, interval 1, probability 0, space 0, times 9 [ 290.220904][ T8494] CPU: 0 UID: 0 PID: 8494 Comm: syz.3.668 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.220935][ T8494] Tainted: [L]=SOFTLOCKUP [ 290.220941][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 290.220952][ T8494] Call Trace: [ 290.220958][ T8494] [ 290.220965][ T8494] dump_stack_lvl+0x100/0x190 [ 290.220993][ T8494] should_fail_ex.cold+0x5/0xa [ 290.221016][ T8494] should_failslab+0xc2/0x120 [ 290.221040][ T8494] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 290.221063][ T8494] ? __alloc_skb+0x5b7/0x710 [ 290.221084][ T8494] ? __alloc_skb+0x140/0x710 [ 290.221110][ T8494] __alloc_skb+0x140/0x710 [ 290.221129][ T8494] ? __alloc_skb+0x5b7/0x710 [ 290.221157][ T8494] ? __pfx___alloc_skb+0x10/0x10 [ 290.221179][ T8494] ? irqentry_exit+0x24d/0xa00 [ 290.221206][ T8494] alloc_skb_with_frags+0xdd/0x760 [ 290.221239][ T8494] sock_alloc_send_pskb+0x801/0x980 [ 290.221261][ T8494] ? _copy_from_iter+0x270/0x1690 [ 290.221295][ T8494] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 290.221317][ T8494] ? find_held_lock+0x2b/0x80 [ 290.221334][ T8494] ? dev_get_by_index+0x180/0x380 [ 290.221356][ T8494] ? dev_get_by_index+0x180/0x380 [ 290.221385][ T8494] packet_sendmsg+0x1eda/0x5100 [ 290.221409][ T8494] ? avc_has_perm_noaudit+0x2ea/0x3b0 [ 290.221435][ T8494] ? security_inode_mknod+0x1f0/0x2b0 [ 290.221466][ T8494] ? sock_has_perm+0x25a/0x2f0 [ 290.221491][ T8494] ? __pfx_sock_has_perm+0x10/0x10 [ 290.221521][ T8494] ? __pfx_packet_sendmsg+0x10/0x10 [ 290.221542][ T8494] ? __might_fault+0xc5/0x140 [ 290.221567][ T8494] ? selinux_socket_sendmsg+0x198/0x2f0 [ 290.221597][ T8494] __sys_sendto+0x48b/0x4e0 [ 290.221617][ T8494] ? __pfx_packet_sendmsg+0x10/0x10 [ 290.221640][ T8494] ? __pfx___sys_sendto+0x10/0x10 [ 290.221659][ T8494] ? trace_sched_exit_tp+0x120/0x160 [ 290.221704][ T8494] ? __pfx___schedule+0x10/0x10 [ 290.221722][ T8494] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 290.221747][ T8494] __x64_sys_sendto+0xe0/0x1c0 [ 290.221768][ T8494] ? do_syscall_64+0x90/0x870 [ 290.221789][ T8494] ? lockdep_hardirqs_on+0x78/0x100 [ 290.221811][ T8494] do_syscall_64+0x115/0x870 [ 290.221831][ T8494] ? clear_bhb_loop+0x40/0x90 [ 290.221853][ T8494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.221871][ T8494] RIP: 0033:0x7fa627b9e0d9 [ 290.221886][ T8494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.221902][ T8494] RSP: 002b:00007fa628b20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 290.221920][ T8494] RAX: ffffffffffffffda RBX: 00007fa627e25fa0 RCX: 00007fa627b9e0d9 [ 290.221932][ T8494] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000003 [ 290.221942][ T8494] RBP: 00007fa628b20090 R08: 0000200000000540 R09: 0000000000000014 [ 290.221953][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.221964][ T8494] R13: 00007fa627e26038 R14: 00007fa627e25fa0 R15: 00007ffc90be4b58 [ 290.221988][ T8494] [ 290.906733][ T121] usb 3-1: USB disconnect, device number 37 [ 291.037680][ T8501] 0x000000000007-0x000000020000 : "" [ 291.077780][ T8501] ftl_cs: FTL header corrupt! [ 291.125728][ T8502] netlink: 'syz.3.671': attribute type 4 has an invalid length. [ 291.740776][ T121] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 292.014828][ T121] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 292.069658][ T121] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 292.104924][ T121] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 292.127519][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.144516][ T121] usb 1-1: Product: syz [ 292.157569][ T121] usb 1-1: Manufacturer: syz [ 292.162959][ T121] usb 1-1: SerialNumber: syz [ 292.217174][ T29] audit: type=1400 audit(1786471850.898:549): avc: denied { write } for pid=8517 comm="syz.1.674" name="target" dev="configfs" ino=3362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.262897][ T29] audit: type=1400 audit(1786471850.928:550): avc: denied { create } for pid=8517 comm="syz.1.674" name="usb_gadget" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 292.306358][ T29] audit: type=1400 audit(1786471850.938:551): avc: denied { write } for pid=8517 comm="syz.1.674" name="usb_gadget" dev="configfs" ino=22479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.354513][ T29] audit: type=1400 audit(1786471850.988:552): avc: denied { write } for pid=8517 comm="syz.1.674" name="naa.6001405123456789" dev="configfs" ino=22483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.383146][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.675'. [ 292.403929][ T8521] input: syz0 as /devices/virtual/input/input9 [ 292.406106][ T121] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 292.451183][ T29] audit: type=1400 audit(1786471851.128:553): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=3329 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.510182][ T29] audit: type=1400 audit(1786471851.128:554): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3329 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.554229][ T29] audit: type=1400 audit(1786471851.128:555): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3329 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.621801][ T29] audit: type=1400 audit(1786471851.308:556): avc: denied { read write } for pid=8497 comm="syz.0.669" name="lp0" dev="devtmpfs" ino=3328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 292.680533][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.690476][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.699043][ T29] audit: type=1400 audit(1786471851.328:557): avc: denied { open } for pid=8497 comm="syz.0.669" path="/dev/usb/lp0" dev="devtmpfs" ino=3328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 292.781140][ T24] usb 1-1: USB disconnect, device number 26 [ 292.821299][ T24] usblp0: removed [ 293.951761][ T29] audit: type=1400 audit(1786471852.628:558): avc: denied { create } for pid=8528 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 293.973302][ T29] audit: type=1400 audit(1786471852.658:559): avc: denied { setopt } for pid=8528 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 293.993943][ T29] audit: type=1400 audit(1786471852.668:560): avc: denied { write } for pid=8528 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 294.013471][ T29] audit: type=1400 audit(1786471852.678:561): avc: denied { accept } for pid=8528 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 294.194400][ T29] audit: type=1400 audit(1786471852.878:562): avc: denied { create } for pid=8546 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 294.221577][ T8549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.685'. [ 294.256884][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 294.267764][ T29] audit: type=1400 audit(1786471852.918:563): avc: denied { connect } for pid=8546 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 294.305121][ T8549] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 294.381457][ T8555] 0x000000000007-0x000000020000 : "" [ 294.402328][ T8555] ftl_cs: FTL header corrupt! [ 294.411225][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 294.451225][ T8556] netlink: 'syz.2.686': attribute type 4 has an invalid length. [ 294.691136][ T8549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.732553][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 294.810966][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.969412][ T24] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 295.074197][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.128621][ T24] usb 1-1: Product: syz [ 295.148122][ T24] usb 1-1: Manufacturer: syz [ 295.171131][ T8560] 0x000000000007-0x000000020000 : "" [ 295.180206][ T24] usb 1-1: SerialNumber: syz [ 295.190221][ T8560] ftl_cs: FTL header corrupt! [ 295.251466][ T8560] netlink: 'syz.1.687': attribute type 4 has an invalid length. [ 295.276874][ T24] usb 1-1: config 0 descriptor?? [ 295.281547][ T29] audit: type=1400 audit(1786471853.968:564): avc: denied { read } for pid=8563 comm="syz.4.688" name="control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 295.320553][ T24] cdc_ether 1-1:0.0: missing cdc header descriptor [ 295.365751][ T24] usb 1-1: unsupported MDLM descriptors [ 295.385441][ T8565] fuse: Unknown parameter 'fuse' [ 295.393276][ T29] audit: type=1400 audit(1786471853.998:565): avc: denied { open } for pid=8563 comm="syz.4.688" path="/151/dev/mapper/control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 295.435992][ T8564] device-mapper: ioctl: Invalid data size in the ioctl structure: 3137143096 [ 295.509870][ T29] audit: type=1400 audit(1786471854.068:566): avc: denied { mounton } for pid=8563 comm="syz.4.688" path="/151/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 295.553530][ T8571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.691'. [ 295.583091][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 295.593778][ T29] audit: type=1400 audit(1786471854.118:567): avc: denied { ioctl } for pid=8563 comm="syz.4.688" path="/151/dev/mapper/control" dev="devtmpfs" ino=1268 ioctlcmd=0xfd01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 295.624705][ T24] usb 1-1: USB disconnect, device number 27 [ 296.247896][ T8593] kAFS: Invalid Command on /proc/fs/afs/cells file [ 296.471556][ T8601] netlink: 100 bytes leftover after parsing attributes in process `syz.3.699'. [ 296.877051][ T8605] rdma_rxe: rxe_newlink: failed to add lo [ 296.992031][ T10] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 297.282148][ T8608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.412160][ T8609] 0x000000000007-0x000000020000 : "" [ 297.449599][ T8609] ftl_cs: FTL header corrupt! [ 297.492936][ T8610] netlink: 'syz.0.700': attribute type 4 has an invalid length. [ 297.541927][ T10] usb 5-1: config 10 has an invalid interface number: 8 but max is 0 [ 297.605095][ T10] usb 5-1: config 10 has an invalid descriptor of length 118, skipping remainder of the config [ 297.733235][ T10] usb 5-1: config 10 has no interface number 0 [ 297.759253][ T10] usb 5-1: config 10 interface 8 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 297.801612][ T10] usb 5-1: config 10 interface 8 has no altsetting 0 [ 297.834697][ T8617] FAULT_INJECTION: forcing a failure. [ 297.834697][ T8617] name failslab, interval 1, probability 0, space 0, times 8 [ 297.849283][ T8617] CPU: 1 UID: 0 PID: 8617 Comm: syz.1.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.849313][ T8617] Tainted: [L]=SOFTLOCKUP [ 297.849319][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 297.849329][ T8617] Call Trace: [ 297.849335][ T8617] [ 297.849342][ T8617] dump_stack_lvl+0x100/0x190 [ 297.849369][ T8617] should_fail_ex.cold+0x5/0xa [ 297.849392][ T8617] should_failslab+0xc2/0x120 [ 297.849416][ T8617] __kmalloc_cache_noprof+0x91/0x6c0 [ 297.849446][ T8617] ? cma_alloc_port+0x9b/0x5f0 [ 297.849469][ T8617] cma_alloc_port+0x9b/0x5f0 [ 297.849491][ T8617] rdma_bind_addr_dst+0x1b44/0x2c70 [ 297.849515][ T8617] ? check_prev_add+0x354/0xe60 [ 297.849539][ T8617] ? lockdep_unlock+0x5a/0xc0 [ 297.849559][ T8617] cma_bind_addr+0x2be/0x300 [ 297.849579][ T8617] ? __pfx_cma_bind_addr+0x10/0x10 [ 297.849611][ T8617] ? mark_held_locks+0x40/0x70 [ 297.849632][ T8617] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 297.849656][ T8617] rdma_resolve_addr+0x142/0x20e0 [ 297.849677][ T8617] ? xa_load+0x153/0x2c0 [ 297.849709][ T8617] ? __pfx_xa_load+0x10/0x10 [ 297.849740][ T8617] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 297.849765][ T8617] ? __pfx_ucma_get_ctx+0x10/0x10 [ 297.849800][ T8617] ? ucma_resolve_addr+0x1ac/0x270 [ 297.849815][ T8617] ucma_resolve_addr+0x1ac/0x270 [ 297.849832][ T8617] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 297.849877][ T8617] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 297.849894][ T8617] ucma_write+0x1fb/0x330 [ 297.849921][ T8617] ? __pfx_ucma_write+0x10/0x10 [ 297.849947][ T8617] ? bpf_lsm_file_permission+0x9/0x10 [ 297.849974][ T8617] ? security_file_permission+0x76/0x210 [ 297.849993][ T8617] ? rw_verify_area+0xce/0x6d0 [ 297.850020][ T8617] vfs_write+0x2aa/0x1050 [ 297.850047][ T8617] ? __pfx_ucma_write+0x10/0x10 [ 297.850075][ T8617] ? __pfx_vfs_write+0x10/0x10 [ 297.850100][ T8617] ? find_held_lock+0x2b/0x80 [ 297.850116][ T8617] ? __fget_files+0x215/0x3d0 [ 297.850133][ T8617] ? __fget_files+0x215/0x3d0 [ 297.850155][ T8617] ? __fget_files+0x21f/0x3d0 [ 297.850179][ T8617] ksys_write+0x1f8/0x250 [ 297.850194][ T8617] ? __pfx_ksys_write+0x10/0x10 [ 297.850220][ T8617] do_syscall_64+0x115/0x870 [ 297.850240][ T8617] ? clear_bhb_loop+0x40/0x90 [ 297.850263][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.850282][ T8617] RIP: 0033:0x7f8b8159e0d9 [ 297.850296][ T8617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.850311][ T8617] RSP: 002b:00007f8b82399028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.850327][ T8617] RAX: ffffffffffffffda RBX: 00007f8b81825fa0 RCX: 00007f8b8159e0d9 [ 297.850337][ T8617] RDX: 0000000000000118 RSI: 0000200000000280 RDI: 0000000000000003 [ 297.850346][ T8617] RBP: 00007f8b82399090 R08: 0000000000000000 R09: 0000000000000000 [ 297.850355][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.850364][ T8617] R13: 00007f8b81826038 R14: 00007f8b81825fa0 R15: 00007ffe6199f168 [ 297.850387][ T8617] [ 298.169066][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 298.178598][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.196715][ T10] usb 5-1: Product: syz [ 298.202665][ T10] usb 5-1: Manufacturer: syz [ 298.216990][ T10] usb 5-1: SerialNumber: syz [ 298.301207][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 299.556019][ T24] usb 4-1: device descriptor read/all, error -71 [ 299.597530][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.650576][ T8632] netlink: 100 bytes leftover after parsing attributes in process `syz.0.709'. [ 299.684284][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.710'. [ 299.716043][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 299.716057][ T29] audit: type=1400 audit(1786471858.397:574): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 299.833301][ T8636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.919532][ T10] snd-usb-audio 5-1:10.8: probe with driver snd-usb-audio failed with error -2 [ 300.108266][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 300.109775][ T10] usb 5-1: USB disconnect, device number 21 [ 300.220032][ T29] audit: type=1400 audit(1786471858.827:575): avc: denied { write } for pid=8637 comm="syz.2.711" name="usb_gadget" dev="configfs" ino=3441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 300.282172][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:10.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.341520][ T5705] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 300.355233][ T8643] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.395171][ T8644] syzkaller0: entered promiscuous mode [ 300.400839][ T8644] syzkaller0: entered allmulticast mode [ 300.463812][ T8644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.503913][ T5705] usb 1-1: config 255 has an invalid interface number: 97 but max is 0 [ 300.504434][ T8644] bridge0: port 3(bond3) entered blocking state [ 300.512724][ T5705] usb 1-1: config 255 has no interface number 0 [ 300.527818][ T5705] usb 1-1: config 255 interface 97 has no altsetting 0 [ 300.547166][ T5705] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 300.555930][ T8644] bridge0: port 3(bond3) entered disabled state [ 300.559045][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.570802][ T5705] usb 1-1: Product: syz [ 300.576434][ T5705] usb 1-1: Manufacturer: syz [ 300.581169][ T5705] usb 1-1: SerialNumber: syz [ 300.585362][ T8644] bond3: entered allmulticast mode [ 300.596910][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 300.623232][ T8644] bond3: entered promiscuous mode [ 300.643997][ T8644] bridge0: port 3(bond3) entered blocking state [ 300.651763][ T8644] bridge0: port 3(bond3) entered forwarding state [ 301.345988][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 301.680564][ T6415] bridge0: port 3(bond3) entered disabled state [ 301.692733][ T8662] 0x000000000007-0x000000020000 : "" [ 301.734119][ T8662] ftl_cs: FTL header corrupt! [ 301.784130][ T8664] netlink: 'syz.3.716': attribute type 4 has an invalid length. [ 302.254768][ T29] audit: type=1400 audit(1786471860.697:576): avc: denied { write } for pid=8663 comm="syz.4.717" name="core" dev="configfs" ino=3363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.341246][ T8665] [ 302.343598][ T8665] ====================================================== [ 302.350602][ T8665] WARNING: possible circular locking dependency detected [ 302.357607][ T8665] syzkaller #0 Tainted: G L [ 302.363559][ T8665] ------------------------------------------------------ [ 302.370560][ T8665] syz.4.717/8665 is trying to acquire lock: [ 302.376435][ T8665] ffffffff90253240 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 302.385397][ T8665] [ 302.385397][ T8665] but task is already holding lock: [ 302.392748][ T8665] ffff88802693e390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 302.401696][ T8665] [ 302.401696][ T8665] which lock already depends on the new lock. [ 302.401696][ T8665] [ 302.412169][ T8665] [ 302.412169][ T8665] the existing dependency chain (in reverse order) is: [ 302.421176][ T8665] [ 302.421176][ T8665] -> #3 (&gi->lock){+.+.}-{4:4}: [ 302.428278][ T8665] lock_acquire+0x1b9/0x370 [ 302.433294][ T8665] __mutex_lock+0x1a4/0x1bd0 [ 302.438386][ T8665] config_usb_cfg_link+0x57/0x3a0 [ 302.443909][ T8665] configfs_symlink+0x540/0x11f0 [ 302.449360][ T8665] vfs_symlink+0x178/0x4d0 [ 302.454276][ T8665] filename_symlinkat+0x2a6/0x560 [ 302.459806][ T8665] __x64_sys_symlinkat+0x9c/0xe0 [ 302.465247][ T8665] do_syscall_64+0x115/0x870 [ 302.470346][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.476747][ T8665] [ 302.476747][ T8665] -> #2 (&sb->s_type->i_mutex_key#31){++++}-{4:4}: [ 302.485421][ T8665] lock_acquire+0x1b9/0x370 [ 302.490427][ T8665] down_write+0x8b/0x1f0 [ 302.495166][ T8665] configfs_depend_item_unlocked+0xf3/0x6a0 [ 302.501565][ T8665] usbg_make_tpg+0x261/0x620 [ 302.506659][ T8665] target_fabric_make_tpg+0xab/0x8c0 [ 302.512444][ T8665] configfs_mkdir+0x51e/0xb70 [ 302.517639][ T8665] vfs_mkdir+0x361/0x850 [ 302.522407][ T8665] filename_mkdirat+0x48b/0x5e0 [ 302.527771][ T8665] __x64_sys_mkdirat+0x89/0xc0 [ 302.533057][ T8665] do_syscall_64+0x115/0x870 [ 302.538168][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.544567][ T8665] [ 302.544567][ T8665] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 302.552189][ T8665] lock_acquire+0x1b9/0x370 [ 302.557200][ T8665] __mutex_lock+0x1a4/0x1bd0 [ 302.562293][ T8665] usbg_make_tpg+0x1a4/0x620 [ 302.567385][ T8665] target_fabric_make_tpg+0xab/0x8c0 [ 302.573200][ T8665] configfs_mkdir+0x51e/0xb70 [ 302.578393][ T8665] vfs_mkdir+0x361/0x850 [ 302.583170][ T8665] filename_mkdirat+0x48b/0x5e0 [ 302.588542][ T8665] __x64_sys_mkdirat+0x89/0xc0 [ 302.593813][ T8665] do_syscall_64+0x115/0x870 [ 302.598997][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.605401][ T8665] [ 302.605401][ T8665] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 302.613284][ T8665] check_prev_add+0xeb/0xe60 [ 302.618381][ T8665] __lock_acquire+0x136c/0x1a40 [ 302.623749][ T8665] lock_acquire+0x1b9/0x370 [ 302.628765][ T8665] __mutex_lock+0x1a4/0x1bd0 [ 302.631857][ T29] audit: type=1400 audit(1786471860.907:577): avc: denied { write } for pid=8663 comm="syz.4.717" name="naa.6001405123456789" dev="configfs" ino=22483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.633855][ T8665] tcm_alloc+0x20/0x440 [ 302.633877][ T8665] usb_get_function+0x5e/0xd0 [ 302.667284][ T8665] config_usb_cfg_link+0x1ed/0x3a0 [ 302.672901][ T8665] configfs_symlink+0x540/0x11f0 [ 302.678457][ T8665] vfs_symlink+0x178/0x4d0 [ 302.683488][ T8665] filename_symlinkat+0x2a6/0x560 [ 302.689035][ T8665] __x64_sys_symlinkat+0x9c/0xe0 [ 302.694769][ T8665] do_syscall_64+0x115/0x870 [ 302.699865][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.706276][ T8665] [ 302.706276][ T8665] other info that might help us debug this: [ 302.706276][ T8665] [ 302.716491][ T8665] Chain exists of: [ 302.716491][ T8665] tpg_instances_lock --> &sb->s_type->i_mutex_key#31 --> &gi->lock [ 302.716491][ T8665] [ 302.730299][ T8665] Possible unsafe locking scenario: [ 302.730299][ T8665] [ 302.737741][ T8665] CPU0 CPU1 [ 302.743083][ T8665] ---- ---- [ 302.748425][ T8665] lock(&gi->lock); [ 302.752307][ T8665] lock(&sb->s_type->i_mutex_key#31); [ 302.760262][ T8665] lock(&gi->lock); [ 302.766667][ T8665] lock(tpg_instances_lock); [ 302.771330][ T8665] [ 302.771330][ T8665] *** DEADLOCK *** [ 302.771330][ T8665] [ 302.779446][ T8665] 3 locks held by syz.4.717/8665: [ 302.784439][ T8665] #0: ffff88801e304450 (sb_writers#19){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 302.793908][ T8665] #1: ffff8880492b4ac0 (&sb->s_type->i_mutex_key#31){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 302.804772][ T8665] #2: ffff88802693e390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 302.814170][ T8665] [ 302.814170][ T8665] stack backtrace: [ 302.820047][ T8665] CPU: 0 UID: 0 PID: 8665 Comm: syz.4.717 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.820064][ T8665] Tainted: [L]=SOFTLOCKUP [ 302.820068][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 302.820074][ T8665] Call Trace: [ 302.820079][ T8665] [ 302.820083][ T8665] dump_stack_lvl+0x100/0x190 [ 302.820098][ T8665] print_circular_bug.cold+0x178/0x1c7 [ 302.820116][ T8665] check_noncircular+0x146/0x160 [ 302.820130][ T8665] check_prev_add+0xeb/0xe60 [ 302.820143][ T8665] __lock_acquire+0x136c/0x1a40 [ 302.820168][ T8665] lock_acquire+0x1b9/0x370 [ 302.820181][ T8665] ? tcm_alloc+0x20/0x440 [ 302.820194][ T8665] ? __pfx___might_resched+0x10/0x10 [ 302.820208][ T8665] __mutex_lock+0x1a4/0x1bd0 [ 302.820222][ T8665] ? tcm_alloc+0x20/0x440 [ 302.820234][ T8665] ? tcm_alloc+0x20/0x440 [ 302.820246][ T8665] ? __mutex_lock+0x26d/0x1bd0 [ 302.820259][ T8665] ? config_usb_cfg_link+0x57/0x3a0 [ 302.820273][ T8665] ? __pfx___mutex_lock+0x10/0x10 [ 302.820288][ T8665] ? __pfx_selinux_inode_permission+0x10/0x10 [ 302.820304][ T8665] ? tcm_alloc+0x20/0x440 [ 302.820315][ T8665] tcm_alloc+0x20/0x440 [ 302.820328][ T8665] usb_get_function+0x5e/0xd0 [ 302.820344][ T8665] config_usb_cfg_link+0x1ed/0x3a0 [ 302.820357][ T8665] ? mntput_no_expire+0xe7/0x220 [ 302.820368][ T8665] configfs_symlink+0x540/0x11f0 [ 302.820384][ T8665] ? __pfx_configfs_symlink+0x10/0x10 [ 302.820400][ T8665] vfs_symlink+0x178/0x4d0 [ 302.820415][ T8665] filename_symlinkat+0x2a6/0x560 [ 302.820428][ T8665] ? __pfx_filename_symlinkat+0x10/0x10 [ 302.820441][ T8665] ? strncpy_from_user+0x19d/0x2d0 [ 302.820455][ T8665] ? do_getname+0x191/0x390 [ 302.820469][ T8665] __x64_sys_symlinkat+0x9c/0xe0 [ 302.820481][ T8665] do_syscall_64+0x115/0x870 [ 302.820494][ T8665] ? clear_bhb_loop+0x40/0x90 [ 302.820505][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.820516][ T8665] RIP: 0033:0x7fe52999e0d9 [ 302.820526][ T8665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.820536][ T8665] RSP: 002b:00007fe52a836028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 302.820546][ T8665] RAX: ffffffffffffffda RBX: 00007fe529c25fa0 RCX: 00007fe52999e0d9 [ 302.820553][ T8665] RDX: 0000200000000880 RSI: ffffffffffffff9c RDI: 0000200000000840 [ 302.820559][ T8665] RBP: 00007fe529a35024 R08: 0000000000000000 R09: 0000000000000000 [ 302.820566][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.820572][ T8665] R13: 00007fe529c26038 R14: 00007fe529c25fa0 R15: 00007ffc82e36308 [ 302.820581][ T8665] [ 303.234329][ T29] audit: type=1800 audit(1786471860.987:578): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.717" name="idProduct" dev="configfs" ino=24677 res=0 errno=0 [ 303.278201][ T5705] rndis_host 1-1:255.97: ACM capabilities 01, not really RNDIS? [ 303.286862][ T29] audit: type=1400 audit(1786471860.987:579): avc: denied { write } for pid=8663 comm="syz.4.717" name="configs" dev="configfs" ino=23884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.292626][ T5705] usb 1-1: USB disconnect, device number 28 [ 303.330752][ T29] audit: type=1400 audit(1786471861.007:580): avc: denied { write } for pid=8663 comm="syz.4.717" name="functions" dev="configfs" ino=23883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.358193][ T29] audit: type=1400 audit(1786471861.017:581): avc: denied { write } for pid=8663 comm="syz.4.717" name="c.1" dev="configfs" ino=24678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.383100][ T29] audit: type=1400 audit(1786471861.017:582): avc: denied { write } for pid=8663 comm="syz.4.717" name="c.1" dev="configfs" ino=24678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 303.407349][ T29] audit: type=1400 audit(1786471861.786:583): avc: denied { sqpoll } for pid=8668 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1