last executing test programs: 9.731349175s ago: executing program 4 (id=715): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000180)=@echo=0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r3, r3, 0x37, 0x200c, 0x0, @value=r0}, 0x20) gettid() setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) socket$netlink(0x10, 0x3, 0x400000000000004) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x2dbdfac4985c81ac, 0x4, {0x4, 0x2, "8453"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) prlimit64(r6, 0x3, &(0x7f0000000240)={0xffffffffffffff7f, 0x1ff}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r8) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) truncate(&(0x7f0000000680)='./file0\x00', 0x40003e) 9.663772938s ago: executing program 0 (id=717): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000002c0)={r2, r3+60000000}) (async) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000006c0)=ANY=[], 0x9}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$TIOCSSOFTCAR(r8, 0x5453, 0x0) r9 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f00000000c0)=0x10, 0x800) connect$tipc(r9, &(0x7f0000000140)=@id={0x1e, 0x3, 0x1c5572f323efe91c, {0x4e24, 0x1}}, 0x10) (async) sendmsg$tipc(r9, &(0x7f0000000840)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x4}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="bab341c95b52a9dfa1b4d1a3fad71363e7e1471b751c6922308f395666c5dfe133a4563a9018e0fbd96fad9c3f12088ed67c347081f5e588a3611fd4394abc701aedc93797f42ad8a3ed138c99f4ebe6307ef8de9520bc2f000d6226f4f00dc9c498f29a809f97047d92e0a0143f610e6103ff7b846ce31556bcea27ef40b50df6f18f7ea4c93695e6f4", 0x8a}, {&(0x7f0000000380)="71ca652f486f0b347e7ffe3975de5ac6e36d3d47ae9a039a1d5d93a36ae1b6b177044bcd3aeb99d581f0d31e001db43762b66cc25ef8167238876bfcaf64b49a65af90637df6fccca9bb2c82179416b83e92a6639ecdf1c5407545c9acfa35d01fc3b99212eab5cd0dfa0937ede103b17c2ab0dc1b7fad06e385ea2e301cf9338de82825d534c6e467e293196704ed403078005d06", 0x95}, {&(0x7f0000000440)="6130e4bbee7275c90a5340234506ce4dba1082ca47fc1bb6093d6365b2b372ed5f71edb7c1ec6f9a0b9376a4744bc0edb29ea3ea88036e5f152a4685b287bf68b8c53888e4ba82403e3143543d7362f2a62446bc444d96531dfb15a3b82aadd2b26e540a16b4a4c4cc7feb484bf5ad7296fc72fdcd58cef35c0b05ec38e5881d7ed7b40476a9ec7e71", 0x89}, {&(0x7f0000000200)="9b0261177c163831815d0edefc95377cbcf9186153bda61ccaf8e201b1327073a62abd2586869938492c4828b8fd4a01e8ad96022c936de04cba7ea15a3891bb94a05c978c936a3c", 0x48}, {&(0x7f0000000540)="9c353364abfb301871125f876c4302246f3496fb05cf735ddf8cd8d9c19dcb2e9d3f4ae78414cd63695a8d853900fdb88fbc4398b7883bba164b3fc959ba4bdfa070e5fe6689614b441e42b0e54e4cab9fb07b60858d88f3839c56ffe8f29b6f1453954e2ae53da71296923f58bb2bfe4572791127cccdfcdcd2dbf5c8c13a20481f2064e8aa77037ad3a1feb56ae18ca95babd192d829aba3b83b11b52a", 0x9e}, {&(0x7f00000006c0)="803c99d911828da29d6fa05f105af2c2de433c83e5167ba8d9aed7c1679d9edc8c3b93983b358300ae8193cb1122724d3f0bf63a7c387e854568146207f1e723b6be28610325cf865b1b6d8d5ee8c1b9f21d2d9270f4e115822bcce3bea680620e97803f56983a79f52037d41d531515a080009f9695069a61e67e8789f8398725a0595afee5e59567f7d488255166944dcfae657b10990c25860f9dce17b5f62262a637857901fa8c90097553ef1cff642a7810513f2e583f27799dc752fd27ca61577b043b8fd70886843004eccefcfd7bba235fac220ef529aba75ca86c2fbd73d718d3d1565e0db697e43b3704", 0xef}], 0x6, &(0x7f00000007c0)="aaee79c5be8b556c46b2869796e6bf1183454a170b14a5f3d3a19a85f983f7e00e24d26f3f40405928637eb908ed25c8ee0ba57f346e1236bc7beadddc0ecf8fd10c9e", 0x43, 0x8000}, 0x840) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYRES8=r5, @ANYRES32=r11, @ANYRES32=r9], 0x6f4}}, 0x0) (async) listen(r7, 0x5) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 9.663157944s ago: executing program 3 (id=719): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131218010ff"}) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) (async) creat(&(0x7f0000000080)='./file0\x00', 0x86) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd31, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) acct(&(0x7f0000000240)='./file0\x00') 8.096271517s ago: executing program 0 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80720, 0x80) 7.727341162s ago: executing program 2 (id=723): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) writev(r0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x80003, 0xff) socket$rxrpc(0x21, 0x2, 0xa) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xc8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001a80)={0x3, 0x1, 0x0, 0x1000, &(0x7f0000017000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) 7.691720064s ago: executing program 3 (id=724): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) r2 = creat(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc0405668, &(0x7f0000000300)={0x0, 0x0, 0x1, {0x0, 0x4}}) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x5) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e21", 0x20}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) 7.660942261s ago: executing program 1 (id=725): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102400, 0x19000) mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2000004) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000080, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="90140000", @ANYRES16=r2, @ANYBLOB="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"], 0x1490}}, 0x0) 6.797027283s ago: executing program 4 (id=726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) 6.777643447s ago: executing program 0 (id=727): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x4}, 0x6, 0x8000, &(0x7f0000000040)={{0x5, 0x0, 0x100, 0x3}}, 0x0, 0x0}}) 6.336241792s ago: executing program 2 (id=728): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x123800, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x2556, 0x1000, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x901) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x2}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/139, 0x8b}], 0x1}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) r5 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000200)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 6.335849073s ago: executing program 0 (id=729): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xef1d, 0x3010, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x7e000000000}, 0x40000, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000008c0)=@ethtool_stats}) mkdir(&(0x7f0000000000)='./file0\x00', 0x60) sysinfo(&(0x7f0000000240)=""/237) 6.21801744s ago: executing program 1 (id=730): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc0405668, &(0x7f0000000300)={0x0, 0x0, 0x1, {0x0, 0x4}}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x5) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e21", 0x20}], 0x1}}], 0x1, 0x20008000) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000000c0)={0x28, 0x2, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000080)}) 6.129961057s ago: executing program 2 (id=731): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x40, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0xe, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1e}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) connect(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES16], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007391bd06b3c70c301", 0x45}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac70", 0x93}], 0x2, 0x0, 0x0, 0x7400}, 0x0) 6.113570742s ago: executing program 4 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r0, &(0x7f0000006f00)="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", 0x2000, &(0x7f0000001f80)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x7, {0x7, 0x29, 0x80000008, 0x4314241, 0x6, 0x9, 0x82, 0xffb0, 0x0, 0x0, 0x10, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="73a1797374656d4a026ae8582e8937fe552e5c3a2f"]) 6.100663684s ago: executing program 3 (id=733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b99010203010902240001000000000904"], 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80700, 0x80) 4.113460212s ago: executing program 2 (id=734): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000004c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d0e, &(0x7f0000000080)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000c00)=0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r3 = syz_io_uring_setup(0x6d9d, &(0x7f0000000780)={0x0, 0x942e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r2, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="db8ceec1c202655046865741990ded4f0a9631914455f4d422bd48afd7e8a376a852486211e769ce36050d09fee7ade9b15f4ec5697e086f6cfa497da896b91a39f5a08b7da1bc7a8ddfaa51b04c50b47df89a87eff09b1b71e1ede7a0bfd394ae3fba35c371a25703fcd7", 0x6b}, {&(0x7f00000003c0)="dae8fde6ed93a5827bf9e6e885e13cdbc9cd16e3996093dba056c46b50924af065ce1c18f38b54b357dbb66d10d0d2b87105d015a8435f40f819fff167bbf493ed43828d9efd106619c0f3711345ec90d5eb08ee2458f7b575274b699f597ec5fc2acb20b52a87a29481722c412d93f3d68677cd7f67f01dffcc8b43020fa714fc674505ec519ab6ee9e7bcd61cb3841a40eb6f2e11d8922e9d2e8198943b9107846d779a2338ecddfcd45d99d98b6bc39d2a386acffdb3588fda8da562a08d8b1bbf0fa8f33d8b73883edaf6786d53e9e49e899397249fe3db2c2962cf7b7559a9b27f1bde4c8bc1b68b2abcef0b437", 0xf0}, {&(0x7f0000000c40)="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", 0xfa}], 0x3, 0x0, 0x0, 0x40c0}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000600)="89c4f3ca44a3f58b239c0b21bc574a0f8956e49e311dc18c68abf9f1d637f832779913c99436d168ae81b2480eed8627e5157239edfb008b0bcba8857ac0752815b280e72e0d61ef09ed68fda2860cb6c98d0396ed13ff96537dbfa1dee28d2622d317ba4e3649da1de6503cf0964a84916f57b3a30ea4cc31a76ad04cbe0d8b8a129b63cc2b57aec6c2539066e36c9e", 0x90}, {&(0x7f0000000800)="26c78659851a6fcca5398ac41d03fddc62aff748726addbfa55942b367d499839337d79157f92ae176e332474cdf03eacc34dc398edf4dc28b3e35b0f7ad2907cb316c8e2479c1d8ccb80cd219517986e3cc2ff24d2c24f25e4b31df1eeee031d6cb74b582fb033ed6031dd5e8b68031fd078a1777a9192aecb6f911f246b34c955fc61621cd5130fef743cf188ef146019dfea8058e77520dee3e7cfd1ec934cab733b19eca79baf3ed1ca47908029f9523c0e419154e85b9fdc098efca48414ec7fb523b8ca1a42436742a9363c869381febbcd9ed7d85", 0xd8}, {&(0x7f00000006c0)}, {&(0x7f0000000940)="56accef3d224f941a4bc8fdb397fe4bd03b856f056d13af8285ec06ae8e5fe496fdb587e34dd037cb6768b92877b685d78d11702a091276dd3a9398a0d643523d7e24475830725c4bf1f6c3e7e855d55083423cb09bfbb1933bd8549791dce6aa1139b9603f9aa312363f17ae4d201e1e35572b3d59915505f27cee295559b334385262842c3a02ce1a44c14cc17e5fcff9c0e813ae8ff27961ca4066b647840a714b7722a19d2ef44f3918095b3afa55e8ddd6d15", 0xb5}, {&(0x7f0000000700)="e1983600fbeb053f31c55df5fac3110359d5406a7e8e5f1e8e7be88bc81a6ff00fa7ecc0e7aecbb2", 0x28}], 0x5, &(0x7f0000000d40)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES16=r6, @ANYRES32=r11, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000c8e7c0c9fc51f2985e26201fca837497da6c23d98a0b126e5fc6ced9fdc1042335d76f1aea918b9ee8935879ec3db9637dac162087591c9592048f53bb078c97c5656e643ee8c5233c1bce080bd1a77e1ccef6f4ac6500d6c279e9f5d748df887426d1582cfb8c9ed9a241ee3cf5c5ba0ce045154fce5edd34575040c31ce25f245684fadce92aba0000000072a1a1da63e8ddb39077a63466f0a0251b9f459bf4cb951d", @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000003385f8132623bbcd8f90fb7c89e4d7fce0b9600d8b6430e79877d97cf3ba9195328dfc9b9d2ca0a7201d780c959d4fe420fb48d1ff3da649ddc60796722ad67ac7b83d5f4b21a75ae9890c785af902426c2d75d03f9decfb6b399b61c6cc793b262d415d30d30d08ea357c0ef47acf9d1508c57ace1cf68412e289dd8ac1e959b0", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES8=r10, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00f8691da40000000000000001000000011004007bc47e21bfcd92012d08ac1c74f0b7d4171029e181513f2c5d3dea0a741fadc59bd73a634f5722bf7b24d4dcd04845bc08c6559de410069d1cb79464eafdca58b729fd37ee740422e2b6141b42fa6a0b5b6223ffc39618a0d7f99fe9d93975a8e7f006ba3a750e4300be49da42ed014d38930f4f953424b226be4c31bd6950376fab152400f471aff92759638187fedeb6916aa083c3d300"/182, @ANYRES32=r3, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES8=r9, @ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x20040045}}], 0x2, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() (async) getpid() r13 = syz_pidfd_open(r9, 0x0) pidfd_getfd(r13, r12, 0x0) (async) r14 = pidfd_getfd(r13, r12, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='qi_submit\x00', r14}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) 4.107375407s ago: executing program 4 (id=735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100003f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) 3.241395539s ago: executing program 2 (id=736): r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) listen(0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x4007) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'tunl0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000"], 0xfc}}, 0x0) shmget(0x0, 0x2000, 0x3f0, &(0x7f0000ffd000/0x2000)=nil) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x40050}, 0x18) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) sched_setaffinity(r4, 0x8, &(0x7f00000001c0)) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) 3.238238504s ago: executing program 1 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80720, 0x80) 3.052087683s ago: executing program 4 (id=738): creat(&(0x7f0000000300)='./file0\x00', 0xe5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1}}) r1 = dup(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="00000000000000018002000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf9f000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x26004090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.544246817s ago: executing program 3 (id=739): socket(0x1e, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}]) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="20000000100001070000000000000000"], 0x20}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r2, 0x0, 0x4028000) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x7f}], 0x1, 0x40012100, 0x0) preadv2(r2, &(0x7f0000000840)=[{&(0x7f0000000640)=""/215, 0xd7}], 0x1, 0x2b, 0x0, 0x0) 2.269363609s ago: executing program 0 (id=740): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) r4 = creat(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc0405668, &(0x7f0000000300)={0x0, 0x0, 0x1, {0x0, 0x4}}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x5) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e21", 0x20}], 0x1}}], 0x1, 0x20008000) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000000c0)={0x28, 0x2, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000080)}) 2.268930785s ago: executing program 1 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000040)={0x4c, 0xc2a5, 0x6, @remote, 'ip6gretap0\x00'}) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) 1.575796881s ago: executing program 4 (id=742): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) r3 = creat(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc0405668, &(0x7f0000000300)={0x0, 0x0, 0x1, {0x0, 0x4}}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d809e748adaab87cd498e21", 0x20}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) 1.042436613s ago: executing program 1 (id=743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) 982.242497ms ago: executing program 2 (id=744): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x71, 0x40000009, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x101) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4040000) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000500), &(0x7f0000000540)=""/11, 0xb, &(0x7f00000006c0)={&(0x7f0000000580)={'hmac(sha1-neon)\x00'}, &(0x7f00000005c0)="cd0fb64e362cc3bf8d7a3143117a50ede3a18d4d3f60e89b1e74762cf92ce3818597709d7dac9339986aa8066086391f91edcda926bdea06a452bb873f8ec6282638198cfa866d3c037f1f168494328a77842b5da68cf494fc15275d41e96051f0404218b2892a3b7132dfdbfae8c459e880aa7f5821ff953205f5ef47b2f1554313b68f3fc0", 0x86}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000001840)={0x0, 0x1, 0x8, '\x00', &(0x7f0000001800)=0x8}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 859.533324ms ago: executing program 3 (id=745): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007391bd06b3c70c301", 0x45}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac70", 0x93}], 0x2, 0x0, 0x0, 0x7400}, 0x0) 544.764592ms ago: executing program 1 (id=746): io_setup(0x4, &(0x7f0000000040)) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)="bda033176eb146b36ef41f221a4e7ce48b2598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4e5f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e9a3a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14d33e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beac020000000000000084d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512c14ac3df331695024bd1e53369a87caf6894fce81594b43cb", 0x38a}], 0x1}}], 0x2, 0x4048884) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @private1, 0x1}, 0x1c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) (fail_nth: 13) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) socket(0x2, 0x80805, 0x0) socket$kcm(0x21, 0x2, 0xa) munlockall() 278.429068ms ago: executing program 3 (id=747): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x1b3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') (async) rmdir(&(0x7f0000000140)='./file1\x00') mknod(&(0x7f0000000300)='./bus/file0\x00', 0x4, 0x5) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000180)={0x3, 0x5, 0x9cd0}) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000901001d00000000000003000000000800040001000000", 0x24) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x10, [{0xb, 0x3, 0x9}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000, 0x0, @void, @value}, 0x28) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 0s ago: executing program 0 (id=748): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xb56e}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={r1, 0x27, "79dc85a6f36d29c73498e2a29b93edb854ecf236c9f5420bf9c5e457e9b51864a0033db00df450"}, &(0x7f0000000280)=0x2f) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000040), 0x84080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4808}, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x4e20, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r7, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) kernel console output (not intermixed with test programs): 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.258866][ T6921] RSP: 002b:00007f826b76c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.258880][ T6921] RAX: ffffffffffffffda RBX: 00007f826abb5fa0 RCX: 00007f826a98e969 [ 148.258889][ T6921] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 148.258898][ T6921] RBP: 00007f826b76c090 R08: 00000000000005b0 R09: 0000000000000000 [ 148.258906][ T6921] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.258914][ T6921] R13: 0000000000000000 R14: 00007f826abb5fa0 R15: 00007ffd7e0ee1d8 [ 148.258933][ T6921] [ 148.320315][ T6924] FAULT_INJECTION: forcing a failure. [ 148.320315][ T6924] name failslab, interval 1, probability 0, space 0, times 0 [ 148.375064][ T30] audit: type=1400 audit(1746476194.042:358): avc: denied { create } for pid=6925 comm="syz.4.257" name="#d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.377542][ T6924] CPU: 1 UID: 0 PID: 6924 Comm: syz.1.253 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 148.377562][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 148.377570][ T6924] Call Trace: [ 148.377575][ T6924] [ 148.377581][ T6924] dump_stack_lvl+0x16c/0x1f0 [ 148.377605][ T6924] should_fail_ex+0x512/0x640 [ 148.377627][ T6924] should_failslab+0xc2/0x120 [ 148.377642][ T6924] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 148.377666][ T6924] ? __alloc_skb+0x2b2/0x380 [ 148.377689][ T6924] __alloc_skb+0x2b2/0x380 [ 148.377702][ T6924] ? __pfx___alloc_skb+0x10/0x10 [ 148.377716][ T6924] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.377741][ T6924] ? pfkey_xfrm_policy2msg_size+0x20c/0x260 [ 148.377766][ T6924] pfkey_send_policy_notify+0x444/0x930 [ 148.377787][ T6924] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 148.377811][ T6924] km_policy_notify+0xb0/0x240 [ 148.377829][ T6924] xfrm_add_policy+0x448/0x850 [ 148.377849][ T6924] ? __pfx_xfrm_add_policy+0x10/0x10 [ 148.377865][ T6924] ? cap_capable+0xb3/0x250 [ 148.377885][ T6924] ? __nla_parse+0x40/0x60 [ 148.377906][ T6924] ? __pfx_xfrm_add_policy+0x10/0x10 [ 148.377924][ T6924] xfrm_user_rcv_msg+0x58b/0xc00 [ 148.377946][ T6924] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 148.377965][ T6924] ? kfree_skbmem+0x1a4/0x1f0 [ 148.377984][ T6924] ? consume_skb+0xcc/0x100 [ 148.378024][ T6924] ? __mutex_trylock_common+0xe9/0x250 [ 148.378047][ T6924] ? __pfx___mutex_trylock_common+0x10/0x10 [ 148.378073][ T6924] netlink_rcv_skb+0x16a/0x440 [ 148.378091][ T6924] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 148.378108][ T6924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.378139][ T6924] ? netlink_deliver_tap+0x1ae/0xd30 [ 148.378157][ T6924] xfrm_netlink_rcv+0x71/0x90 [ 148.378173][ T6924] netlink_unicast+0x53a/0x7f0 [ 148.378192][ T6924] ? __pfx_netlink_unicast+0x10/0x10 [ 148.378215][ T6924] netlink_sendmsg+0x8d1/0xdd0 [ 148.378235][ T6924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.378260][ T6924] ____sys_sendmsg+0xa95/0xc70 [ 148.378280][ T6924] ? copy_msghdr_from_user+0x10a/0x160 [ 148.378294][ T6924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.378323][ T6924] ___sys_sendmsg+0x134/0x1d0 [ 148.378339][ T6924] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.378382][ T6924] __sys_sendmsg+0x16d/0x220 [ 148.378396][ T6924] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.378418][ T6924] ? rcu_is_watching+0x12/0xc0 [ 148.378440][ T6924] do_syscall_64+0xcd/0x260 [ 148.378461][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.378476][ T6924] RIP: 0033:0x7f5ddab8e969 [ 148.378488][ T6924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.378503][ T6924] RSP: 002b:00007f5ddb93a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.378517][ T6924] RAX: ffffffffffffffda RBX: 00007f5ddadb6080 RCX: 00007f5ddab8e969 [ 148.378526][ T6924] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 148.378535][ T6924] RBP: 00007f5ddb93a090 R08: 0000000000000000 R09: 0000000000000000 [ 148.378542][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.378550][ T6924] R13: 0000000000000000 R14: 00007f5ddadb6080 R15: 00007ffd5afd92d8 [ 148.378571][ T6924] [ 149.051731][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.258'. [ 149.237969][ T30] audit: type=1400 audit(1746476194.042:359): avc: denied { link } for pid=6925 comm="syz.4.257" name="#d" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.541583][ T30] audit: type=1400 audit(1746476194.042:360): avc: denied { rename } for pid=6925 comm="syz.4.257" name="#e" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.781950][ T6940] siw: device registration error -23 [ 151.139877][ T30] audit: type=1400 audit(1746476196.582:361): avc: denied { shutdown } for pid=6944 comm="syz.2.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.864854][ T30] audit: type=1400 audit(1746476197.532:362): avc: denied { append } for pid=6961 comm="syz.2.268" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.049209][ T6970] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 152.058757][ T6970] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 152.477742][ T30] audit: type=1400 audit(1746476197.732:363): avc: denied { firmware_load } for pid=6962 comm="syz.0.267" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 152.643914][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 152.998683][ T30] audit: type=1400 audit(1746476198.662:364): avc: denied { open } for pid=6979 comm="syz.0.272" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 153.026586][ T30] audit: type=1400 audit(1746476198.662:365): avc: denied { write } for pid=6979 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.748626][ T7012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.757157][ T30] audit: type=1400 audit(1746476200.412:366): avc: denied { execute } for pid=7011 comm="syz.0.279" name="file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.936491][ T30] audit: type=1400 audit(1746476200.412:367): avc: denied { execute_no_trans } for pid=7011 comm="syz.0.279" path="/53/file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.978096][ T7020] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 155.001241][ T30] audit: type=1400 audit(1746476200.522:368): avc: denied { read write } for pid=7009 comm="syz.1.278" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 155.027918][ T30] audit: type=1400 audit(1746476200.522:369): avc: denied { open } for pid=7009 comm="syz.1.278" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 155.058021][ T30] audit: type=1400 audit(1746476200.722:370): avc: denied { bind } for pid=7021 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.084512][ T30] audit: type=1400 audit(1746476200.722:371): avc: denied { write } for pid=7021 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.129199][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.281'. [ 155.214893][ T7027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.050670][ T7039] lo speed is unknown, defaulting to 1000 [ 156.056686][ T7039] lo speed is unknown, defaulting to 1000 [ 156.065787][ T7039] lo speed is unknown, defaulting to 1000 [ 156.127159][ T7039] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 156.253234][ T5820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 156.276129][ T7039] lo speed is unknown, defaulting to 1000 [ 156.290909][ T7039] lo speed is unknown, defaulting to 1000 [ 156.305858][ T7039] lo speed is unknown, defaulting to 1000 [ 156.320963][ T7039] lo speed is unknown, defaulting to 1000 [ 156.335119][ T7039] lo speed is unknown, defaulting to 1000 [ 156.340583][ T7041] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 156.376361][ T30] audit: type=1400 audit(1746476201.892:372): avc: denied { connect } for pid=7035 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.532269][ T30] audit: type=1400 audit(1746476202.062:373): avc: denied { write } for pid=7035 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 156.640188][ T5820] usb 4-1: device descriptor read/64, error -71 [ 157.237453][ T5820] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.340211][ T5820] usb 4-1: device descriptor read/64, error -71 [ 158.868007][ T5820] usb usb4-port1: attempt power cycle [ 158.984362][ T7064] SELinux: Context system_u:object_r:devpts_t:s0 is not valid (left unmapped). [ 159.038698][ T7068] SELinux: syz.1.292 (7068) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.076532][ T30] audit: type=1400 audit(1746476204.732:374): avc: denied { relabelto } for pid=7063 comm="syz.1.292" name="kexec_crash_size" dev="sysfs" ino=1396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devpts_t:s0" [ 159.188274][ T30] audit: type=1400 audit(1746476204.732:375): avc: denied { associate } for pid=7063 comm="syz.1.292" name="kexec_crash_size" dev="sysfs" ino=1396 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:devpts_t:s0" [ 159.559151][ T7079] ucma_write: process 221 (syz.1.297) changed security contexts after opening file descriptor, this is not allowed. [ 159.638139][ T7079] syz.1.297: attempt to access beyond end of device [ 159.638139][ T7079] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 159.654726][ T7079] hfs: can't find a HFS filesystem on dev loop1 [ 160.120220][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 160.120234][ T30] audit: type=1400 audit(1746476205.792:378): avc: denied { write } for pid=7066 comm="syz.3.293" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.172184][ T7076] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 160.338380][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'. [ 160.667767][ T7090] siw: device registration error -23 [ 160.900390][ T30] audit: type=1400 audit(1746476206.562:379): avc: denied { ioctl } for pid=7066 comm="syz.3.293" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.133951][ T30] audit: type=1326 audit(1746476207.752:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826a98e969 code=0x7ffc0000 [ 162.220248][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 162.446597][ T30] audit: type=1326 audit(1746476207.762:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826a98e969 code=0x7ffc0000 [ 162.599914][ T30] audit: type=1326 audit(1746476207.762:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f826a98e969 code=0x7ffc0000 [ 162.714291][ T7108] siw: device registration error -23 [ 162.726908][ T30] audit: type=1326 audit(1746476207.762:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826a98e969 code=0x7ffc0000 [ 163.015101][ T30] audit: type=1326 audit(1746476207.762:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826a98e969 code=0x7ffc0000 [ 163.042857][ T30] audit: type=1326 audit(1746476207.762:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f826a98e969 code=0x7ffc0000 [ 163.069652][ T30] audit: type=1326 audit(1746476207.762:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826a98e969 code=0x7ffc0000 [ 163.093124][ T30] audit: type=1326 audit(1746476207.772:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.4.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826a98e969 code=0x7ffc0000 [ 163.116291][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.290215][ T1205] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 163.430165][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.441637][ T1205] usb 5-1: Using ep0 maxpacket: 32 [ 163.448269][ T1205] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 163.463182][ T1205] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 163.472789][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.483758][ T1205] usb 5-1: Product: syz [ 163.488023][ T1205] usb 5-1: Manufacturer: syz [ 163.493218][ T1205] usb 5-1: SerialNumber: syz [ 163.503391][ T1205] usb 5-1: config 0 descriptor?? [ 163.511926][ T7115] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 163.580270][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 163.589602][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 163.606050][ T9] usb 2-1: config 0 has no interface number 0 [ 163.625904][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 163.653885][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 163.663295][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.704933][ T9] usb 2-1: Product: syz [ 163.712851][ T9] usb 2-1: Manufacturer: syz [ 163.760077][ T9] usb 2-1: SerialNumber: syz [ 163.769938][ T9] usb 2-1: config 0 descriptor?? [ 163.777290][ T1205] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 163.909893][ T5820] usb 5-1: USB disconnect, device number 6 [ 163.926701][ T9] smsc75xx v1.0.0 [ 163.941772][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 164.044656][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 164.151384][ T1205] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.281814][ T1205] usb 3-1: config 0 has no interface number 0 [ 164.288557][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 164.316955][ T1205] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.340003][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.350216][ T10] usb 4-1: Product: syz [ 164.354409][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.364999][ T10] usb 4-1: Manufacturer: syz [ 164.369588][ T10] usb 4-1: SerialNumber: syz [ 164.374213][ T1205] usb 3-1: Product: syz [ 164.378369][ T1205] usb 3-1: Manufacturer: syz [ 164.410249][ T10] usb 4-1: config 0 descriptor?? [ 164.415300][ T1205] usb 3-1: SerialNumber: syz [ 164.433951][ T1205] usb 3-1: config 0 descriptor?? [ 164.470255][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.514751][ T7130] bond0: (slave rose0): Enslaving as an active interface with an up link [ 164.648457][ T1205] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 164.658302][ T1205] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.672674][ T7130] program syz.0.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.683677][ T7130] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 164.725855][ T1205] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 164.917102][ T1205] usb 3-1: media controller created [ 165.457735][ T7141] infiniband syz!: set active [ 165.462605][ T7141] infiniband syz!: added team_slave_0 [ 165.522100][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 165.522115][ T30] audit: type=1400 audit(1746476211.102:415): avc: denied { getopt } for pid=7136 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.567719][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.584564][ T7141] RDS/IB: syz!: added [ 165.588910][ T7141] smc: adding ib device syz! with port count 1 [ 165.595207][ T7141] smc: ib device syz! port 1 has pnetid [ 165.997554][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.038178][ T30] audit: type=1400 audit(1746476211.702:416): avc: denied { load_policy } for pid=7123 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 166.059059][ T7144] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 166.422468][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 166.427499][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.465911][ T7144] SELinux: failed to load policy [ 166.488747][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 166.516445][ T30] audit: type=1400 audit(1746476212.182:417): avc: denied { write } for pid=7131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.544439][ T10] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 166.571106][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 166.581512][ T10] f81604 4-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 166.589276][ T10] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 166.617868][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 166.674001][ T30] audit: type=1400 audit(1746476212.182:418): avc: denied { add_name } for pid=7131 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.696442][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.708403][ T9] usb 2-1: USB disconnect, device number 8 [ 166.757827][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.315'. [ 167.430418][ T1205] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 167.528089][ T30] audit: type=1400 audit(1746476212.182:419): avc: denied { create } for pid=7131 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.555139][ T30] audit: type=1400 audit(1746476212.182:420): avc: denied { write } for pid=7131 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=3126 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.581226][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.588492][ T30] audit: type=1400 audit(1746476212.182:421): avc: denied { append } for pid=7131 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" dev="tmpfs" ino=3126 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.612634][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.621493][ T30] audit: type=1400 audit(1746476212.572:422): avc: denied { getopt } for pid=7155 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.640808][ T30] audit: type=1400 audit(1746476212.952:423): avc: denied { remove_name } for pid=7159 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=3126 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.664155][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.682800][ T30] audit: type=1400 audit(1746476212.962:424): avc: denied { unlink } for pid=7159 comm="rm" name="resolv.conf.lapb0.link" dev="tmpfs" ino=3126 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.065598][ T7177] sd 0:0:1:0: device reset [ 168.966234][ T7122] syz.2.308 (7122): drop_caches: 2 [ 169.280978][ T59] usb 4-1: USB disconnect, device number 12 [ 169.380287][ T7183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 169.897821][ T7193] siw: device registration error -23 [ 169.999564][ T5860] usb 3-1: USB disconnect, device number 12 [ 170.215897][ T7207] FAULT_INJECTION: forcing a failure. [ 170.215897][ T7207] name failslab, interval 1, probability 0, space 0, times 0 [ 170.243623][ T7207] CPU: 1 UID: 0 PID: 7207 Comm: syz.1.326 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 170.243648][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 170.243657][ T7207] Call Trace: [ 170.243663][ T7207] [ 170.243669][ T7207] dump_stack_lvl+0x16c/0x1f0 [ 170.243696][ T7207] should_fail_ex+0x512/0x640 [ 170.243720][ T7207] should_failslab+0xc2/0x120 [ 170.243737][ T7207] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 170.243764][ T7207] ? skb_clone+0x190/0x3f0 [ 170.243784][ T7207] skb_clone+0x190/0x3f0 [ 170.243802][ T7207] netlink_deliver_tap+0xabd/0xd30 [ 170.243826][ T7207] netlink_unicast+0x5df/0x7f0 [ 170.243847][ T7207] ? __pfx_netlink_unicast+0x10/0x10 [ 170.243873][ T7207] netlink_sendmsg+0x8d1/0xdd0 [ 170.243897][ T7207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.243925][ T7207] ____sys_sendmsg+0xa95/0xc70 [ 170.243948][ T7207] ? copy_msghdr_from_user+0x10a/0x160 [ 170.243964][ T7207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.243996][ T7207] ___sys_sendmsg+0x134/0x1d0 [ 170.244013][ T7207] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.244062][ T7207] __sys_sendmsg+0x16d/0x220 [ 170.244079][ T7207] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.244102][ T7207] ? rcu_is_watching+0x12/0xc0 [ 170.244128][ T7207] do_syscall_64+0xcd/0x260 [ 170.244152][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.244168][ T7207] RIP: 0033:0x7f5ddab8e969 [ 170.244182][ T7207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.244198][ T7207] RSP: 002b:00007f5ddb95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.244214][ T7207] RAX: ffffffffffffffda RBX: 00007f5ddadb5fa0 RCX: 00007f5ddab8e969 [ 170.244224][ T7207] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 170.244234][ T7207] RBP: 00007f5ddb95b090 R08: 0000000000000000 R09: 0000000000000000 [ 170.244243][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.244252][ T7207] R13: 0000000000000000 R14: 00007f5ddadb5fa0 R15: 00007ffd5afd92d8 [ 170.244273][ T7207] [ 170.544579][ T7207] syz_tun (unregistering): left allmulticast mode [ 170.650809][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 170.650823][ T30] audit: type=1400 audit(1746476216.312:426): avc: denied { ioctl } for pid=7214 comm="syz.4.327" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 170.683525][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.328'. [ 171.771256][ T5860] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 171.954815][ T30] audit: type=1400 audit(1746476217.622:427): avc: denied { mount } for pid=7227 comm="syz.1.331" name="/" dev="hugetlbfs" ino=12134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 172.020623][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 172.031431][ T5860] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.052858][ T5860] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 172.064067][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.073362][ T5860] usb 4-1: Product: syz [ 172.077531][ T5860] usb 4-1: Manufacturer: syz [ 172.090235][ T30] audit: type=1400 audit(1746476217.712:428): avc: denied { connect } for pid=7232 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.209908][ T5860] usb 4-1: SerialNumber: syz [ 172.452786][ T30] audit: type=1400 audit(1746476217.712:429): avc: denied { write } for pid=7232 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.476739][ T5860] usb 4-1: config 0 descriptor?? [ 172.529485][ T7245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.567001][ T30] audit: type=1400 audit(1746476218.232:430): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 172.930205][ T5860] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 172.980115][ T30] audit: type=1400 audit(1746476218.642:431): avc: denied { write } for pid=7252 comm="syz.0.337" path="socket:[13016]" dev="sockfs" ino=13016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.038629][ T30] audit: type=1400 audit(1746476218.652:432): avc: denied { ioctl } for pid=7252 comm="syz.0.337" path="socket:[13014]" dev="sockfs" ino=13014 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.139464][ T5860] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 173.181008][ T30] audit: type=1400 audit(1746476218.852:433): avc: denied { setopt } for pid=7270 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.359545][ T7283] block device autoloading is deprecated and will be removed. [ 173.582601][ T30] audit: type=1400 audit(1746476219.242:434): avc: denied { map } for pid=7270 comm="syz.1.341" path="socket:[12179]" dev="sockfs" ino=12179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.172077][ T30] audit: type=1400 audit(1746476219.242:435): avc: denied { read } for pid=7270 comm="syz.1.341" path="socket:[12179]" dev="sockfs" ino=12179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.312352][ T5860] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 174.810752][ T5860] usb 4-1: USB disconnect, device number 13 [ 175.331636][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 177.850969][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 177.850986][ T30] audit: type=1400 audit(1746476221.372:441): avc: denied { view } for pid=7321 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 178.012160][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 178.859275][ T30] audit: type=1400 audit(1746476224.523:442): avc: denied { sys_chroot } for pid=7333 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 178.942837][ T30] audit: type=1400 audit(1746476224.523:443): avc: denied { setgid } for pid=7333 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 178.970529][ T1205] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.983871][ T7335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.990719][ T30] audit: type=1400 audit(1746476224.523:444): avc: denied { setrlimit } for pid=7333 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 179.128679][ T30] audit: type=1400 audit(1746476224.793:445): avc: denied { mount } for pid=7336 comm="syz.4.344" name="/" dev="autofs" ino=13314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 179.343690][ T1205] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.371001][ T1205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.390119][ T1205] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 179.414448][ T1205] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.421458][ T30] audit: type=1400 audit(1746476224.903:446): avc: denied { watch_reads } for pid=7336 comm="syz.4.344" path="/74" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 179.430054][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.449132][ T30] audit: type=1400 audit(1746476225.093:447): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 179.510084][ T1205] usb 2-1: SerialNumber: syz [ 179.738042][ T7349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.342'. [ 179.898680][ T7351] loop9: detected capacity change from 0 to 7 [ 180.232845][ T1205] usb 2-1: 0:2 : does not exist [ 180.232914][ T1205] usb 2-1: unit 5 not found! [ 180.273582][ T7351] Dev loop9: unable to read RDB block 7 [ 180.279275][ T7351] loop9: unable to read partition table [ 180.285006][ T7351] loop9: partition table beyond EOD, truncated [ 180.291168][ T7351] loop_reread_partitions: partition scan of loop9 (被x󟣑 ) failed (rc=-5) [ 180.483511][ T1205] usb 2-1: USB disconnect, device number 9 [ 180.659995][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.667304][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 180.684050][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 180.691495][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 181.549814][ T30] audit: type=1400 audit(1746476227.213:448): avc: denied { setattr } for pid=7358 comm="syz.0.355" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 181.595106][ T7346] tipc: Enabling of bearer rejected, failed to enable media [ 181.627092][ T7366] lo: entered allmulticast mode [ 181.802682][ T7376] syz_tun: entered allmulticast mode [ 181.890130][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 181.984096][ T30] audit: type=1400 audit(1746476227.653:449): avc: denied { watch_mount } for pid=7377 comm="syz.4.359" path="/76" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 182.020134][ T59] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.050269][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 182.060493][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.120735][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.144095][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.163187][ T9] usb 3-1: config 0 descriptor?? [ 182.170073][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 182.176284][ T59] usb 2-1: no configurations [ 182.182921][ T59] usb 2-1: can't read configurations, error -22 [ 182.320189][ T59] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.617025][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 182.622733][ T59] usb 2-1: no configurations [ 182.628587][ T59] usb 2-1: can't read configurations, error -22 [ 182.635323][ T59] usb usb2-port1: attempt power cycle [ 182.712738][ T7384] siw: device registration error -23 [ 182.799943][ T7386] binder: BC_ATTEMPT_ACQUIRE not supported [ 182.892094][ T7386] binder: 7385:7386 ioctl c0306201 200000000540 returned -22 [ 182.930946][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 182.990490][ T59] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 183.076340][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 183.092528][ T59] usb 2-1: no configurations [ 183.101541][ T7386] netlink: 36 bytes leftover after parsing attributes in process `syz.3.361'. [ 183.113836][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 183.130473][ T59] usb 2-1: can't read configurations, error -22 [ 183.270170][ T59] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 183.290793][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 183.296454][ T59] usb 2-1: no configurations [ 183.301310][ T59] usb 2-1: can't read configurations, error -22 [ 183.307785][ T59] usb usb2-port1: unable to enumerate USB device [ 183.440121][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 183.592539][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 183.600408][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.615214][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 183.627291][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 183.642009][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 183.653790][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.669959][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 183.679359][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.687446][ T9] usb 4-1: Product: syz [ 183.691685][ T9] usb 4-1: Manufacturer: syz [ 183.696278][ T9] usb 4-1: SerialNumber: syz [ 183.703077][ T9] usb 4-1: config 0 descriptor?? [ 183.917259][ T9] appledisplay: Apple Cinema Display connected [ 184.139746][ T9] usb 4-1: USB disconnect, device number 14 [ 184.145817][ C0] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 184.165169][ T9] appledisplay: Apple Cinema Display disconnected [ 184.423261][ T30] audit: type=1400 audit(1746476230.063:450): avc: denied { watch watch_reads } for pid=7402 comm="syz.4.365" path="/78/file0" dev="tmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.790733][ T24] usb 3-1: USB disconnect, device number 13 [ 184.874760][ T7409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.654437][ T7427] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 185.663440][ T7427] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 185.708002][ T7417] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.729173][ T7417] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 185.797107][ T7417] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.808371][ T7417] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 185.829959][ T7417] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.843578][ T30] audit: type=1400 audit(1746476231.513:451): avc: denied { create } for pid=7441 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 185.850322][ T7417] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 185.883242][ T30] audit: type=1400 audit(1746476231.543:452): avc: denied { create } for pid=7424 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 185.998342][ T7450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.007300][ T7417] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.040134][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 186.161405][ T7417] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 186.171300][ T7417] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 186.262181][ T7417] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 186.355075][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 186.430398][ T9] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 186.438603][ T9] usb 3-1: config 0 has no interface number 1 [ 186.444981][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.486403][ T9] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 186.528647][ T9] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 186.542485][ T30] audit: type=1400 audit(1746476232.193:453): avc: denied { watch watch_reads } for pid=7455 comm="syz.4.375" path="/80/file1" dev="autofs" ino=13491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 186.636789][ T9] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 186.653502][ T9] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.703262][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 186.763063][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 169 [ 186.775966][ T7462] FAULT_INJECTION: forcing a failure. [ 186.775966][ T7462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.789476][ T7462] CPU: 0 UID: 0 PID: 7462 Comm: syz.0.377 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 186.789491][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 186.789497][ T7462] Call Trace: [ 186.789501][ T7462] [ 186.789505][ T7462] dump_stack_lvl+0x16c/0x1f0 [ 186.789522][ T7462] should_fail_ex+0x512/0x640 [ 186.789538][ T7462] _copy_to_user+0x32/0xd0 [ 186.789553][ T7462] simple_read_from_buffer+0xcb/0x170 [ 186.789570][ T7462] proc_fail_nth_read+0x197/0x270 [ 186.789586][ T7462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.789602][ T7462] ? rw_verify_area+0xcf/0x680 [ 186.789615][ T7462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.789630][ T7462] vfs_read+0x1de/0xc70 [ 186.789646][ T7462] ? __pfx___mutex_lock+0x10/0x10 [ 186.789660][ T7462] ? __pfx_vfs_read+0x10/0x10 [ 186.789678][ T7462] ? __fget_files+0x20e/0x3c0 [ 186.789703][ T7462] ksys_read+0x12a/0x240 [ 186.789717][ T7462] ? __pfx_ksys_read+0x10/0x10 [ 186.789731][ T7462] ? v4l2_ioctl+0x1c5/0x250 [ 186.789745][ T7462] do_syscall_64+0xcd/0x260 [ 186.789760][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.789771][ T7462] RIP: 0033:0x7f07d9f8d37c [ 186.789779][ T7462] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.789789][ T7462] RSP: 002b:00007f07dadd2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.789799][ T7462] RAX: ffffffffffffffda RBX: 00007f07da1b5fa0 RCX: 00007f07d9f8d37c [ 186.789805][ T7462] RDX: 000000000000000f RSI: 00007f07dadd20a0 RDI: 0000000000000009 [ 186.789811][ T7462] RBP: 00007f07dadd2090 R08: 0000000000000000 R09: 0000000000000000 [ 186.789817][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.789823][ T7462] R13: 0000000000000000 R14: 00007f07da1b5fa0 R15: 00007ffdb7177428 [ 186.789835][ T7462] [ 186.989528][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 186.990184][ T30] audit: type=1400 audit(1746476232.443:454): avc: denied { append } for pid=7461 comm="syz.0.377" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.998747][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.030261][ T9] usb 3-1: Product: syz [ 187.034402][ T9] usb 3-1: Manufacturer: syz [ 187.038964][ T9] usb 3-1: SerialNumber: syz [ 187.045878][ T9] usb 3-1: config 0 descriptor?? [ 187.054888][ T7440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.078134][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.086778][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.346516][ T9] usb 3-1: USB disconnect, device number 14 [ 188.893991][ T7497] 9pnet_fd: Insufficient options for proto=fd [ 188.922365][ T7497] netlink: 60 bytes leftover after parsing attributes in process `syz.2.383'. [ 189.030098][ T30] audit: type=1400 audit(1746476234.693:455): avc: denied { listen } for pid=7503 comm="syz.0.385" path=2F38302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 189.052892][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.920572][ T7526] syz_tun: entered allmulticast mode [ 190.842704][ T7541] FAULT_INJECTION: forcing a failure. [ 190.842704][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.965344][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz.2.391 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 190.965371][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 190.965381][ T7541] Call Trace: [ 190.965386][ T7541] [ 190.965393][ T7541] dump_stack_lvl+0x16c/0x1f0 [ 190.965419][ T7541] should_fail_ex+0x512/0x640 [ 190.965443][ T7541] _copy_from_user+0x2e/0xd0 [ 190.965466][ T7541] do_sock_getsockopt+0x5f4/0x800 [ 190.965490][ T7541] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 190.965510][ T7541] ? __fget_files+0x204/0x3c0 [ 190.965547][ T7541] __sys_getsockopt+0x12f/0x260 [ 190.965568][ T7541] __x64_sys_getsockopt+0xbd/0x160 [ 190.965582][ T7541] ? do_syscall_64+0x91/0x260 [ 190.965603][ T7541] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.965620][ T7541] do_syscall_64+0xcd/0x260 [ 190.965640][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.965656][ T7541] RIP: 0033:0x7f395c18e969 [ 190.965669][ T7541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.965684][ T7541] RSP: 002b:00007f395cf27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 190.965699][ T7541] RAX: ffffffffffffffda RBX: 00007f395c3b6080 RCX: 00007f395c18e969 [ 190.965708][ T7541] RDX: 0000000000000007 RSI: 0000000000000112 RDI: 0000000000000004 [ 190.965716][ T7541] RBP: 00007f395cf27090 R08: 00002000000000c0 R09: 0000000000000000 [ 190.965725][ T7541] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 190.965734][ T7541] R13: 0000000000000000 R14: 00007f395c3b6080 R15: 00007ffe8beb3c28 [ 190.965753][ T7541] [ 191.130831][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.760363][ T30] audit: type=1400 audit(1746476237.421:456): avc: denied { nlmsg_read } for pid=7548 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 193.700282][ T5820] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.889179][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.928053][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.984494][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 194.012310][ T5820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 194.044438][ T5820] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 194.054401][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'. [ 194.073800][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.114161][ T5820] usb 1-1: Product: syz [ 194.138716][ T5820] usb 1-1: Manufacturer: syz [ 194.152749][ T5820] usb 1-1: SerialNumber: syz [ 194.178374][ T5820] usb 1-1: config 0 descriptor?? [ 194.197158][ T5820] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 194.616081][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 194.715699][ T7619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.336192][ T5820] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 195.369537][ T5820] usb 1-1: USB disconnect, device number 10 [ 195.592920][ T7638] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 196.794202][ T7654] overlayfs: failed to resolve './file0': -2 [ 197.866765][ T7668] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 197.875779][ T7668] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 198.089387][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 199.105349][ T30] audit: type=1400 audit(1746476244.651:457): avc: denied { map } for pid=7680 comm="syz.0.419" path="socket:[15067]" dev="sockfs" ino=15067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.340887][ T30] audit: type=1400 audit(1746476244.661:458): avc: denied { read } for pid=7680 comm="syz.0.419" path="socket:[15067]" dev="sockfs" ino=15067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.210476][ T7689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 200.510084][ T30] audit: type=1400 audit(1746476246.161:459): avc: denied { map } for pid=7699 comm="syz.1.424" path="socket:[13968]" dev="sockfs" ino=13968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 200.756941][ T7711] syz_tun: entered allmulticast mode [ 201.030226][ T5932] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 201.782504][ T5932] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 201.797255][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.812790][ T5932] usb 5-1: config 0 descriptor?? [ 201.837109][ T5932] cp210x 5-1:0.0: cp210x converter detected [ 202.473691][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.498198][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.631401][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.428'. [ 203.405391][ T30] audit: type=1400 audit(1746476249.071:460): avc: denied { setopt } for pid=7729 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.488058][ T30] audit: type=1400 audit(1746476249.151:461): avc: denied { ioctl } for pid=7729 comm="syz.2.429" path="socket:[13997]" dev="sockfs" ino=13997 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 203.806821][ T30] audit: type=1400 audit(1746476249.231:462): avc: denied { cmd } for pid=7736 comm="syz.3.430" path="socket:[14000]" dev="sockfs" ino=14000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 203.830309][ T5820] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 203.907808][ T7746] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 203.916971][ T7746] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 204.011799][ T5932] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 204.027096][ T5932] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 204.251889][ T5932] usb 5-1: cp210x converter now attached to ttyUSB0 [ 204.264843][ T5932] usb 5-1: USB disconnect, device number 7 [ 204.273401][ T5932] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.299156][ T30] audit: type=1400 audit(1746476249.961:463): avc: denied { mount } for pid=7697 comm="syz.4.423" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 204.299408][ T5932] cp210x 5-1:0.0: device disconnected [ 204.333750][ T5820] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.334526][ T1205] IPVS: starting estimator thread 0... [ 204.353058][ T5820] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 204.400347][ T5820] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 204.409489][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.485905][ T30] audit: type=1400 audit(1746476250.151:464): avc: denied { create } for pid=7752 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.527102][ T7750] IPVS: using max 46 ests per chain, 110400 per kthread [ 204.535369][ T30] audit: type=1400 audit(1746476250.151:465): avc: denied { connect } for pid=7752 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.746083][ T30] audit: type=1400 audit(1746476250.411:466): avc: denied { accept } for pid=7729 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.848577][ T5820] usb 3-1: string descriptor 0 read error: -71 [ 204.871930][ T5820] usb 3-1: USB disconnect, device number 15 [ 204.998784][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.361722][ T30] audit: type=1400 audit(1746476250.621:467): avc: denied { create } for pid=7755 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.387138][ T30] audit: type=1400 audit(1746476250.631:468): avc: denied { setopt } for pid=7755 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.426822][ T30] audit: type=1400 audit(1746476250.631:469): avc: denied { bind } for pid=7755 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.487422][ T30] audit: type=1400 audit(1746476251.151:470): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 205.621618][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.632996][ T24] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.644091][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.653418][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.657477][ T30] audit: type=1400 audit(1746476251.321:471): avc: denied { search } for pid=7760 comm="syz.4.435" name="/" dev="configfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.994848][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.018114][ T24] usb 4-1: invalid MIDI out EP 0 [ 206.023639][ T30] audit: type=1400 audit(1746476251.321:472): avc: denied { read } for pid=7760 comm="syz.4.435" name="/" dev="configfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 206.317376][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.327783][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.818912][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 206.969747][ T7780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.979224][ T7780] No control pipe specified [ 207.033764][ T7784] FAULT_INJECTION: forcing a failure. [ 207.033764][ T7784] name failslab, interval 1, probability 0, space 0, times 0 [ 207.070117][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.1.442 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 207.070143][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 207.070157][ T7784] Call Trace: [ 207.070162][ T7784] [ 207.070169][ T7784] dump_stack_lvl+0x16c/0x1f0 [ 207.070195][ T7784] should_fail_ex+0x512/0x640 [ 207.070216][ T7784] ? __kmalloc_noprof+0xbf/0x510 [ 207.070244][ T7784] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 207.070268][ T7784] should_failslab+0xc2/0x120 [ 207.070286][ T7784] __kmalloc_noprof+0xd2/0x510 [ 207.070317][ T7784] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 207.070342][ T7784] ? cred_has_capability.isra.0+0x193/0x2f0 [ 207.070368][ T7784] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 207.070393][ T7784] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 207.070424][ T7784] ? bpf_lsm_capable+0x9/0x10 [ 207.070438][ T7784] ? security_capable+0x7e/0x260 [ 207.070462][ T7784] genl_rcv_msg+0x55c/0x800 [ 207.070488][ T7784] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.070510][ T7784] ? __pfx_nfc_genl_se_io+0x10/0x10 [ 207.070539][ T7784] ? __lock_acquire+0xaa4/0x1ba0 [ 207.070571][ T7784] netlink_rcv_skb+0x16a/0x440 [ 207.070589][ T7784] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.070612][ T7784] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.070644][ T7784] ? __pfx_down_read+0x10/0x10 [ 207.070669][ T7784] ? netlink_deliver_tap+0x1ae/0xd30 [ 207.070690][ T7784] genl_rcv+0x28/0x40 [ 207.070710][ T7784] netlink_unicast+0x53a/0x7f0 [ 207.070733][ T7784] ? __pfx_netlink_unicast+0x10/0x10 [ 207.070759][ T7784] netlink_sendmsg+0x8d1/0xdd0 [ 207.070782][ T7784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.070811][ T7784] ____sys_sendmsg+0xa95/0xc70 [ 207.070835][ T7784] ? copy_msghdr_from_user+0x10a/0x160 [ 207.070851][ T7784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.070884][ T7784] ___sys_sendmsg+0x134/0x1d0 [ 207.070903][ T7784] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.070952][ T7784] __sys_sendmsg+0x16d/0x220 [ 207.070969][ T7784] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.070994][ T7784] ? rcu_is_watching+0x12/0xc0 [ 207.071027][ T7784] do_syscall_64+0xcd/0x260 [ 207.071055][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.071072][ T7784] RIP: 0033:0x7f5ddab8e969 [ 207.071087][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.071103][ T7784] RSP: 002b:00007f5ddb95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.071119][ T7784] RAX: ffffffffffffffda RBX: 00007f5ddadb5fa0 RCX: 00007f5ddab8e969 [ 207.071130][ T7784] RDX: 0000000000008884 RSI: 0000200000002d80 RDI: 0000000000000005 [ 207.071140][ T7784] RBP: 00007f5ddb95b090 R08: 0000000000000000 R09: 0000000000000000 [ 207.071150][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.071160][ T7784] R13: 0000000000000000 R14: 00007f5ddadb5fa0 R15: 00007ffd5afd92d8 [ 207.071183][ T7784] [ 207.370941][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.386715][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.414410][ T7791] tipc: Started in network mode [ 207.419340][ T7791] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 207.430358][ T7791] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 207.438871][ T7791] tipc: Enabled bearer , priority 10 [ 207.506019][ T7792] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 207.515076][ T7792] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 207.610078][ T1205] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 207.870429][ T59] usb 4-1: USB disconnect, device number 15 [ 207.951235][ T7791] Illegal XDP return value 2572560823 on prog (id 89) dev N/A, expect packet loss! [ 207.953687][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.444'. [ 208.027813][ T7801] syzkaller1: entered promiscuous mode [ 208.056635][ T7801] syzkaller1: entered allmulticast mode [ 208.183202][ T7808] binder: 7806:7808 ioctl c0306201 2000000003c0 returned -14 [ 208.244987][ T7809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.390480][ T1205] usb 3-1: device descriptor read/64, error -71 [ 208.554449][ T9] tipc: Node number set to 1 [ 208.788353][ T1205] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 208.930729][ T1205] usb 3-1: device descriptor read/64, error -71 [ 209.040272][ T1205] usb usb3-port1: attempt power cycle [ 209.142327][ T7825] (syz.4.454,7825,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 209.154452][ T7825] (syz.4.454,7825,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 209.390101][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.440137][ T1205] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 209.477899][ T1205] usb 3-1: device descriptor read/8, error -71 [ 209.550103][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 209.561543][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 209.570559][ T9] usb 1-1: config 255 has an invalid interface number: 81 but max is 0 [ 209.583586][ T9] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 209.610884][ T9] usb 1-1: config 255 has no interface number 0 [ 209.626876][ T9] usb 1-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 209.638970][ T9] usb 1-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.651709][ T9] usb 1-1: config 255 interface 81 has no altsetting 0 [ 209.664499][ T9] usb 1-1: string descriptor 0 read error: -22 [ 209.675782][ T9] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 209.685872][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.707121][ T9] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.81/input/input11 [ 209.730188][ T1205] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 209.766089][ T1205] usb 3-1: device descriptor read/8, error -71 [ 209.840069][ T5861] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 209.882004][ T1205] usb usb3-port1: unable to enumerate USB device [ 209.906443][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 209.906457][ T30] audit: type=1400 audit(1746476255.571:483): avc: denied { append } for pid=7821 comm="syz.0.453" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 209.939131][ C0] usbtouchscreen 1-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 209.950408][ T1205] usb 1-1: USB disconnect, device number 11 [ 209.994175][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.025937][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.044980][ T5861] usb 5-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 210.054248][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.068917][ T5861] usb 5-1: config 0 descriptor?? [ 210.426462][ T30] audit: type=1326 audit(1746476255.971:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 210.451476][ T30] audit: type=1326 audit(1746476255.971:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 210.477579][ T5861] usbhid 5-1:0.0: can't add hid device: -71 [ 210.483564][ T5861] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 210.501210][ T5861] usb 5-1: USB disconnect, device number 8 [ 210.509113][ T30] audit: type=1326 audit(1746476255.971:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 210.554435][ T30] audit: type=1326 audit(1746476255.981:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 210.594283][ T30] audit: type=1326 audit(1746476256.001:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 210.622467][ T30] audit: type=1326 audit(1746476256.011:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 210.648577][ T30] audit: type=1326 audit(1746476256.011:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 210.699941][ T30] audit: type=1326 audit(1746476256.021:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ddab85927 code=0x7ffc0000 [ 210.748365][ T30] audit: type=1326 audit(1746476256.021:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7835 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ddab2ab39 code=0x7ffc0000 [ 210.777902][ T7847] fuse: Bad value for 'fd' [ 210.854415][ T7850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.008919][ T7852] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 211.018027][ T7852] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 211.950164][ T59] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 212.105167][ T59] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.124541][ T59] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 212.148413][ T59] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 212.251099][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.276075][ T59] usb 3-1: config 0 descriptor?? [ 212.285422][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 213.297343][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 213.427608][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.487915][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.491733][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 213.526861][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 213.550596][ T59] usb 3-1: media controller created [ 213.557386][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.595179][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 213.605274][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 213.612732][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.629769][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 213.655703][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 213.679401][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 213.767022][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 213.780240][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 213.793198][ T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 213.793257][ T7879] tipc: Started in network mode [ 213.807794][ T7879] tipc: Node identity 2abed33c67cb, cluster identity 4711 [ 213.815582][ T7879] tipc: Enabled bearer , priority 0 [ 213.844147][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 213.863929][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.874089][ T59] dvb-usb: error while querying for an remote control event. [ 213.884856][ T7879] syzkaller0: entered promiscuous mode [ 213.885022][ T24] usb 4-1: Product: syz [ 213.895679][ T24] usb 4-1: Manufacturer: syz [ 213.899275][ T7879] syzkaller0: entered allmulticast mode [ 213.906386][ T24] usb 4-1: SerialNumber: syz [ 213.932914][ T7879] tipc: Resetting bearer [ 213.940570][ T24] usb 4-1: config 0 descriptor?? [ 214.057028][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 214.100869][ T24] dvb-usb: error while querying for an remote control event. [ 214.186435][ T7890] fuse: Bad value for 'fd' [ 214.322017][ T7878] tipc: Resetting bearer [ 214.333690][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 214.363487][ T24] dvb-usb: error while querying for an remote control event. [ 214.579371][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 214.609702][ T24] dvb-usb: error while querying for an remote control event. [ 214.799712][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 214.815442][ T59] usb 3-1: USB disconnect, device number 20 [ 214.852739][ T24] dvb-usb: error while querying for an remote control event. [ 214.919458][ T5820] tipc: Node number set to 1299567420 [ 214.973108][ T59] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 215.016877][ T7897] No control pipe specified [ 215.102541][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 215.102559][ T30] audit: type=1400 audit(1746476260.751:554): avc: denied { module_request } for pid=7891 comm="syz.1.472" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 215.153368][ T30] audit: type=1400 audit(1746476260.771:555): avc: denied { write } for pid=7902 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.221225][ T59] usb 4-1: USB disconnect, device number 16 [ 215.262199][ T30] audit: type=1400 audit(1746476260.811:556): avc: denied { mount } for pid=7891 comm="syz.1.472" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 215.740232][ T59] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 215.935066][ T59] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 215.944982][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.953399][ T59] usb 5-1: Product: syz [ 215.957627][ T59] usb 5-1: Manufacturer: syz [ 215.962327][ T59] usb 5-1: SerialNumber: syz [ 215.969111][ T59] usb 5-1: config 0 descriptor?? [ 215.977442][ T59] gspca_main: touptek-2.14.0 probing 0547:6801 [ 216.210547][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.219600][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.229771][ T59] usb 5-1: USB disconnect, device number 9 [ 216.473197][ T7878] tipc: Disabling bearer [ 216.514430][ T30] audit: type=1400 audit(1746476262.181:557): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 216.589937][ T7920] SELinux: syz.1.477 (7920) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 216.609871][ T30] audit: type=1400 audit(1746476262.271:558): avc: denied { setopt } for pid=7919 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.658899][ T7927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.672845][ T7929] fuse: Bad value for 'fd' [ 216.874511][ T59] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 217.040543][ T59] usb 2-1: Using ep0 maxpacket: 8 [ 217.134709][ T59] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 217.375799][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.410965][ T59] usb 2-1: Product: syz [ 217.438185][ T59] usb 2-1: Manufacturer: syz [ 217.466680][ T59] usb 2-1: SerialNumber: syz [ 217.561595][ T59] usb 2-1: config 0 descriptor?? [ 217.576220][ T59] usb 2-1: selecting invalid altsetting 3 [ 217.582636][ T59] comedi comedi0: could not set alternate setting 3 in high speed [ 217.591362][ T59] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 217.606051][ T59] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 218.020208][ T59] usb 2-1: USB disconnect, device number 14 [ 218.072842][ T7943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.807241][ T7962] veth0_vlan: entered allmulticast mode [ 218.843360][ T7962] veth0_vlan: left promiscuous mode [ 218.854830][ T7962] veth0_vlan: entered promiscuous mode [ 218.935117][ T7962] lo speed is unknown, defaulting to 1000 [ 218.942158][ T7962] lo speed is unknown, defaulting to 1000 [ 219.775465][ T7966] input: syz0 as /devices/virtual/input/input14 [ 219.818873][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 219.926296][ T30] audit: type=1400 audit(1746476265.591:559): avc: denied { bind } for pid=7969 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.958957][ T7968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.563501][ T30] audit: type=1400 audit(1746476266.231:560): avc: denied { read } for pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=2931 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 220.615192][ T30] audit: type=1400 audit(1746476266.231:561): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2931 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 220.646062][ T30] audit: type=1400 audit(1746476266.231:562): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2931 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 221.476842][ T30] audit: type=1400 audit(1746476266.341:563): avc: denied { write } for pid=7980 comm="syz.0.496" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 221.912075][ T30] audit: type=1400 audit(1746476267.581:564): avc: denied { read write } for pid=7993 comm="syz.3.499" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.937465][ T30] audit: type=1400 audit(1746476267.581:565): avc: denied { open } for pid=7993 comm="syz.3.499" path="/107/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.966567][ T30] audit: type=1800 audit(1746476267.631:566): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.499" name="/" dev="9p" ino=2 res=0 errno=0 [ 222.023080][ T30] audit: type=1400 audit(1746476267.691:567): avc: denied { create } for pid=8004 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.060340][ T30] audit: type=1400 audit(1746476267.721:568): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 222.080770][ T30] audit: type=1400 audit(1746476267.721:569): avc: denied { read } for pid=8004 comm="syz.0.503" path="socket:[15808]" dev="sockfs" ino=15808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.257214][ T8014] gfs2: gfs2 mount does not exist [ 223.075955][ T8020] mkiss: ax0: crc mode is auto. [ 223.134398][ T8025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.730154][ T5820] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 225.893041][ T8071] netlink: 56 bytes leftover after parsing attributes in process `syz.1.520'. [ 226.011978][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 226.239334][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 226.291730][ T5820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 226.295174][ T8073] syz.3.522: attempt to access beyond end of device [ 226.295174][ T8073] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 226.315508][ T8073] hfs: can't find a HFS filesystem on dev loop3 [ 226.489724][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.509213][ T7296] Bluetooth: hci5: Frame reassembly failed (-84) [ 226.518081][ T7296] Bluetooth: hci5: Frame reassembly failed (-84) [ 226.585417][ T5820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.602229][ T5820] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 226.614436][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.624501][ T5820] usb 1-1: Product: syz [ 226.636387][ T5820] usb 1-1: Manufacturer: syz [ 226.642563][ T5820] usb 1-1: SerialNumber: syz [ 226.649686][ T8076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.659720][ T5820] usb 1-1: config 0 descriptor?? [ 226.667175][ T8065] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.677720][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 226.699198][ T5820] port100 1-1:0.0: NFC: Could not get supported command types [ 227.053142][ T8089] lo speed is unknown, defaulting to 1000 [ 227.061018][ T8089] lo speed is unknown, defaulting to 1000 [ 227.138137][ T1205] usb 1-1: USB disconnect, device number 12 [ 228.540125][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 230.687866][ T8129] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 230.696845][ T8129] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 231.238432][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 231.238448][ T30] audit: type=1400 audit(1746476276.901:572): avc: denied { setopt } for pid=8139 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 231.265030][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.567501][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.575264][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.582969][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.590625][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.598311][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.605996][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.613663][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.621431][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.629085][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.636831][ T8151] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 232.691962][ T30] audit: type=1400 audit(1746476278.321:573): avc: denied { connect } for pid=8143 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.370075][ T5932] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 233.531727][ T5932] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.543057][ T5932] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 233.585005][ T5932] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 233.620732][ T5932] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x87 has invalid maxpacket 42124, setting to 1024 [ 233.652049][ T5932] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.679315][ T5932] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.692825][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.850261][ T5932] usb 3-1: Product: syz [ 233.854449][ T5932] usb 3-1: Manufacturer: syz [ 233.859039][ T5932] usb 3-1: SerialNumber: syz [ 234.010277][ T59] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 234.279854][ T8183] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 234.288856][ T8183] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 234.324042][ T59] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.434073][ T59] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 234.566430][ T59] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 234.665468][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.071939][ T30] audit: type=1326 audit(1746476280.681:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 235.136283][ T59] usb 4-1: string descriptor 0 read error: -71 [ 235.139353][ T30] audit: type=1326 audit(1746476280.681:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 235.820209][ T30] audit: type=1326 audit(1746476280.691:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 235.854858][ T30] audit: type=1326 audit(1746476280.721:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 235.879633][ T5932] cdc_ncm 3-1:1.0: bind() failure [ 235.883151][ T30] audit: type=1326 audit(1746476280.721:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 235.921552][ T5932] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 235.927004][ T59] usb 4-1: USB disconnect, device number 17 [ 235.934153][ T5932] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 235.941821][ T30] audit: type=1326 audit(1746476280.731:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 235.944413][ T5932] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 235.976731][ T30] audit: type=1326 audit(1746476280.731:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.045771][ T5932] usb 3-1: USB disconnect, device number 21 [ 236.179623][ T8199] syz.4.557: attempt to access beyond end of device [ 236.179623][ T8199] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 236.192533][ T30] audit: type=1326 audit(1746476280.801:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.215892][ T8199] hfs: can't find a HFS filesystem on dev loop4 [ 236.364020][ T30] audit: type=1326 audit(1746476280.801:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.481548][ T30] audit: type=1326 audit(1746476280.801:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.617295][ T30] audit: type=1326 audit(1746476280.801:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.640759][ T30] audit: type=1326 audit(1746476280.801:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.673361][ T30] audit: type=1326 audit(1746476280.801:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.793578][ T30] audit: type=1326 audit(1746476280.801:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.816934][ T30] audit: type=1326 audit(1746476281.521:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.863179][ T30] audit: type=1326 audit(1746476281.521:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.907410][ T30] audit: type=1326 audit(1746476281.521:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 236.990063][ T30] audit: type=1326 audit(1746476281.521:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.0.554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f07d9f8e969 code=0x7ffc0000 [ 237.462288][ T8227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.270993][ T8231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.174430][ T8252] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 241.666987][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 241.667002][ T30] audit: type=1400 audit(1746476287.331:605): avc: denied { write } for pid=8289 comm="syz.1.584" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.699780][ T30] audit: type=1400 audit(1746476287.341:606): avc: denied { add_name } for pid=8289 comm="syz.1.584" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.721604][ T30] audit: type=1400 audit(1746476287.341:607): avc: denied { create } for pid=8289 comm="syz.1.584" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 241.745220][ T30] audit: type=1400 audit(1746476287.341:608): avc: denied { associate } for pid=8289 comm="syz.1.584" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 241.766677][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.816728][ T5820] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 242.006461][ T5820] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 242.109777][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.118547][ T5820] usb 4-1: Product: syz [ 242.122808][ T5820] usb 4-1: Manufacturer: syz [ 242.127444][ T5820] usb 4-1: SerialNumber: syz [ 242.160058][ T5932] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.169016][ T5820] usb 4-1: config 0 descriptor?? [ 242.310084][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 242.328469][ T5932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 242.355694][ T5932] usb 2-1: config 1 has an invalid interface number: 65 but max is 0 [ 242.388635][ T5932] usb 2-1: config 1 has no interface number 0 [ 242.397991][ T5932] usb 2-1: config 1 interface 65 has no altsetting 0 [ 242.411206][ T5932] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 242.424071][ T5820] usb 4-1: USB disconnect, device number 18 [ 242.426596][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.481835][ T5932] usb 2-1: Product: syz [ 242.486158][ T5932] usb 2-1: Manufacturer: syz [ 242.490987][ T5932] usb 2-1: SerialNumber: syz [ 242.743002][ T5932] kalmia 2-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 242.776818][ T5932] kalmia 2-1:1.65: probe with driver kalmia failed with error -22 [ 242.862080][ T5932] usb 2-1: USB disconnect, device number 15 [ 244.084660][ T59] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 244.192630][ T8339] vlan2: entered promiscuous mode [ 244.197724][ T8339] veth0_virt_wifi: entered promiscuous mode [ 244.204636][ T8339] vlan2: entered allmulticast mode [ 244.209780][ T8339] veth0_virt_wifi: entered allmulticast mode [ 244.505310][ T59] usb 4-1: Using ep0 maxpacket: 8 [ 244.515800][ T59] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 244.532182][ T59] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.554305][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.605517][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.634226][ T59] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 244.644714][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.666479][ T59] usb 4-1: Product: syz [ 244.696714][ T59] usb 4-1: Manufacturer: syz [ 244.712123][ T59] usb 4-1: SerialNumber: syz [ 244.819724][ T8343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.846409][ T8343] SELinux: Context system_u:object_r:tzdata_exec_t:s0 is not valid (left unmapped). [ 245.562538][ T59] usb 4-1: config 0 descriptor?? [ 245.568195][ T8327] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.582636][ T30] audit: type=1400 audit(1746476290.521:609): avc: denied { relabelto } for pid=8341 comm="syz.0.600" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tzdata_exec_t:s0" [ 245.586292][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 245.609645][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.639148][ T30] audit: type=1400 audit(1746476290.531:610): avc: denied { associate } for pid=8341 comm="syz.0.600" name="cgroup.procs" dev="cgroup" ino=178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tzdata_exec_t:s0" [ 245.778396][ T59] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 245.783603][ T8352] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.795041][ T8352] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.803716][ T8352] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.812428][ T8352] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.692681][ T8352] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 246.729769][ T59] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 246.820357][ C1] powermate: config urb returned -71 [ 246.825937][ C1] powermate: config urb returned -71 [ 246.831307][ C1] powermate: config urb returned -71 [ 246.836975][ C1] powermate: config urb returned -71 [ 246.878424][ T59] usb 4-1: USB disconnect, device number 19 [ 246.878454][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 246.920912][ T5820] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 247.118883][ T5820] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 247.200057][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.219639][ T5820] usb 2-1: Product: syz [ 247.239907][ T5820] usb 2-1: Manufacturer: syz [ 247.244819][ T5820] usb 2-1: SerialNumber: syz [ 247.270894][ T5820] usb 2-1: config 0 descriptor?? [ 247.379692][ T8374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.503912][ T5820] usb-storage 2-1:0.0: USB Mass Storage device detected [ 247.672290][ T5861] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 247.952633][ T1205] usb 2-1: USB disconnect, device number 16 [ 249.005044][ T8388] FAULT_INJECTION: forcing a failure. [ 249.005044][ T8388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.018694][ T8388] CPU: 1 UID: 0 PID: 8388 Comm: syz.4.613 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 249.018715][ T8388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 249.018723][ T8388] Call Trace: [ 249.018728][ T8388] [ 249.018733][ T8388] dump_stack_lvl+0x16c/0x1f0 [ 249.018759][ T8388] should_fail_ex+0x512/0x640 [ 249.018782][ T8388] _copy_from_user+0x2e/0xd0 [ 249.018805][ T8388] binder_ioctl+0x57a/0x7300 [ 249.018834][ T8388] ? tomoyo_path_number_perm+0x18d/0x580 [ 249.018859][ T8388] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.018887][ T8388] ? __pfx_binder_ioctl+0x10/0x10 [ 249.018906][ T8388] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 249.018931][ T8388] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 249.018955][ T8388] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 249.018980][ T8388] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 249.019010][ T8388] ? hook_file_ioctl_common+0x145/0x410 [ 249.019032][ T8388] ? selinux_file_ioctl+0x180/0x270 [ 249.019054][ T8388] ? selinux_file_ioctl+0xb4/0x270 [ 249.019079][ T8388] ? __pfx_binder_ioctl+0x10/0x10 [ 249.019100][ T8388] __x64_sys_ioctl+0x190/0x200 [ 249.019122][ T8388] do_syscall_64+0xcd/0x260 [ 249.019145][ T8388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.019162][ T8388] RIP: 0033:0x7f826a98e969 [ 249.019176][ T8388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.019191][ T8388] RSP: 002b:00007f826b76c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.019215][ T8388] RAX: ffffffffffffffda RBX: 00007f826abb5fa0 RCX: 00007f826a98e969 [ 249.019226][ T8388] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 249.019236][ T8388] RBP: 00007f826b76c090 R08: 0000000000000000 R09: 0000000000000000 [ 249.019245][ T8388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.019255][ T8388] R13: 0000000000000000 R14: 00007f826abb5fa0 R15: 00007ffd7e0ee1d8 [ 249.019277][ T8388] [ 249.216791][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.582901][ T8388] binder: 8387:8388 ioctl c0306201 2000000001c0 returned -14 [ 249.738838][ T5861] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 249.748354][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.759072][ T5861] usb 3-1: Product: syz [ 249.765725][ T5861] usb 3-1: Manufacturer: syz [ 249.772943][ T5861] usb 3-1: SerialNumber: syz [ 249.779747][ T5861] usb 3-1: config 0 descriptor?? [ 249.826395][ T5861] go7007 3-1:0.0: Sensoray 2250 found [ 249.832201][ T5861] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 250.043182][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 250.062480][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 250.220282][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 250.235675][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 250.254932][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 250.265794][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.276293][ T9] usb 5-1: Product: syz [ 250.284724][ T9] usb 5-1: Manufacturer: syz [ 250.289425][ T8372] hsr_slave_1 (unregistering): left promiscuous mode [ 250.289519][ T9] usb 5-1: SerialNumber: syz [ 250.305881][ T9] usb 5-1: config 0 descriptor?? [ 250.345755][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 250.360660][ T5820] usb 3-1: USB disconnect, device number 22 [ 250.403259][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 250.474453][ T30] audit: type=1400 audit(1746476296.141:611): avc: denied { watch } for pid=8398 comm="syz.3.616" path="/133" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 250.510174][ T30] audit: type=1400 audit(1746476296.141:612): avc: denied { watch_sb } for pid=8398 comm="syz.3.616" path="/133" dev="tmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 250.762288][ T5861] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 250.835747][ T30] audit: type=1400 audit(1746476296.501:613): avc: denied { create } for pid=8406 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 250.869327][ T30] audit: type=1400 audit(1746476296.501:614): avc: denied { getopt } for pid=8406 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 250.954782][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 250.999374][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 251.104806][ T5861] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 251.136931][ T5861] usb 2-1: config 0 has no interface number 0 [ 251.181868][ T5861] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.214226][ T5861] usb 2-1: config 0 interface 85 has no altsetting 0 [ 251.231736][ T5861] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 251.244981][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.258947][ T5861] usb 2-1: Product: syz [ 251.263965][ T5861] usb 2-1: Manufacturer: syz [ 251.269828][ T5861] usb 2-1: SerialNumber: syz [ 251.458400][ T5861] usb 2-1: config 0 descriptor?? [ 251.793050][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 251.830198][ T9] em28xx 5-1:0.0: board has no eeprom [ 252.119912][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 252.170105][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 252.184443][ T9] usb 5-1: USB disconnect, device number 10 [ 252.191082][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 252.204690][ T10] em28xx 5-1:0.0: Binding DVB extension [ 252.260585][ T5861] appletouch 2-1:0.85: Geyser mode initialized. [ 252.274779][ T30] audit: type=1400 audit(1746476297.941:615): avc: denied { bind } for pid=8421 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.275970][ T10] em28xx 5-1:0.0: Registering input extension [ 252.328316][ T5861] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input21 [ 252.353149][ T30] audit: type=1400 audit(1746476297.971:616): avc: denied { create } for pid=8428 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 252.393626][ T30] audit: type=1400 audit(1746476297.971:617): avc: denied { listen } for pid=8421 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.460793][ T30] audit: type=1400 audit(1746476297.971:618): avc: denied { accept } for pid=8421 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.471277][ T9] em28xx 5-1:0.0: Closing input extension [ 252.480902][ T8432] validate_nla: 44 callbacks suppressed [ 252.480916][ T8432] netlink: 'syz.0.622': attribute type 7 has an invalid length. [ 252.602152][ T9] em28xx 5-1:0.0: Freeing device [ 252.615501][ T8432] : entered promiscuous mode [ 252.634478][ T8434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.622'. [ 253.805034][ T8438] fuse: Bad value for 'fd' [ 253.874918][ T24] usb 2-1: USB disconnect, device number 17 [ 253.951769][ T24] appletouch 2-1:0.85: input: appletouch disconnected [ 253.970071][ T8440] netlink: 'syz.4.627': attribute type 10 has an invalid length. [ 254.002376][ T8440] bond0: (slave wlan1): Opening slave failed [ 254.014348][ T8440] 9pnet_fd: Insufficient options for proto=fd [ 254.204338][ T8448] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 254.299663][ T30] audit: type=1400 audit(1746476299.961:619): avc: denied { kexec_image_load } for pid=8437 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 254.398389][ T59] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 254.500233][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 254.667526][ T59] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.790599][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 254.814813][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.837575][ T24] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 254.848306][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.865260][ T24] usb 4-1: Product: syz [ 254.872635][ T24] usb 4-1: Manufacturer: syz [ 254.879710][ T24] usb 4-1: SerialNumber: syz [ 254.889913][ T24] usb 4-1: config 0 descriptor?? [ 254.900022][ T24] usb 4-1: bad CDC descriptors [ 254.905366][ T24] usb 4-1: unsupported MDLM descriptors [ 255.266474][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.274275][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.316519][ T5820] usb 4-1: USB disconnect, device number 20 [ 255.474683][ T30] audit: type=1400 audit(1746476301.131:620): avc: denied { create } for pid=8461 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 255.905696][ T8471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.106233][ T8473] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 256.115579][ T8473] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 257.329804][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 257.362491][ T9] hid-generic 0000:0004:0009.0004: unknown main item tag 0x0 [ 257.373731][ T9] hid-generic 0000:0004:0009.0004: hidraw0: HID v0.04 Device [syz0] on syz1 [ 257.507240][ T30] audit: type=1400 audit(1746476303.171:621): avc: denied { connect } for pid=8491 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 257.670841][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 257.820069][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 258.563921][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.601655][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 258.614149][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.625218][ T9] usb 5-1: Product: syz [ 258.631408][ T9] usb 5-1: Manufacturer: syz [ 258.636151][ T9] usb 5-1: SerialNumber: syz [ 258.650761][ T9] usb 5-1: config 0 descriptor?? [ 258.671755][ T9] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 258.686760][ T9] gspca_stv06xx: st6422 sensor detected [ 258.773352][ T8508] dlm: non-version read from control device 8224 [ 260.092625][ T9] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 260.178821][ T9] usb 5-1: USB disconnect, device number 11 [ 260.214287][ T30] audit: type=1400 audit(1746476305.671:622): avc: denied { map } for pid=8509 comm="syz.1.649" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 260.308917][ T8519] netlink: 44 bytes leftover after parsing attributes in process `syz.0.650'. [ 261.155549][ T8524] netlink: 32 bytes leftover after parsing attributes in process `syz.3.651'. [ 262.264135][ T8536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.654'. [ 263.224515][ T8542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.243056][ T8541] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 263.580445][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 263.750544][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 263.757289][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 263.771559][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.782285][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.880049][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 263.941055][ T10] usb 4-1: Product: syz [ 263.948131][ T10] usb 4-1: Manufacturer: syz [ 263.964583][ T10] usb 4-1: SerialNumber: syz [ 263.980049][ T59] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 264.002998][ T10] usb 4-1: config 0 descriptor?? [ 264.024320][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 264.047444][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 264.092173][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 264.104384][ T9] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.137629][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 264.143101][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 264.161390][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 264.172077][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 264.184619][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 264.186957][ T59] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 264.200001][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.206649][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.219162][ T59] usb 1-1: Product: syz [ 264.227203][ T59] usb 1-1: Manufacturer: syz [ 264.234221][ T9] usb 3-1: Product: 穧킝ﺍ螕璮䭯ਪ鈏䭀렩ಌ뎞勧鰭噯좼度䆠ꞇ鞚ᥟ턓偆ථ鯴誹牮뜶踄៰豏貤 삘ꈹﺯ᠎ [ 264.244024][ T59] usb 1-1: SerialNumber: syz [ 264.255717][ T59] usb 1-1: config 0 descriptor?? [ 264.280131][ T9] usb 3-1: Manufacturer: ᜬݝ䷷⑖龃秺䁮ᷰ⡵꽸倽鐬首蓸炧⅞ꀾ캅᫠᳝碭襷雮囯棓῝螔倡鰧졪텫䛀묛̾㩼쯋ড়ᚘ헿ﾹ嫔㠅⸵帡鑶 [ 264.419155][ T9] usb 3-1: SerialNumber: ⵒꩀ㷮㫟溯嘞渣벦뀡⓿ᔪ洍﬏嫨뷙啕ׅ兙뮏꽱鄖䜂猴왩એ㍋蘍뎈ᐧ䝽ᵽ䘇呅⚲㱤䔮뿖帔ﯠ⮞飽ꂭ␡஢層౮穜偅⇚螹䛐텝ం䠢溷虝ꂕ튾㹑꼻Ⴚ㎗턮蹷㏙ꑢ䭿൴ᾇ⡩职偋ⁱ₿녅踳䈩ત㧕絪ꅭ쎗醼疿优ᘞ [ 264.467328][ T59] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 264.654857][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 264.688220][ T8567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.694045][ T59] usb 1-1: USB disconnect, device number 13 [ 264.985367][ T9] usb 3-1: USB disconnect, device number 23 [ 265.071930][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 265.088718][ T10] em28xx 4-1:0.0: board has no eeprom [ 265.400088][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 265.407969][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 265.413646][ T9] em28xx 4-1:0.0: Binding DVB extension [ 265.427865][ T10] usb 4-1: USB disconnect, device number 21 [ 265.456585][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 265.525833][ T9] em28xx 4-1:0.0: Registering input extension [ 265.534157][ T10] em28xx 4-1:0.0: Closing input extension [ 265.561991][ T10] em28xx 4-1:0.0: Freeing device [ 265.705418][ T8586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'. [ 266.211788][ T8590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.823044][ T30] audit: type=1326 audit(1746476314.481:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 269.280157][ T5820] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 269.474960][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.487591][ T30] audit: type=1326 audit(1746476314.481:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 269.519133][ T30] audit: type=1326 audit(1746476314.481:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ddab8d41f code=0x7ffc0000 [ 269.542574][ T30] audit: type=1326 audit(1746476314.481:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 269.558371][ T5820] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 269.605390][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.614169][ T5820] usb 4-1: Product: syz [ 269.622930][ T8615] No control pipe specified [ 269.630014][ T5820] usb 4-1: Manufacturer: syz [ 269.634635][ T5820] usb 4-1: SerialNumber: syz [ 269.659536][ T30] audit: type=1326 audit(1746476314.481:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 269.689050][ T5820] usb 4-1: config 0 descriptor?? [ 269.833315][ T5820] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 269.833378][ T30] audit: type=1326 audit(1746476314.491:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ddab85927 code=0x7ffc0000 [ 270.002854][ T30] audit: type=1326 audit(1746476314.491:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ddab2ab39 code=0x7ffc0000 [ 270.307041][ T30] audit: type=1326 audit(1746476314.491:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 270.339771][ T30] audit: type=1326 audit(1746476314.491:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ddab8e969 code=0x7ffc0000 [ 270.439468][ T30] audit: type=1326 audit(1746476314.521:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.1.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5ddab85927 code=0x7ffc0000 [ 271.202014][ T8639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.992122][ T5820] usb 4-1: USB disconnect, device number 22 [ 272.643356][ T8656] FAULT_INJECTION: forcing a failure. [ 272.643356][ T8656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.656783][ T8656] CPU: 1 UID: 0 PID: 8656 Comm: syz.3.684 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 272.656806][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 272.656816][ T8656] Call Trace: [ 272.656823][ T8656] [ 272.656830][ T8656] dump_stack_lvl+0x16c/0x1f0 [ 272.656856][ T8656] should_fail_ex+0x512/0x640 [ 272.656881][ T8656] _copy_from_user+0x2e/0xd0 [ 272.656906][ T8656] kstrtouint_from_user+0xd6/0x1d0 [ 272.656930][ T8656] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 272.656946][ T8656] ? __lock_acquire+0xaa4/0x1ba0 [ 272.656983][ T8656] proc_fail_nth_write+0x83/0x250 [ 272.657008][ T8656] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 272.657039][ T8656] vfs_write+0x25c/0x1180 [ 272.657061][ T8656] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 272.657088][ T8656] ? __pfx___mutex_lock+0x10/0x10 [ 272.657110][ T8656] ? __pfx_vfs_write+0x10/0x10 [ 272.657140][ T8656] ? __fget_files+0x20e/0x3c0 [ 272.657172][ T8656] ksys_write+0x12a/0x240 [ 272.657195][ T8656] ? __pfx_ksys_write+0x10/0x10 [ 272.657226][ T8656] do_syscall_64+0xcd/0x260 [ 272.657249][ T8656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.657265][ T8656] RIP: 0033:0x7f206f58d41f [ 272.657279][ T8656] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 272.657295][ T8656] RSP: 002b:00007f2070457030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 272.657311][ T8656] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f206f58d41f [ 272.657322][ T8656] RDX: 0000000000000001 RSI: 00007f20704570a0 RDI: 0000000000000008 [ 272.657332][ T8656] RBP: 00007f2070457090 R08: 0000000000000000 R09: 0000000000000000 [ 272.657341][ T8656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 272.657351][ T8656] R13: 0000000000000000 R14: 00007f206f7b6160 R15: 00007ffe8e9e6728 [ 272.657374][ T8656] [ 272.842777][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.030630][ T8661] FAULT_INJECTION: forcing a failure. [ 273.030630][ T8661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.065174][ T8661] CPU: 0 UID: 0 PID: 8661 Comm: syz.3.688 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 273.065200][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 273.065209][ T8661] Call Trace: [ 273.065214][ T8661] [ 273.065218][ T8661] dump_stack_lvl+0x16c/0x1f0 [ 273.065237][ T8661] should_fail_ex+0x512/0x640 [ 273.065253][ T8661] _copy_to_user+0x32/0xd0 [ 273.065268][ T8661] simple_read_from_buffer+0xcb/0x170 [ 273.065285][ T8661] proc_fail_nth_read+0x197/0x270 [ 273.065301][ T8661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.065316][ T8661] ? rw_verify_area+0xcf/0x680 [ 273.065329][ T8661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.065345][ T8661] vfs_read+0x1de/0xc70 [ 273.065362][ T8661] ? __pfx___mutex_lock+0x10/0x10 [ 273.065376][ T8661] ? __pfx_vfs_read+0x10/0x10 [ 273.065394][ T8661] ? __fget_files+0x20e/0x3c0 [ 273.065415][ T8661] ksys_read+0x12a/0x240 [ 273.065430][ T8661] ? __pfx_ksys_read+0x10/0x10 [ 273.065443][ T8661] ? rcu_is_watching+0x12/0xc0 [ 273.065460][ T8661] do_syscall_64+0xcd/0x260 [ 273.065475][ T8661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.065485][ T8661] RIP: 0033:0x7f206f58d37c [ 273.065495][ T8661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.065505][ T8661] RSP: 002b:00007f2070499030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.065515][ T8661] RAX: ffffffffffffffda RBX: 00007f206f7b5fa0 RCX: 00007f206f58d37c [ 273.065521][ T8661] RDX: 000000000000000f RSI: 00007f20704990a0 RDI: 0000000000000003 [ 273.065527][ T8661] RBP: 00007f2070499090 R08: 0000000000000000 R09: 0000000000000000 [ 273.065533][ T8661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.065539][ T8661] R13: 0000000000000000 R14: 00007f206f7b5fa0 R15: 00007ffe8e9e6728 [ 273.065552][ T8661] [ 273.371759][ T8664] No control pipe specified [ 273.380141][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 274.256737][ T10] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.268649][ T10] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 274.279670][ T10] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 274.289071][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.392405][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 274.392436][ T30] audit: type=1400 audit(1746476320.051:645): avc: denied { write } for pid=8670 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.697233][ T10] usb 5-1: string descriptor 0 read error: -71 [ 274.703854][ T8678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.067276][ T10] usb 5-1: USB disconnect, device number 12 [ 275.335687][ T30] audit: type=1400 audit(1746476321.001:646): avc: denied { create } for pid=8681 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 275.355967][ T30] audit: type=1400 audit(1746476321.001:647): avc: denied { read } for pid=8681 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 275.576894][ T8686] overlayfs: failed to resolve './file1': -2 [ 275.951388][ T8689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.334576][ T8717] netlink: 132 bytes leftover after parsing attributes in process `syz.1.704'. [ 277.837478][ T8722] syz.4.703: attempt to access beyond end of device [ 277.837478][ T8722] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 277.851470][ T8722] hfs: can't find a HFS filesystem on dev loop4 [ 278.340018][ T1205] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 278.870018][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 278.942468][ T1205] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.953579][ T1205] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.963442][ T1205] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.979720][ T1205] usb 3-1: config 0 interface 0 has no altsetting 0 [ 278.986551][ T1205] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 278.995730][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.110702][ T1205] usb 3-1: config 0 descriptor?? [ 279.192997][ T8730] overlayfs: failed to resolve './file0': -2 [ 279.618583][ T1205] uclogic 0003:5543:0781.0005: ignoring exceeding usage max [ 279.626603][ T1205] uclogic 0003:5543:0781.0005: unbalanced collection at end of report description [ 279.690777][ T1205] uclogic 0003:5543:0781.0005: parse failed [ 279.746060][ T8735] syz.4.709: attempt to access beyond end of device [ 279.746060][ T8735] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 279.759254][ T8735] hfs: can't find a HFS filesystem on dev loop4 [ 279.816936][ T1205] uclogic 0003:5543:0781.0005: probe with driver uclogic failed with error -22 [ 280.058473][ T1205] usb 3-1: USB disconnect, device number 24 [ 280.312597][ T30] audit: type=1400 audit(1746476325.861:648): avc: denied { getopt } for pid=8736 comm="syz.1.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 281.544376][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 281.561764][ T8766] netlink: 'syz.0.717': attribute type 2 has an invalid length. [ 281.611181][ T8760] !: renamed from bond_slave_0 (while UP) [ 281.620228][ T30] audit: type=1400 audit(1746476327.289:649): avc: denied { listen } for pid=8762 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 282.864132][ T8776] FAULT_INJECTION: forcing a failure. [ 282.864132][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 282.884373][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.2.720 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 282.884400][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 282.884410][ T8776] Call Trace: [ 282.884416][ T8776] [ 282.884422][ T8776] dump_stack_lvl+0x16c/0x1f0 [ 282.884448][ T8776] should_fail_ex+0x512/0x640 [ 282.884467][ T8776] ? fs_reclaim_acquire+0xae/0x150 [ 282.884491][ T8776] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 282.884513][ T8776] should_failslab+0xc2/0x120 [ 282.884531][ T8776] __kmalloc_noprof+0xd2/0x510 [ 282.884562][ T8776] tomoyo_realpath_from_path+0xc2/0x6e0 [ 282.884591][ T8776] tomoyo_check_open_permission+0x2ab/0x3c0 [ 282.884612][ T8776] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 282.884658][ T8776] ? do_raw_spin_lock+0x12c/0x2b0 [ 282.884683][ T8776] tomoyo_file_open+0x6b/0x90 [ 282.884699][ T8776] security_file_open+0x84/0x1e0 [ 282.884722][ T8776] do_dentry_open+0x596/0x1c10 [ 282.884754][ T8776] vfs_open+0x82/0x3f0 [ 282.884775][ T8776] path_openat+0x1e5e/0x2d40 [ 282.884809][ T8776] ? __pfx_path_openat+0x10/0x10 [ 282.884854][ T8776] do_filp_open+0x20b/0x470 [ 282.884879][ T8776] ? __pfx_do_filp_open+0x10/0x10 [ 282.884927][ T8776] ? alloc_fd+0x471/0x7d0 [ 282.884960][ T8776] do_sys_openat2+0x11b/0x1d0 [ 282.884978][ T8776] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.885000][ T8776] ? __fget_files+0x20e/0x3c0 [ 282.885028][ T8776] __x64_sys_openat+0x174/0x210 [ 282.885046][ T8776] ? __pfx___x64_sys_openat+0x10/0x10 [ 282.885063][ T8776] ? ksys_write+0x1b9/0x240 [ 282.885086][ T8776] ? rcu_is_watching+0x12/0xc0 [ 282.885112][ T8776] do_syscall_64+0xcd/0x260 [ 282.885135][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.885151][ T8776] RIP: 0033:0x7f395c18d2d0 [ 282.885165][ T8776] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 282.885181][ T8776] RSP: 002b:00007f395cf47f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 282.885197][ T8776] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f395c18d2d0 [ 282.885207][ T8776] RDX: 0000000000000000 RSI: 00007f395cf47fa0 RDI: 00000000ffffff9c [ 282.885216][ T8776] RBP: 00007f395cf47fa0 R08: 0000000000000000 R09: 0000000000000000 [ 282.885225][ T8776] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 282.885234][ T8776] R13: 0000000000000000 R14: 00007f395c3b5fa0 R15: 00007ffe8beb3c28 [ 282.885254][ T8776] [ 282.885259][ T8776] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.173465][ T8760] Process accounting resumed [ 283.390310][ T8786] overlayfs: failed to resolve './file0': -2 [ 284.169917][ T8791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.899423][ T8808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.633165][ T8812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.731'. [ 285.975462][ T8817] fuse: Unknown parameter 'grou00000000000000000000' [ 286.698023][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 287.099683][ T30] audit: type=1400 audit(1746476332.669:650): avc: denied { read } for pid=8822 comm="syz.2.734" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 287.173121][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.305435][ T5861] lo speed is unknown, defaulting to 1000 [ 287.654216][ T30] audit: type=1400 audit(1746476332.669:651): avc: denied { open } for pid=8822 comm="syz.2.734" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 287.743925][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 287.853158][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.876944][ T9] usb 4-1: Product: syz [ 288.020889][ T8837] overlayfs: failed to resolve './file0': -2 [ 288.510423][ T8840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.736'. [ 288.565011][ T9] usb 4-1: Manufacturer: syz [ 288.595724][ T9] usb 4-1: SerialNumber: syz [ 288.736937][ T9] usb 4-1: config 0 descriptor?? [ 288.751327][ T9] usb 4-1: can't set config #0, error -71 [ 288.783299][ T8836] netlink: 'syz.4.738': attribute type 4 has an invalid length. [ 288.784482][ T9] usb 4-1: USB disconnect, device number 23 [ 288.833365][ T5861] lo speed is unknown, defaulting to 1000 [ 288.850763][ T5861] syz2: Port: 1 Link DOWN [ 289.592303][ T59] lo speed is unknown, defaulting to 1000 [ 290.003602][ T8852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.382572][ T8861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.745'. [ 291.058210][ T8873] FAULT_INJECTION: forcing a failure. [ 291.058210][ T8873] name failslab, interval 1, probability 0, space 0, times 0 [ 291.070979][ T8873] CPU: 1 UID: 0 PID: 8873 Comm: syz.1.746 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 291.071000][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 291.071010][ T8873] Call Trace: [ 291.071016][ T8873] [ 291.071023][ T8873] dump_stack_lvl+0x16c/0x1f0 [ 291.071048][ T8873] should_fail_ex+0x512/0x640 [ 291.071073][ T8873] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 291.071100][ T8873] should_failslab+0xc2/0x120 [ 291.071117][ T8873] __kmalloc_cache_noprof+0x6a/0x3e0 [ 291.071141][ T8873] ? bpf_int_jit_compile+0x12bc/0x1830 [ 291.071162][ T8873] bpf_int_jit_compile+0x12bc/0x1830 [ 291.071186][ T8873] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 291.071216][ T8873] bpf_prog_select_runtime+0x42d/0x780 [ 291.071237][ T8873] ? __asan_memcpy+0x3c/0x60 [ 291.071262][ T8873] bpf_prepare_filter+0xd3b/0x1100 [ 291.071280][ T8873] ? __pfx_seccomp_check_filter+0x10/0x10 [ 291.071304][ T8873] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 291.071323][ T8873] ? __asan_memcpy+0x3c/0x60 [ 291.071345][ T8873] ? kmemdup_noprof+0x49/0x60 [ 291.071366][ T8873] bpf_prog_create_from_user+0x1e8/0x2f0 [ 291.071385][ T8873] ? __pfx_seccomp_check_filter+0x10/0x10 [ 291.071406][ T8873] do_seccomp+0x7b4/0x26d0 [ 291.071426][ T8873] ? rcu_is_watching+0x12/0xc0 [ 291.071444][ T8873] ? irqentry_exit+0x3b/0x90 [ 291.071467][ T8873] ? __pfx_do_seccomp+0x10/0x10 [ 291.071486][ T8873] ? rcu_is_watching+0x12/0xc0 [ 291.071503][ T8873] ? irqentry_exit+0x3b/0x90 [ 291.071522][ T8873] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.071552][ T8873] prctl_set_seccomp+0x4b/0x70 [ 291.071579][ T8873] __do_sys_prctl+0x324/0x24a0 [ 291.071599][ T8873] ? __pfx___do_sys_prctl+0x10/0x10 [ 291.071623][ T8873] do_syscall_64+0xcd/0x260 [ 291.071646][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.071663][ T8873] RIP: 0033:0x7f5ddab8e969 [ 291.071678][ T8873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.071693][ T8873] RSP: 002b:00007f5ddb918038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 291.071709][ T8873] RAX: ffffffffffffffda RBX: 00007f5ddadb6160 RCX: 00007f5ddab8e969 [ 291.071720][ T8873] RDX: 0000200000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 291.071735][ T8873] RBP: 00007f5ddb918090 R08: 0000000000000000 R09: 0000000000000000 [ 291.071745][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.071754][ T8873] R13: 0000000000000001 R14: 00007f5ddadb6160 R15: 00007ffd5afd92d8 [ 291.071777][ T8873] [ 291.335911][ T8873] ------------[ cut here ]------------ [ 291.341416][ T8873] WARNING: CPU: 1 PID: 8873 at kernel/bpf/core.c:2357 __bpf_prog_ret0_warn+0xa/0x20 [ 291.350780][ T8873] Modules linked in: [ 291.354651][ T8873] CPU: 1 UID: 0 PID: 8873 Comm: syz.1.746 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 291.364809][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 291.374853][ T8873] RIP: 0010:__bpf_prog_ret0_warn+0xa/0x20 [ 291.380571][ T8873] Code: f3 0f 1e fa e8 27 c8 f0 ff 31 c0 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 07 c8 f0 ff 90 <0f> 0b 90 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 291.400182][ T8873] RSP: 0018:ffffc9001ae2fdc8 EFLAGS: 00010293 [ 291.406226][ T8873] RAX: 0000000000000000 RBX: ffff88807c158800 RCX: 0000000000000000 [ 291.414285][ T8873] RDX: ffff88801377a440 RSI: ffffffff81ca6ae9 RDI: ffffc9001ae2fe18 [ 291.422305][ T8873] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 291.430281][ T8873] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 291.438229][ T8873] R13: ffffc9001ae2fe18 R14: ffff88807c158810 R15: ffffc9001a8d1000 [ 291.446209][ T8873] FS: 00007f5ddb9186c0(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 291.455144][ T8873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.461862][ T8873] CR2: 00007f5ddb917f98 CR3: 000000002a01f000 CR4: 00000000003526f0 [ 291.469815][ T8873] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.477818][ T8873] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.485788][ T8873] Call Trace: [ 291.489056][ T8873] [ 291.491975][ T8873] __seccomp_filter+0x218/0xea0 [ 291.496825][ T8873] ? __pfx___seccomp_filter+0x10/0x10 [ 291.502297][ T8873] ? __do_sys_prctl+0x19e/0x24a0 [ 291.507217][ T8873] __secure_computing+0x287/0x3b0 [ 291.512239][ T8873] syscall_trace_enter+0x89/0x260 [ 291.517241][ T8873] do_syscall_64+0x1ee/0x260 [ 291.521832][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.527709][ T8873] RIP: 0033:0x7f5ddab8d37c [ 291.532125][ T8873] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 291.551752][ T8873] RSP: 002b:00007f5ddb918030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.560171][ T8873] RAX: ffffffffffffffda RBX: 00007f5ddadb6160 RCX: 00007f5ddab8d37c [ 291.568120][ T8873] RDX: 000000000000000f RSI: 00007f5ddb9180a0 RDI: 0000000000000006 [ 291.576094][ T8873] RBP: 00007f5ddb918090 R08: 0000000000000000 R09: 0000000000000000 [ 291.584127][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.592269][ T8873] R13: 0000000000000001 R14: 00007f5ddadb6160 R15: 00007ffd5afd92d8 [ 291.600236][ T8873] [ 291.603232][ T8873] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.610489][ T8873] CPU: 1 UID: 0 PID: 8873 Comm: syz.1.746 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(full) [ 291.620623][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 291.630654][ T8873] Call Trace: [ 291.633911][ T8873] [ 291.636819][ T8873] dump_stack_lvl+0x3d/0x1f0 [ 291.641391][ T8873] panic+0x71c/0x800 [ 291.645269][ T8873] ? __pfx_panic+0x10/0x10 [ 291.649665][ T8873] ? show_trace_log_lvl+0x29b/0x3e0 [ 291.654843][ T8873] ? check_panic_on_warn+0x1f/0xb0 [ 291.659937][ T8873] ? __bpf_prog_ret0_warn+0xa/0x20 [ 291.665037][ T8873] check_panic_on_warn+0xab/0xb0 [ 291.669969][ T8873] __warn+0xf6/0x3c0 [ 291.673862][ T8873] ? __bpf_prog_ret0_warn+0xa/0x20 [ 291.678952][ T8873] report_bug+0x3c3/0x580 [ 291.683260][ T8873] ? __bpf_prog_ret0_warn+0xa/0x20 [ 291.688358][ T8873] handle_bug+0x184/0x210 [ 291.692680][ T8873] exc_invalid_op+0x17/0x50 [ 291.697164][ T8873] asm_exc_invalid_op+0x1a/0x20 [ 291.702003][ T8873] RIP: 0010:__bpf_prog_ret0_warn+0xa/0x20 [ 291.707700][ T8873] Code: f3 0f 1e fa e8 27 c8 f0 ff 31 c0 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 07 c8 f0 ff 90 <0f> 0b 90 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 291.727286][ T8873] RSP: 0018:ffffc9001ae2fdc8 EFLAGS: 00010293 [ 291.733328][ T8873] RAX: 0000000000000000 RBX: ffff88807c158800 RCX: 0000000000000000 [ 291.741273][ T8873] RDX: ffff88801377a440 RSI: ffffffff81ca6ae9 RDI: ffffc9001ae2fe18 [ 291.749218][ T8873] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 291.757163][ T8873] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 291.765109][ T8873] R13: ffffc9001ae2fe18 R14: ffff88807c158810 R15: ffffc9001a8d1000 [ 291.773074][ T8873] ? __bpf_prog_ret0_warn+0x9/0x20 [ 291.778174][ T8873] ? __bpf_prog_ret0_warn+0x9/0x20 [ 291.783263][ T8873] __seccomp_filter+0x218/0xea0 [ 291.788098][ T8873] ? __pfx___seccomp_filter+0x10/0x10 [ 291.793471][ T8873] ? __do_sys_prctl+0x19e/0x24a0 [ 291.798393][ T8873] __secure_computing+0x287/0x3b0 [ 291.803411][ T8873] syscall_trace_enter+0x89/0x260 [ 291.808414][ T8873] do_syscall_64+0x1ee/0x260 [ 291.812987][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.818856][ T8873] RIP: 0033:0x7f5ddab8d37c [ 291.823246][ T8873] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 291.842831][ T8873] RSP: 002b:00007f5ddb918030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.851220][ T8873] RAX: ffffffffffffffda RBX: 00007f5ddadb6160 RCX: 00007f5ddab8d37c [ 291.859167][ T8873] RDX: 000000000000000f RSI: 00007f5ddb9180a0 RDI: 0000000000000006 [ 291.867114][ T8873] RBP: 00007f5ddb918090 R08: 0000000000000000 R09: 0000000000000000 [ 291.875061][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.883006][ T8873] R13: 0000000000000001 R14: 00007f5ddadb6160 R15: 00007ffd5afd92d8 [ 291.890958][ T8873] [ 291.894173][ T8873] Kernel Offset: disabled [ 291.898476][ T8873] Rebooting in 86400 seconds..