last executing test programs: 15.535062889s ago: executing program 1 (id=621): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x8248851b466bc884, 0x18, 0x6, "da441f73df3e"}, 0x0, 0x0}) syz_usb_ep_write(r0, 0x1, 0x68, &(0x7f0000000500)="cd2109bb38f040fa76763fedf09d46324c47011173f477235ce5373ec8204b0fe4ecd0a0bf5e5eb3ceb6516b7bd031533918061ecd9e354392465d8e4db37499e2ae7da295856004455c76e4a62e4225e8118ef75a9e3ad9fa8495ed9157d4c063e39949d92c0396") socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0xa, 0xb3, {0xb3, 0xd, "b7821f13533fe690fcd568be66afd348f3a7d646e75829bf4524e718047462909351935970bee14e38f360343ef914364b0eedd4d8d5d5b497c2b6f0cb2af99d27ce823d20dfbf9301f98052ecf61da013177920d0ec66ed969dd11e0e4845478ab30ad19562acf82a421a1fc45afb78e3b78bb0cc1ed07709ec63ce9105eeb6ef0f47a9c9189d358d18b296dd84d4bf0fa5744460b7b459794e4ed84d1058f488ccf0a1de32eeb1b59db43fe58d9fa7a0"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f00000004c0)={0x34, &(0x7f00000008c0)=ANY=[@ANYBLOB="20149c0000009b2aa5f9a96fe868f010384e8e9b8e9e3ae1d06f5ff2623fab03f5152fa3895d364c01b1df45ac9eace0956d87e03434ddb7c0f67ec2925172cc453610f3a7dce1c4cf008bbeca55ecdd8f165c3e0ff38558ed77417546fb6fca6818f3d83307de766ff1b8e2cbaebc90fa2aaeb97b7efd7e59f254411912069a3cd235a6ef3840b093250206451841f5bdbf7e1e4e4f2888012ca60b2ea02059fc1e81cd2dc7f9547113823d"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x9f, {0x9d, "019cfefe63018294605678f7c49c9ef75794bbebb08438083c6fc9b09d7add2384ead16737e66374663148e58a22371e7c900bf7c0504408734bdb34d43b3291cec9b996fafb43218a92e6c38709430560708182ed0c72410e3bf928018ab132c5bbf8b2febc626ae196a05ab59f797cb3210355f873ce8a58bd309d1e0ef8acc0ed1fbfa9537f5d686f7bd528fbdac7ed56d0a6ce35e23104cacd872e"}}, &(0x7f0000000440)={0x20, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000b40)={@remote, @random="b2053d7592f2", @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}, {0x3}, {0x285, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}], @llc={@snap={0xaa, 0xaa, "8770", "b98ec2", 0xd, "7e53151d954b8d42bd7dab58a78a73989439e8e11c67d6e5"}}}}}}, &(0x7f0000000980)={0x0, 0x1, [0x25e, 0x95c, 0x92, 0x33]}) 11.410557512s ago: executing program 1 (id=634): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000006"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000feffffff000000000000000018010000696c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x71) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/netlink\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000005000)) 10.132220874s ago: executing program 4 (id=635): prlimit64(0x0, 0x0, &(0x7f0000000600)={0x9, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x81, 0x173, &(0x7f0000004380)="1a000000020000005927baae870bcda6695d38b7cf83b89b12d4a240912a95a6a2c08a9ba44999f27a9a4270d0f904e862e3d4af0ce5d8b866429d529092a8545f01be6849f0dfe9d097146857854ce0317ade9b76e3bf97ae2261e20813fd6e7386e6cde0e617deccb172af0ee713ae678b7dc400f6e1e047573e03fc9a358f7dca02f2c22f2e2a8f141d56a16e2e8a7cf7cb55b1aa4025f6a9000f7e70585fb8e13b2b60e02857e18d0cde1f37fc14e1c3d330454ed1e83d5c298947fb212ebc3b2b579395a65599da9b1cffe2d5e52dbf08cad47fb38b247a5a2968a019b2ea758489a851ee45199a", 0xea) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180)={0x5}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000002240)={0x7}, 0xfcc6) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x80010, r1, 0xffffe000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x0, 0xb44d}, 0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000004) syz_open_procfs(0x0, &(0x7f0000002280)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x1c6) r5 = syz_clone(0x4040000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x22, &(0x7f0000000000)=0x40, 0x4) ptrace(0x10, r5) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000140), 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r7, &(0x7f00000022c0)={0x2020}, 0x2020) preadv(r7, &(0x7f0000000040)=[{0x0}], 0x1, 0x10000006, 0x3) syz_open_procfs(r5, &(0x7f00000000c0)='environ\x00') 9.69372686s ago: executing program 1 (id=636): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) socketpair$tipc(0x1e, 0x316aab52ec3aaa01, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0x4d}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x76171c1, @mcast2}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x110) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000019680)={0xd, 0x0, 0x0, 0x0, 0x4004, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) landlock_create_ruleset(&(0x7f0000000040)={0x600, 0x1, 0x1}, 0x18, 0x1) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x18042, 0x180) open(&(0x7f0000019300)='./bus\x00', 0x80080, 0x42) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000195c0)={0x6, 0xa, &(0x7f00000194c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xbc, &(0x7f0000000340)=""/188, 0x41100, 0x7c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000019440)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000019480)={0x3, 0x2, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000019340)=[{0x1, 0x4, 0xc, 0x5}], 0x10, 0x5}, 0x94) r2 = getpgid(0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x44800800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r2], 0x1}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0xffffffff) r3 = socket$inet(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) 9.543027883s ago: executing program 4 (id=638): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0xfffc, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000010010000013d8f9ff7b70edd24b8b3e479d546a2b4cca28d73cded34ee49460e195109182fc36c8d1f17c502cc125785024830c8b8d1dfb22a9a1f9c0ef8e1db383a76c4719ff8b25ff6dfd5c4ea1d4a8c5b308369868bf148f3ce0317", @ANYRESDEC], 0x18}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) (fail_nth: 2) 9.526671874s ago: executing program 3 (id=639): socket$inet6(0xa, 0x3, 0x3c) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c03, 0xffffffffffffffff) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) r3 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x20000008}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x44dc, 0x3180, 0x7ffb, 0x840024c}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001800000018000180140002007379865f74756ef3000000000000000010000280080002000000000004000400"], 0x3c}}, 0x2008040) syz_open_dev$hiddev(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af25, &(0x7f0000000400)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) 8.629440292s ago: executing program 4 (id=640): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000700000000000000000000000f0500000140b9000000000000010000850200000000000000020000000000004300000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) setgroups(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r3 = getgid() syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x10001, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0xffff, 0x6000, 0x0, 0x0, r3, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$TCFLSH(r6, 0x80045439, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x18) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="0dd2", 0x2}], 0x1, 0x0) tee(r0, r5, 0x8f5, 0x100000000000000) 7.570892647s ago: executing program 2 (id=641): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x4, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000180)={0x1000, 0xe000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x2008}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r5, 0x1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x80) read$FUSE(r6, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x40008) 7.479284626s ago: executing program 1 (id=642): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000001280)={0x94, 0x0, 0x1}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x2000, @fd, 0xb, 0x1000, 0x8020, 0xa, 0x1, {0x2}}) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) 7.118996746s ago: executing program 3 (id=643): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000010010000013d8f9ff7b70edd24b8b3e479d546a2b4cca28d73cded34ee49460e195109182fc36c8d1f17c502cc125785024830c8b8d1dfb22a9a1f9c0ef8e1db383a76c4719ff8b25ff6dfd5c4ea1d4a8c5b308369868bf148f3ce0317", @ANYRESDEC=r0], 0x18}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$vim2m(0x0, 0x7, 0x2) r1 = syz_open_dev$admmidi(0x0, 0x20, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$snddsp(&(0x7f00003c6000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x3000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) read$midi(r1, &(0x7f0000000380)=""/246, 0xf6) socketpair(0x6, 0x1, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000180)=0x808, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) 6.9933833s ago: executing program 0 (id=644): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0xfffc, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000010010000013d8f9ff7b70edd24b8b3e479d546a2b4cca28d73cded34ee49460e195109182fc36c8d1f17c502cc125785024830c8b8d1dfb22a9a1f9c0ef8e1db383a76c4719ff8b25ff6dfd5c4ea1d4a8c5b308369868bf148f3ce0317", @ANYRESDEC=r0], 0x18}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$vim2m(0x0, 0x7, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$snddsp(&(0x7f00003c6000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) (fail_nth: 2) read$midi(r1, &(0x7f0000000380)=""/246, 0xf6) socketpair(0x6, 0x1, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000180)=0x808, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) 5.864733569s ago: executing program 0 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = inotify_init() r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x69) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 5.864310102s ago: executing program 3 (id=646): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0xfffc, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000010010000013d8f9ff7b70edd24b8b3e479d546a2b4cca28d73cded34ee49460e195109182fc36c8d1f17c502cc125785024830c8b8d1dfb22a9a1f9c0ef8e1db383a76c4719ff8b25ff6dfd5c4ea1d4a8c5b308369868bf148f3ce0317", @ANYRESDEC=r0], 0x18}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$vim2m(0x0, 0x7, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$snddsp(&(0x7f00003c6000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) read$midi(r1, &(0x7f0000000380)=""/246, 0xf6) socketpair(0x6, 0x1, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000180)=0x808, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) 5.86187815s ago: executing program 1 (id=647): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000006"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000feffffff000000000000000018010000696c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x71) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/netlink\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x400454a4, &(0x7f0000005000)) 5.802406479s ago: executing program 4 (id=648): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40200, 0x42) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000996a58ee0ff6f31f8143dd80ca774a00"/28], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) syz_emit_ethernet(0x6e, &(0x7f00000016c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x1, 0x20, 0x60, 0x64, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e23, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af3741495c2d489bb44aa0626ca7895e9409a659b4ef94e6", "0e510dd776982e11562021340b296972dfd04230653f5cb2eeb0bcdefce2b91c"}}}}}}, 0x0) dup2(r2, r1) write(r0, &(0x7f0000000340), 0x11000) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) io_setup(0x3, &(0x7f0000000180)=0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) io_submit(r7, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) vmsplice(r0, 0x0, 0x0, 0x1) 4.829892728s ago: executing program 3 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c19", 0x1f}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a", 0x2e}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/76, 0x4c}], 0x1}, 0x0) 4.800135438s ago: executing program 2 (id=650): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40200, 0x42) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000996a58ee0ff6f31f8143dd80ca774a00"/28], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) syz_emit_ethernet(0x6e, &(0x7f00000016c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x1, 0x20, 0x60, 0x64, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e23, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af3741495c2d489bb44aa0626ca7895e9409a659b4ef94e6", "0e510dd776982e11562021340b296972dfd04230653f5cb2eeb0bcdefce2b91c"}}}}}}, 0x0) dup2(r2, r1) write(r0, &(0x7f0000000340), 0x11000) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) io_setup(0x3, &(0x7f0000000180)=0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) io_submit(r7, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) vmsplice(r0, 0x0, 0x0, 0x1) 4.712708189s ago: executing program 0 (id=651): unlinkat(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001200)}], 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x5e9c41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) setsockopt(0xffffffffffffffff, 0x8, 0x4, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 3.115432601s ago: executing program 3 (id=652): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x4, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000180)={0x1000, 0xe000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x2008}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r5, 0x1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000050a0102000000000000000001000008080007006e61740038000000000a030000000000000000000500000709000100737e7a30000000000c0004400000000000000004bafd0240000000030400060038000000020a01080000000000000000050000030900010073797a31000000000900010073797a31000000000c000440000000000000000228000000000a010800000000000000000000000608000240000000010c00044000035c000000080a010100000000000000000500000a0c000340000000000000000108000a400000000108000a400000000108000a4000000000240005800800014000008848080001400000002f0800024000000003080001400000000828000000050a0300000000000000000003000007080007006e61740008000b40000000010400048014000000160a0102000000000000000003000004140000001100010000000000000000000b00000a00"], 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x80) read$FUSE(r6, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x40008) 2.628456821s ago: executing program 4 (id=653): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", ""]}, 0x14}}, 0x800) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0xd, &(0x7f00000003c0)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r5, 0xf, &(0x7f0000000180)={0x1}) sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="e9", 0x1}], 0x1}}], 0x1, 0x40815) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400e0) fsmount(0xffffffffffffffff, 0x1, 0x9a) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="090302000000fc09df251d000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008915}, 0xc0000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xf, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 2.574673957s ago: executing program 1 (id=654): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001900)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000001580)=ANY=[@ANYBLOB="0000080200000800392cdaab4a737eebdcc99c20"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 2.49620637s ago: executing program 2 (id=655): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ipvlan1\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "cfae1e8610332aaf073c8d7e23e24149747696f72937d0eaa72f3f6db551129c", "88525cd14f8eed12a8efcbb486d5f94e1f7192a907767ee928726d8541593048", "94ed2609f31e59a9041429955c25747ddc5a9aa68b65f79d739539ff50fe6bbc", "e6ece6330b875a499a782bbd0bde05326e338adc8f3a60c5212b04fb64fff642", "a4e30583baf6fdc385302137f3f6b686903632a36dd691e2f0de22424c816b2b", "69dcedab10ae79d6206beff9", 0x7fffffff, 0x0, 0x4, 0x0, 0x1000}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a7", 0x13}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 2.306645793s ago: executing program 0 (id=656): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xf2a88742ddb7a95c, 0x0) 1.711267073s ago: executing program 0 (id=657): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x1002) (fail_nth: 2) 1.211863512s ago: executing program 2 (id=658): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000700000000000000000000000f0500000140b9000000000000010000850200000000000000020000000000004300000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) setgroups(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r4 = getgid() syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x10001, 0x4, 0x0, 0x0, 0x2000000, 0x0, 0xffff, 0x6000, 0x0, 0x0, r4, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x18) vmsplice(r5, &(0x7f0000000100)=[{&(0x7f0000000400)="0dd2", 0x2}], 0x1, 0x0) tee(r0, r6, 0x8f5, 0x100000000000000) 1.176872542s ago: executing program 3 (id=659): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x4, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000180)={0x1000, 0xe000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x2008}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r5, 0x1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x80) read$FUSE(r6, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x40008) 1.098951399s ago: executing program 0 (id=660): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) pipe(0x0) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000500)}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r3 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x5, 0x0) 837.254348ms ago: executing program 2 (id=661): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000280)='R', 0x1, 0x404c007, 0x0, 0x0) (fail_nth: 4) 82.321013ms ago: executing program 2 (id=662): r0 = fsopen(0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'dt2801\x00', [0xf000, 0x80008000, 0x0, 0x5, 0x0, 0xa, 0xffffffff, 0xf, 0xffe, 0x1, 0x8, 0x1, 0x1006, 0x4, 0xffff, 0x6, 0x96, 0xf0, 0xfffffffd, 0x5, 0x401, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x1, 0x3, 0x7, 0x5, 0x5]}) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a538ae4646320800001c0000000000480078ac1e0001681414aa00009078e0000001"], 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd, 0x40}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x24000000) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000000a40)=ANY=[@ANYRES16=r2, @ANYRES8=r0, @ANYBLOB="e9deb5ffe5059654d25e8573ca83b9e0e424887866f6fee05c491890b13c47d10f0fe833aad413cb4cc2fbbf0dea724d8dafc65cd428ba5e86d4e506dae4a1fe909502d8c0e4a4dfb3785456426cc5d98de8ceaf2ab37fc0f4a7c0f6e2790cbddc311e2e008f36f9606bab7a111392806da7e75bf030f901fc25b61a01", @ANYRESDEC=r4, @ANYRES16, @ANYBLOB="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"], 0x3d}) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000000000000001d5c84b8000000"], &(0x7f00000003c0)='GPL\x00', 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r7 = openat$cgroup_pressure(r6, &(0x7f0000000580)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getpid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) 0s ago: executing program 4 (id=663): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40200, 0x42) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000996a58ee0ff6f31f8143dd80ca774a00"/28], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) syz_emit_ethernet(0x6e, &(0x7f00000016c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x1, 0x20, 0x60, 0x64, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e23, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af3741495c2d489bb44aa0626ca7895e9409a659b4ef94e6", "0e510dd776982e11562021340b296972dfd04230653f5cb2eeb0bcdefce2b91c"}}}}}}, 0x0) dup2(r2, r1) write(r0, &(0x7f0000000340), 0x11000) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) io_setup(0x3, &(0x7f0000000180)=0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) io_submit(r7, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) vmsplice(r0, 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): { map } for pid=7053 comm="syz.2.274" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.977184][ T6734] udevd[6734]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.982361][ T30] audit: type=1400 audit(1752139041.814:854): avc: denied { execute } for pid=7053 comm="syz.2.274" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.024216][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 167.289031][ T7066] fuse: root generation should be zero [ 167.297191][ T7068] FAULT_INJECTION: forcing a failure. [ 167.297191][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.320592][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.3.276 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 167.320618][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.320628][ T7068] Call Trace: [ 167.320634][ T7068] [ 167.320641][ T7068] dump_stack_lvl+0x16c/0x1f0 [ 167.320669][ T7068] should_fail_ex+0x512/0x640 [ 167.320695][ T7068] _copy_to_user+0x32/0xd0 [ 167.320722][ T7068] simple_read_from_buffer+0xcb/0x170 [ 167.320751][ T7068] proc_fail_nth_read+0x197/0x270 [ 167.320773][ T7068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.320796][ T7068] ? rw_verify_area+0xcf/0x680 [ 167.320814][ T7068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.320835][ T7068] vfs_read+0x1e4/0xc60 [ 167.320856][ T7068] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 167.320880][ T7068] ? __pfx___mutex_lock+0x10/0x10 [ 167.320904][ T7068] ? __pfx_vfs_read+0x10/0x10 [ 167.320929][ T7068] ? __rcu_read_unlock+0x2b4/0x580 [ 167.320948][ T7068] ? __fget_files+0x20e/0x3c0 [ 167.320979][ T7068] ksys_read+0x12a/0x250 [ 167.321000][ T7068] ? __pfx_ksys_read+0x10/0x10 [ 167.321028][ T7068] do_syscall_64+0xcd/0x4c0 [ 167.321055][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.321072][ T7068] RIP: 0033:0x7f119c78d33c [ 167.321086][ T7068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.321103][ T7068] RSP: 002b:00007f119d617030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.321120][ T7068] RAX: ffffffffffffffda RBX: 00007f119c9b6080 RCX: 00007f119c78d33c [ 167.321131][ T7068] RDX: 000000000000000f RSI: 00007f119d6170a0 RDI: 0000000000000004 [ 167.321141][ T7068] RBP: 00007f119d617090 R08: 0000000000000000 R09: 0000000000000000 [ 167.321151][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.321160][ T7068] R13: 0000000000000001 R14: 00007f119c9b6080 R15: 00007ffd0167fa48 [ 167.321184][ T7068] [ 167.445864][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 167.982156][ T7081] Illegal XDP return value 4294967274 on prog (id 57) dev syz_tun, expect packet loss! [ 167.992826][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 168.000851][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 168.061879][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 168.986287][ T7088] could not allocate digest TFM handle sha224-ssse3 [ 169.033942][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 169.044412][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 169.207375][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 169.929889][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 169.954957][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 169.970834][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 170.020908][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 170.162819][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 170.193735][ T30] audit: type=1400 audit(1752139046.084:855): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 170.221494][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 170.232669][ T30] audit: type=1400 audit(1752139046.084:856): avc: denied { map_create } for pid=7102 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 170.251793][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 170.264579][ T43] pwc: Registered as video103. [ 170.270297][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 170.282493][ T30] audit: type=1400 audit(1752139046.114:857): avc: denied { create } for pid=7102 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.074140][ T7105] could not allocate digest TFM handle sha224-ssse3 [ 171.074343][ T30] audit: type=1400 audit(1752139046.114:858): avc: denied { setopt } for pid=7102 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.100247][ T30] audit: type=1400 audit(1752139046.114:859): avc: denied { read open } for pid=7078 comm="syz.4.279" path="pid:[4026532795]" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 171.124635][ T30] audit: type=1400 audit(1752139046.124:860): avc: denied { open } for pid=5844 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.148745][ T30] audit: type=1400 audit(1752139046.124:861): avc: denied { ioctl } for pid=5844 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.155769][ T43] usb 1-1: USB disconnect, device number 7 [ 171.220141][ T30] audit: type=1400 audit(1752139046.244:862): avc: denied { module_request } for pid=7102 comm="syz.1.284" kmod="crypto-sha224-ssse3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 171.235273][ T5929] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 171.304949][ T30] audit: type=1400 audit(1752139046.424:863): avc: denied { read } for pid=5191 comm="acpid" name="event4" dev="devtmpfs" ino=2859 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.331572][ T5929] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.409050][ T30] audit: type=1400 audit(1752139046.934:864): avc: denied { open } for pid=5191 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2859 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.462946][ T30] audit: type=1400 audit(1752139047.064:865): avc: denied { create } for pid=7108 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.546145][ T7116] fido_id[7116]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.554754][ T30] audit: type=1400 audit(1752139047.064:866): avc: denied { write } for pid=7108 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.795350][ T30] audit: type=1400 audit(1752139047.064:867): avc: denied { create } for pid=7108 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.849415][ T7135] netlink: 'syz.4.292': attribute type 2 has an invalid length. [ 172.966644][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 172.992512][ T5838] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 173.000159][ T5929] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 173.314666][ T5929] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.325584][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.341338][ T5929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.780754][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.814775][ T5929] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.825347][ T5838] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 173.838532][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.853196][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.866433][ T5929] usb 1-1: Product: syz [ 173.870619][ T5929] usb 1-1: Manufacturer: syz [ 173.888807][ T5838] usb 4-1: config 0 descriptor?? [ 173.898448][ T5929] usb 1-1: SerialNumber: syz [ 174.607295][ T5838] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 174.667679][ T7178] kAFS: No cell specified [ 174.691977][ T5838] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 174.887808][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.290'. [ 175.326724][ T5838] cp2112 0003:10C4:EA90.0003: error requesting version [ 175.335956][ T5838] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32 [ 175.346619][ T5929] usb 1-1: 0:2 : does not exist [ 175.644868][ T5929] usb 1-1: USB disconnect, device number 8 [ 175.700665][ T6734] udevd[6734]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.916427][ T5838] usb 4-1: USB disconnect, device number 6 [ 177.217723][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 177.217738][ T30] audit: type=1400 audit(1752139053.104:947): avc: denied { read } for pid=7207 comm="syz.4.305" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 177.293392][ T30] audit: type=1400 audit(1752139053.104:948): avc: denied { open } for pid=7207 comm="syz.4.305" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 177.452986][ T7211] tipc: Started in network mode [ 177.535902][ T30] audit: type=1400 audit(1752139053.164:949): avc: denied { ioctl } for pid=7207 comm="syz.4.305" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 177.539193][ T7211] tipc: Node identity 0652ba0dfcf5, cluster identity 4711 [ 177.570732][ T30] audit: type=1400 audit(1752139053.384:950): avc: denied { create } for pid=7214 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.597547][ T30] audit: type=1400 audit(1752139053.404:951): avc: denied { sys_module } for pid=7205 comm="syz.2.303" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 178.480785][ T7227] could not allocate digest TFM handle sha224-ssse3 [ 178.582503][ T7211] tipc: Enabled bearer , priority 0 [ 178.674003][ T7215] syzkaller0: entered promiscuous mode [ 178.679481][ T7215] syzkaller0: entered allmulticast mode [ 178.732751][ T7219] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 178.758223][ T30] audit: type=1400 audit(1752139054.644:952): avc: denied { create } for pid=7232 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.454579][ T30] audit: type=1400 audit(1752139054.644:953): avc: denied { setopt } for pid=7232 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.485444][ T30] audit: type=1400 audit(1752139054.664:954): avc: denied { ioctl } for pid=7232 comm="syz.1.308" path="socket:[12914]" dev="sockfs" ino=12914 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.583503][ T9] tipc: Node number set to 4205296141 [ 179.750322][ T30] audit: type=1400 audit(1752139054.664:955): avc: denied { create } for pid=7232 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 179.779363][ T30] audit: type=1400 audit(1752139054.724:956): avc: denied { create } for pid=7232 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 179.837528][ T7243] FAULT_INJECTION: forcing a failure. [ 179.837528][ T7243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.839065][ T7209] tipc: Resetting bearer [ 179.850788][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.1.312 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 179.850810][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.850819][ T7243] Call Trace: [ 179.850824][ T7243] [ 179.850830][ T7243] dump_stack_lvl+0x16c/0x1f0 [ 179.850854][ T7243] should_fail_ex+0x512/0x640 [ 179.850877][ T7243] _copy_from_iter+0x29f/0x16f0 [ 179.850900][ T7243] ? __alloc_skb+0x200/0x380 [ 179.850919][ T7243] ? __pfx__copy_from_iter+0x10/0x10 [ 179.850941][ T7243] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 179.850970][ T7243] netlink_sendmsg+0x829/0xdd0 [ 179.850988][ T7243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.851011][ T7243] ____sys_sendmsg+0xa95/0xc70 [ 179.851026][ T7243] ? copy_msghdr_from_user+0x10a/0x160 [ 179.851045][ T7243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.851070][ T7243] ___sys_sendmsg+0x134/0x1d0 [ 179.851090][ T7243] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.851107][ T7243] ? __lock_acquire+0x622/0x1c90 [ 179.851148][ T7243] __sys_sendmsg+0x16d/0x220 [ 179.851167][ T7243] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.851200][ T7243] do_syscall_64+0xcd/0x4c0 [ 179.851221][ T7243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.851236][ T7243] RIP: 0033:0x7f93c2d8e929 [ 179.851248][ T7243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.851262][ T7243] RSP: 002b:00007f93c3b9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.851277][ T7243] RAX: ffffffffffffffda RBX: 00007f93c2fb5fa0 RCX: 00007f93c2d8e929 [ 179.851287][ T7243] RDX: 0000000000004040 RSI: 0000200000000280 RDI: 0000000000000003 [ 179.851296][ T7243] RBP: 00007f93c3b9a090 R08: 0000000000000000 R09: 0000000000000000 [ 179.851305][ T7243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.851314][ T7243] R13: 0000000000000000 R14: 00007f93c2fb5fa0 R15: 00007fff8340fba8 [ 179.851333][ T7243] [ 180.055166][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.066658][ T7205] tipc: Resetting bearer [ 180.082050][ T7205] tipc: Disabling bearer [ 180.227993][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.312466][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.562245][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 180.574310][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 180.595045][ T9] usb 1-1: Product: syz [ 180.604166][ T9] usb 1-1: Manufacturer: syz [ 180.608827][ T9] usb 1-1: SerialNumber: syz [ 181.261629][ T7241] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 181.268437][ T7241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.280322][ T7241] vhci_hcd vhci_hcd.0: Device attached [ 181.296601][ T7265] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 181.303218][ T7265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.315035][ T7265] vhci_hcd vhci_hcd.0: Device attached [ 181.330021][ T7241] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 181.336653][ T7241] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 181.345792][ T7241] vhci_hcd vhci_hcd.0: Device attached [ 181.354579][ T7241] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 181.366178][ T7278] netlink: 'syz.4.318': attribute type 2 has an invalid length. [ 181.404681][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 181.455936][ T7265] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 181.462577][ T7265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.486848][ T7265] vhci_hcd vhci_hcd.0: Device attached [ 181.512645][ T5879] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 181.524681][ T7282] netlink: 268 bytes leftover after parsing attributes in process `syz.1.319'. [ 181.533772][ T7282] openvswitch: netlink: Flow key attr not present in new flow. [ 181.579409][ T7241] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 181.586053][ T7241] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 181.603036][ T7241] vhci_hcd vhci_hcd.0: Device attached [ 181.627035][ T7241] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(25) [ 181.633677][ T7241] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.658287][ T7241] vhci_hcd vhci_hcd.0: Device attached [ 181.678945][ T7265] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.205946][ T7280] vhci_hcd: connection closed [ 182.236665][ T7285] vhci_hcd: connection closed [ 182.321146][ T43] usb 1-1: USB disconnect, device number 9 [ 182.335596][ T7273] vhci_hcd: connection closed [ 182.341122][ T3598] vhci_hcd: stop threads [ 182.387466][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 182.387502][ T30] audit: type=1400 audit(1752139058.264:970): avc: denied { append } for pid=7295 comm="syz.1.323" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.416049][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.462163][ T7276] vhci_hcd: connection closed [ 182.473571][ T7271] vhci_hcd: connection reset by peer [ 182.527585][ T3598] vhci_hcd: release socket [ 182.598269][ T3598] vhci_hcd: disconnect device [ 182.675286][ T5838] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.692410][ T3598] vhci_hcd: stop threads [ 182.716661][ T3598] vhci_hcd: release socket [ 182.751158][ T3598] vhci_hcd: disconnect device [ 182.813419][ T3598] vhci_hcd: stop threads [ 182.819170][ T3598] vhci_hcd: release socket [ 182.832501][ T3598] vhci_hcd: disconnect device [ 182.848692][ T3598] vhci_hcd: stop threads [ 182.865138][ T3598] vhci_hcd: release socket [ 182.869707][ T3598] vhci_hcd: disconnect device [ 182.893325][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 182.906519][ T5838] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 182.944103][ T5838] usb 5-1: config 0 has no interface number 0 [ 182.957886][ T3598] vhci_hcd: stop threads [ 182.968570][ T5838] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 182.987172][ T3598] vhci_hcd: release socket [ 183.019188][ T3598] vhci_hcd: disconnect device [ 183.029042][ T5838] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 183.058718][ T5838] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 183.083232][ T5838] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 183.113555][ T5838] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 183.134389][ T5838] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.223592][ T5838] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 183.327446][ T5838] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 183.390466][ T7290] vhci_hcd: connection closed [ 183.391433][ T3598] vhci_hcd: stop threads [ 183.434715][ T5838] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 183.452649][ T3598] vhci_hcd: release socket [ 183.476947][ T3598] vhci_hcd: disconnect device [ 183.526212][ T7302] netlink: 'syz.0.325': attribute type 4 has an invalid length. [ 183.575221][ T5838] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.595220][ T5838] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 183.605323][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.622257][ T5838] usb 5-1: Product: syz [ 183.627085][ T5838] usb 5-1: Manufacturer: syz [ 183.637158][ T5838] usb 5-1: SerialNumber: syz [ 183.645366][ T30] audit: type=1400 audit(1752139059.534:971): avc: denied { mounton } for pid=7303 comm="syz.3.324" path="/73/file0" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.679672][ T5838] usb 5-1: config 0 descriptor?? [ 183.685912][ T7292] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 183.703351][ T7292] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 183.729820][ T5838] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 183.848789][ T30] audit: type=1804 audit(1752139059.734:972): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.324" name="/newroot/73/file0" dev="tmpfs" ino=408 res=1 errno=0 [ 183.871361][ T5838] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 183.944937][ T5838] scsi host1: microtekX6 [ 184.016547][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.152799][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.245589][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.321'. [ 184.378716][ T30] audit: type=1400 audit(1752139060.264:973): avc: denied { read write } for pid=7319 comm="syz.1.328" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.409591][ T10] usb 5-1: USB disconnect, device number 6 [ 184.486483][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 184.524555][ T30] audit: type=1400 audit(1752139060.264:974): avc: denied { open } for pid=7319 comm="syz.1.328" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.550856][ T30] audit: type=1400 audit(1752139060.344:975): avc: denied { map } for pid=7319 comm="syz.1.328" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.692945][ T30] audit: type=1400 audit(1752139060.344:976): avc: denied { execute } for pid=7319 comm="syz.1.328" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.766852][ T7329] netlink: 'syz.1.332': attribute type 2 has an invalid length. [ 184.778964][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 184.895423][ T7330] hub 6-0:1.0: USB hub found [ 184.900735][ T7330] hub 6-0:1.0: 1 port detected [ 185.026344][ T30] audit: type=1400 audit(1752139060.784:977): avc: denied { write } for pid=7324 comm="syz.3.330" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.507158][ T7339] 9pnet_fd: Insufficient options for proto=fd [ 185.592412][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 185.592524][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 185.605877][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 185.606445][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 185.611913][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 186.470693][ T7352] veth0: entered promiscuous mode [ 186.513721][ T30] audit: type=1400 audit(1752139062.354:978): avc: denied { setopt } for pid=7345 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.614267][ T30] audit: type=1400 audit(1752139062.374:979): avc: denied { read write } for pid=7345 comm="syz.1.337" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 186.653402][ T5879] vhci_hcd: vhci_device speed not set [ 186.670125][ T7345] veth0: left promiscuous mode [ 187.820300][ T7376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.240215][ T7388] netlink: 'syz.4.344': attribute type 2 has an invalid length. [ 188.252701][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 188.442577][ T7391] tipc: Started in network mode [ 188.452746][ T7391] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 188.590462][ T7391] tipc: Enabled bearer , priority 10 [ 188.615781][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 188.615818][ T30] audit: type=1400 audit(1752139064.474:981): avc: denied { create } for pid=7389 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.746864][ T9] usb usb34-port1: attempt power cycle [ 188.781665][ T30] audit: type=1400 audit(1752139064.474:982): avc: denied { write } for pid=7389 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.822022][ T30] audit: type=1400 audit(1752139064.474:983): avc: denied { nlmsg_write } for pid=7389 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.761416][ T5879] tipc: Node number set to 10136234 [ 189.878855][ T30] audit: type=1400 audit(1752139065.764:984): avc: denied { create } for pid=7402 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.898110][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.998272][ T30] audit: type=1400 audit(1752139065.854:985): avc: denied { write } for pid=7402 comm="syz.3.347" lport=44770 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 190.126830][ T9] usb usb34-port1: unable to enumerate USB device [ 190.289760][ T7412] rdma_op ffff888032a6a1f0 conn xmit_rdma 0000000000000000 [ 190.600071][ T30] audit: type=1400 audit(1752139066.064:986): avc: denied { bind } for pid=7402 comm="syz.3.347" lport=44770 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.367396][ T30] audit: type=1400 audit(1752139066.064:987): avc: denied { name_bind } for pid=7402 comm="syz.3.347" src=20004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 191.389667][ T30] audit: type=1400 audit(1752139066.064:988): avc: denied { node_bind } for pid=7402 comm="syz.3.347" saddr=100.1.1.0 src=20004 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 191.682104][ T30] audit: type=1400 audit(1752139066.134:989): avc: denied { bind } for pid=7402 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.807210][ T7435] FAULT_INJECTION: forcing a failure. [ 191.807210][ T7435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.835277][ T30] audit: type=1400 audit(1752139066.174:990): avc: denied { write } for pid=7402 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.857624][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.2.353 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 191.857647][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.857657][ T7435] Call Trace: [ 191.857663][ T7435] [ 191.857669][ T7435] dump_stack_lvl+0x16c/0x1f0 [ 191.857696][ T7435] should_fail_ex+0x512/0x640 [ 191.857722][ T7435] _copy_from_iter+0x29f/0x16f0 [ 191.857748][ T7435] ? __alloc_skb+0x200/0x380 [ 191.857768][ T7435] ? __pfx__copy_from_iter+0x10/0x10 [ 191.857794][ T7435] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 191.857828][ T7435] netlink_sendmsg+0x829/0xdd0 [ 191.857848][ T7435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.857874][ T7435] ____sys_sendmsg+0xa95/0xc70 [ 191.857891][ T7435] ? copy_msghdr_from_user+0x10a/0x160 [ 191.857912][ T7435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.857945][ T7435] ___sys_sendmsg+0x134/0x1d0 [ 191.857967][ T7435] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.857987][ T7435] ? __lock_acquire+0x622/0x1c90 [ 191.858029][ T7435] __sys_sendmsg+0x16d/0x220 [ 191.858051][ T7435] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.858088][ T7435] do_syscall_64+0xcd/0x4c0 [ 191.858114][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.858131][ T7435] RIP: 0033:0x7f810bd8e929 [ 191.858144][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.858159][ T7435] RSP: 002b:00007f810cb65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.858175][ T7435] RAX: ffffffffffffffda RBX: 00007f810bfb5fa0 RCX: 00007f810bd8e929 [ 191.858186][ T7435] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 191.858196][ T7435] RBP: 00007f810cb65090 R08: 0000000000000000 R09: 0000000000000000 [ 191.858206][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.858215][ T7435] R13: 0000000000000000 R14: 00007f810bfb5fa0 R15: 00007ffcdf2e6658 [ 191.858238][ T7435] [ 193.040895][ T7450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.144324][ T7460] FAULT_INJECTION: forcing a failure. [ 193.144324][ T7460] name failslab, interval 1, probability 0, space 0, times 0 [ 193.157243][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: syz.1.358 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 193.157267][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.157277][ T7460] Call Trace: [ 193.157284][ T7460] [ 193.157292][ T7460] dump_stack_lvl+0x16c/0x1f0 [ 193.157321][ T7460] should_fail_ex+0x512/0x640 [ 193.157347][ T7460] should_failslab+0xc2/0x120 [ 193.157372][ T7460] __kmalloc_cache_noprof+0x6a/0x3e0 [ 193.157392][ T7460] ? do_raw_spin_lock+0x12c/0x2b0 [ 193.157410][ T7460] ? find_held_lock+0x2b/0x80 [ 193.157430][ T7460] ? create_io_worker+0xc9/0x5b0 [ 193.157459][ T7460] ? create_io_worker+0x1f/0x5b0 [ 193.157483][ T7460] create_io_worker+0xc9/0x5b0 [ 193.157511][ T7460] io_wq_enqueue+0x4cc/0x980 [ 193.157529][ T7460] ? __pfx_io_wq_enqueue+0x10/0x10 [ 193.157543][ T7460] ? io_prep_async_work+0x5d6/0x7d0 [ 193.157567][ T7460] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 193.157601][ T7460] io_queue_iowq+0x246/0x530 [ 193.157620][ T7460] io_queue_async+0x1fc/0x300 [ 193.157637][ T7460] io_submit_sqes+0x1715/0x2580 [ 193.157671][ T7460] __do_sys_io_uring_enter+0xd6a/0x1630 [ 193.157695][ T7460] ? __fget_files+0x20e/0x3c0 [ 193.157719][ T7460] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 193.157742][ T7460] ? fput+0x70/0xf0 [ 193.157757][ T7460] ? ksys_write+0x1ac/0x250 [ 193.157779][ T7460] ? __pfx_ksys_write+0x10/0x10 [ 193.157808][ T7460] do_syscall_64+0xcd/0x4c0 [ 193.157834][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.157851][ T7460] RIP: 0033:0x7f93c2d8e929 [ 193.157866][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.157882][ T7460] RSP: 002b:00007f93c3b58038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 193.157905][ T7460] RAX: ffffffffffffffda RBX: 00007f93c2fb6160 RCX: 00007f93c2d8e929 [ 193.157916][ T7460] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 193.157926][ T7460] RBP: 00007f93c3b58090 R08: 0000000000000000 R09: 0000000000000000 [ 193.157936][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.157946][ T7460] R13: 0000000000000000 R14: 00007f93c2fb6160 R15: 00007fff8340fba8 [ 193.157970][ T7460] [ 193.652641][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 193.652657][ T30] audit: type=1400 audit(1752139069.524:1018): avc: denied { read append } for pid=7455 comm="syz.0.360" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.708691][ T30] audit: type=1400 audit(1752139069.524:1019): avc: denied { open } for pid=7455 comm="syz.0.360" path="/dev/cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.734093][ T30] audit: type=1400 audit(1752139069.524:1020): avc: denied { ioctl } for pid=7455 comm="syz.0.360" path="/dev/cec0" dev="devtmpfs" ino=948 ioctlcmd=0x6109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.763404][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.773992][ T30] audit: type=1400 audit(1752139069.594:1021): avc: denied { getattr } for pid=7416 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.799729][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.835700][ T5892] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 193.889527][ T5892] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 193.901149][ T30] audit: type=1400 audit(1752139069.594:1022): avc: denied { add_name } for pid=7416 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.926996][ T5892] usb 3-1: USB disconnect, device number 3 [ 194.007399][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 194.944305][ T30] audit: type=1400 audit(1752139069.594:1023): avc: denied { create } for pid=7416 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.012563][ T7478] could not allocate digest TFM handle sha224-ssse3 [ 195.090618][ T30] audit: type=1400 audit(1752139069.604:1024): avc: denied { write } for pid=7416 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.116997][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.601498][ T30] audit: type=1400 audit(1752139069.604:1025): avc: denied { append } for pid=7416 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=2961 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 195.653749][ T30] audit: type=1400 audit(1752139069.744:1026): avc: denied { read write } for pid=5829 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.775183][ T30] audit: type=1400 audit(1752139069.744:1027): avc: denied { open } for pid=5829 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.061028][ T7499] raw_sendmsg: syz.0.367 forgot to set AF_INET. Fix it! [ 197.972385][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 198.046272][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 198.057878][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 198.226601][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 198.243969][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.278326][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.300646][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.310706][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.352484][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.364264][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.371830][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.380840][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.444430][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.493552][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.502612][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.533273][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.596063][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.613910][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.632422][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.647721][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.657426][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.677740][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.685438][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 198.841467][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.851302][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 198.851316][ T30] audit: type=1400 audit(1752139074.724:1084): avc: denied { create } for pid=7531 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.894243][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 198.922133][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.289319][ T30] audit: type=1400 audit(1752139074.724:1085): avc: denied { read } for pid=7531 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.311408][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.320587][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.331917][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.660766][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 199.669936][ T30] audit: type=1400 audit(1752139074.834:1086): avc: denied { create } for pid=7531 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 199.699739][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 199.708367][ T10] usb 3-1: Product: syz [ 199.712650][ T30] audit: type=1400 audit(1752139074.834:1087): avc: denied { read } for pid=7531 comm="syz.0.377" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 199.735537][ T10] usb 3-1: Manufacturer: syz [ 199.740109][ T10] usb 3-1: SerialNumber: syz [ 199.746228][ T30] audit: type=1400 audit(1752139074.834:1088): avc: denied { open } for pid=7531 comm="syz.0.377" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 199.770443][ T10] usb 3-1: config 0 descriptor?? [ 199.805299][ T10] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 199.852449][ T7519] syz.4.371 (7519) used greatest stack depth: 18984 bytes left [ 199.966009][ T30] audit: type=1400 audit(1752139074.834:1089): avc: denied { ioctl } for pid=7531 comm="syz.0.377" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 200.022295][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.025548][ T30] audit: type=1400 audit(1752139074.994:1090): avc: denied { firmware_load } for pid=7510 comm="syz.4.371" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 200.105511][ T30] audit: type=1400 audit(1752139075.194:1091): avc: denied { create } for pid=7536 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.134350][ T7542] syzkaller0: entered promiscuous mode [ 200.145558][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.150058][ T7542] syzkaller0: entered allmulticast mode [ 200.186350][ T30] audit: type=1400 audit(1752139075.194:1092): avc: denied { bind } for pid=7536 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.216243][ T882] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 200.224988][ T30] audit: type=1400 audit(1752139075.194:1093): avc: denied { setopt } for pid=7536 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.382386][ T882] usb 2-1: Using ep0 maxpacket: 8 [ 200.390616][ T882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 200.400015][ T882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.420216][ T882] usb 2-1: Product: syz [ 200.429955][ T882] usb 2-1: Manufacturer: syz [ 200.440008][ T882] usb 2-1: SerialNumber: syz [ 200.452885][ T882] usb 2-1: config 0 descriptor?? [ 200.482413][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 200.531193][ T7546] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 200.615101][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'. [ 200.747638][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 200.754395][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 200.765768][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.775507][ T5838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.785249][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 200.795124][ T5838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 200.805730][ T5838] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 200.815791][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.839548][ T5838] usb 4-1: config 0 descriptor?? [ 200.864676][ T5834] Bluetooth: hci5: urb ffff888034a60100 submission failed (90) [ 201.545666][ T882] usb write operation failed. (-71) [ 201.573202][ T882] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 201.586027][ T882] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 201.597779][ T882] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 201.758292][ T5879] usb 4-1: USB disconnect, device number 7 [ 202.540319][ T5879] usb 3-1: USB disconnect, device number 4 [ 202.586918][ T5879] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 203.039366][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 203.433192][ T10] usb 5-1: config index 0 descriptor too short (expected 146, got 18) [ 203.453117][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 203.462167][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.569419][ T10] usb 5-1: config 0 descriptor?? [ 203.585626][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 203.740706][ T7591] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.749697][ T7591] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.758477][ T7591] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.767200][ T7591] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.778415][ T7591] vxlan0: entered promiscuous mode [ 204.091175][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 204.091188][ T30] audit: type=1400 audit(1752139079.704:1153): avc: denied { read } for pid=7590 comm="syz.0.392" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 204.159105][ T30] audit: type=1400 audit(1752139079.704:1154): avc: denied { open } for pid=7590 comm="syz.0.392" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 204.187795][ T30] audit: type=1400 audit(1752139079.894:1155): avc: denied { create } for pid=7590 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 204.210944][ T30] audit: type=1400 audit(1752139080.034:1156): avc: denied { ioctl } for pid=7590 comm="syz.0.392" path="socket:[14828]" dev="sockfs" ino=14828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.239917][ T30] audit: type=1400 audit(1752139080.104:1157): avc: denied { read write } for pid=5830 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.637869][ T30] audit: type=1400 audit(1752139080.104:1158): avc: denied { open } for pid=5830 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.770210][ T30] audit: type=1400 audit(1752139080.104:1159): avc: denied { ioctl } for pid=5830 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.857236][ T10] ath6kl: mismatched byte count 0 vs. expected 12 [ 204.876916][ T10] ath6kl: Failed to init ath6kl core: -22 [ 204.877235][ T30] audit: type=1400 audit(1752139080.524:1160): avc: denied { bpf } for pid=7603 comm="syz.3.393" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.902895][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 204.909927][ T30] audit: type=1400 audit(1752139080.524:1161): avc: denied { perfmon } for pid=7603 comm="syz.3.393" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 204.948202][ T30] audit: type=1400 audit(1752139080.524:1162): avc: denied { prog_run } for pid=7603 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.970060][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 204.987498][ T7613] FAULT_INJECTION: forcing a failure. [ 204.987498][ T7613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.005183][ T7613] CPU: 1 UID: 0 PID: 7613 Comm: syz.2.397 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 205.005207][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.005217][ T7613] Call Trace: [ 205.005223][ T7613] [ 205.005229][ T7613] dump_stack_lvl+0x16c/0x1f0 [ 205.005256][ T7613] should_fail_ex+0x512/0x640 [ 205.005281][ T7613] _copy_from_iter+0x29f/0x16f0 [ 205.005309][ T7613] ? __alloc_skb+0x200/0x380 [ 205.005331][ T7613] ? __pfx__copy_from_iter+0x10/0x10 [ 205.005351][ T7613] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 205.005373][ T7613] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 205.005404][ T7613] netlink_sendmsg+0x829/0xdd0 [ 205.005426][ T7613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.005452][ T7613] ____sys_sendmsg+0xa95/0xc70 [ 205.005470][ T7613] ? copy_msghdr_from_user+0x10a/0x160 [ 205.005492][ T7613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.005520][ T7613] ___sys_sendmsg+0x134/0x1d0 [ 205.005543][ T7613] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.005563][ T7613] ? __lock_acquire+0x622/0x1c90 [ 205.005608][ T7613] __sys_sendmsg+0x16d/0x220 [ 205.005631][ T7613] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.005667][ T7613] do_syscall_64+0xcd/0x4c0 [ 205.005692][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.005710][ T7613] RIP: 0033:0x7f810bd8e929 [ 205.005724][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.005748][ T7613] RSP: 002b:00007f810cb65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.005764][ T7613] RAX: ffffffffffffffda RBX: 00007f810bfb5fa0 RCX: 00007f810bd8e929 [ 205.005775][ T7613] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 205.005785][ T7613] RBP: 00007f810cb65090 R08: 0000000000000000 R09: 0000000000000000 [ 205.005795][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.005805][ T7613] R13: 0000000000000000 R14: 00007f810bfb5fa0 R15: 00007ffcdf2e6658 [ 205.005828][ T7613] [ 205.260687][ T43] usb 5-1: USB disconnect, device number 7 [ 205.372406][ T5838] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 205.848287][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 205.868470][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 206.010649][ T5838] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 206.064030][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.123499][ T5838] usb 4-1: Product: syz [ 206.127691][ T5838] usb 4-1: Manufacturer: syz [ 206.134838][ T5838] usb 4-1: SerialNumber: syz [ 206.145693][ T5838] usb 4-1: config 0 descriptor?? [ 206.249310][ T7633] delete_channel: no stack [ 207.324563][ T5838] usb write operation failed. (-71) [ 207.329808][ T5838] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 207.842261][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'. [ 209.230453][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 209.230469][ T30] audit: type=1400 audit(1752139085.114:1222): avc: denied { read write } for pid=7670 comm="syz.2.412" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 209.575103][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.413'. [ 209.602459][ T30] audit: type=1400 audit(1752139085.154:1223): avc: denied { open } for pid=7670 comm="syz.2.412" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 209.699847][ T30] audit: type=1400 audit(1752139085.154:1224): avc: denied { mount } for pid=7670 comm="syz.2.412" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 209.723675][ T30] audit: type=1400 audit(1752139085.444:1225): avc: denied { read } for pid=7670 comm="syz.2.412" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 209.745995][ T7676] netlink: 32 bytes leftover after parsing attributes in process `syz.3.415'. [ 209.756425][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.764479][ T30] audit: type=1400 audit(1752139085.444:1226): avc: denied { open } for pid=7670 comm="syz.2.412" path="/75/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 209.787850][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.794986][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.819884][ T30] audit: type=1400 audit(1752139085.534:1227): avc: denied { mount } for pid=7670 comm="syz.2.412" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 209.849859][ T30] audit: type=1400 audit(1752139085.614:1228): avc: denied { read write } for pid=7681 comm="syz.0.416" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 209.886452][ T30] audit: type=1400 audit(1752139085.614:1229): avc: denied { open } for pid=7681 comm="syz.0.416" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 209.925368][ T30] audit: type=1400 audit(1752139085.614:1230): avc: denied { setopt } for pid=7681 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.989836][ T30] audit: type=1400 audit(1752139085.614:1231): avc: denied { ioctl } for pid=7681 comm="syz.0.416" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 212.059700][ T7704] netlink: 'syz.4.422': attribute type 2 has an invalid length. [ 212.236321][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 212.320686][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.423'. [ 213.382482][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 213.552467][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 213.562271][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 213.606201][ T7729] netlink: 104 bytes leftover after parsing attributes in process `syz.2.429'. [ 213.700994][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.784196][ T10] usb 1-1: config 0 descriptor?? [ 213.918794][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 214.004230][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 214.077676][ T7736] netlink: 'syz.1.434': attribute type 2 has an invalid length. [ 214.087827][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 215.134089][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 215.134103][ T30] audit: type=1400 audit(1752139091.024:1252): avc: denied { accept } for pid=7744 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 215.162976][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 215.503791][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.519586][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.539444][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 215.549535][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.573111][ T24] usb 3-1: config 0 descriptor?? [ 215.674515][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.438'. [ 215.988924][ T24] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 215.998704][ T24] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 216.051809][ T30] audit: type=1400 audit(1752139091.934:1253): avc: denied { create } for pid=7751 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 216.191592][ T30] audit: type=1400 audit(1752139091.964:1254): avc: denied { read write } for pid=7751 comm="syz.1.439" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 216.219643][ T24] cp2112 0003:10C4:EA90.0004: error requesting version [ 216.228471][ T24] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -32 [ 216.239106][ T30] audit: type=1400 audit(1752139091.964:1255): avc: denied { open } for pid=7751 comm="syz.1.439" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 216.463508][ T30] audit: type=1400 audit(1752139092.334:1256): avc: denied { watch watch_reads } for pid=7759 comm="syz.1.441" path="/94" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 216.982805][ T10] gspca_vc032x: reg_r err -110 [ 217.049167][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.061382][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.108117][ T30] audit: type=1400 audit(1752139092.974:1257): avc: denied { name_bind } for pid=7762 comm="syz.3.442" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 217.135923][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.141348][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.238228][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.246867][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.253635][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.260237][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.273448][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.325821][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.338168][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.344195][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.349614][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.352373][ T30] audit: type=1400 audit(1752139093.224:1258): avc: denied { create } for pid=7762 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.356392][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.537901][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.622251][ T30] audit: type=1400 audit(1752139093.504:1259): avc: denied { read write } for pid=5830 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.656877][ T30] audit: type=1400 audit(1752139093.504:1260): avc: denied { open } for pid=5830 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.681248][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.681264][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.681274][ T10] gspca_vc032x: Unknown sensor... [ 217.681330][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 217.718405][ T30] audit: type=1400 audit(1752139093.504:1261): avc: denied { ioctl } for pid=5830 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.743953][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.139055][ T43] usb 1-1: USB disconnect, device number 10 [ 218.157826][ T9] usb 3-1: USB disconnect, device number 5 [ 219.158118][ T7790] could not allocate digest TFM handle sha224-ssse3 [ 220.574465][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 220.574481][ T30] audit: type=1400 audit(1752139096.104:1315): avc: denied { name_bind } for pid=7801 comm="syz.4.451" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 220.642604][ T30] audit: type=1400 audit(1752139096.104:1316): avc: denied { node_bind } for pid=7801 comm="syz.4.451" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 220.663865][ T30] audit: type=1400 audit(1752139096.514:1317): avc: denied { read write } for pid=7804 comm="syz.2.452" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 220.699703][ T30] audit: type=1400 audit(1752139096.514:1318): avc: denied { open } for pid=7804 comm="syz.2.452" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 220.722830][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.792081][ T30] audit: type=1400 audit(1752139096.514:1319): avc: denied { mounton } for pid=7804 comm="syz.2.452" path="/81/file0" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 221.003736][ T30] audit: type=1400 audit(1752139096.524:1320): avc: denied { mount } for pid=7804 comm="syz.2.452" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 221.025566][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.039517][ T30] audit: type=1400 audit(1752139096.584:1321): avc: denied { read } for pid=7804 comm="syz.2.452" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 221.089802][ T7816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 221.211766][ T30] audit: type=1400 audit(1752139096.584:1322): avc: denied { open } for pid=7804 comm="syz.2.452" path="/81/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 221.483431][ T30] audit: type=1400 audit(1752139096.654:1323): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 221.565195][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 221.675261][ T30] audit: type=1400 audit(1752139096.654:1324): avc: denied { create } for pid=7808 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 221.697323][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.460'. [ 222.445083][ T7840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.462'. [ 222.809546][ T7845] veth0: entered promiscuous mode [ 223.132436][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 223.375400][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 223.384617][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.393860][ T9] usb 3-1: Product: syz [ 223.413845][ T9] usb 3-1: Manufacturer: syz [ 223.421836][ T9] usb 3-1: SerialNumber: syz [ 223.502429][ T9] usb 3-1: config 0 descriptor?? [ 223.609544][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 223.767788][ T7845] netlink: 'syz.2.465': attribute type 4 has an invalid length. [ 223.981109][ T7857] FAULT_INJECTION: forcing a failure. [ 223.981109][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 223.995555][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.1.468 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 223.995578][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.995587][ T7857] Call Trace: [ 223.995593][ T7857] [ 223.995599][ T7857] dump_stack_lvl+0x16c/0x1f0 [ 223.995629][ T7857] should_fail_ex+0x512/0x640 [ 223.995651][ T7857] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 223.995675][ T7857] should_failslab+0xc2/0x120 [ 223.995698][ T7857] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 223.995717][ T7857] ? __alloc_skb+0x2b2/0x380 [ 223.995740][ T7857] __alloc_skb+0x2b2/0x380 [ 223.995759][ T7857] ? __pfx___alloc_skb+0x10/0x10 [ 223.995778][ T7857] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 223.995805][ T7857] netlink_alloc_large_skb+0x69/0x130 [ 223.995819][ T7857] netlink_sendmsg+0x6a1/0xdd0 [ 223.995837][ T7857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.995859][ T7857] ____sys_sendmsg+0xa95/0xc70 [ 223.995874][ T7857] ? copy_msghdr_from_user+0x10a/0x160 [ 223.995893][ T7857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.995919][ T7857] ___sys_sendmsg+0x134/0x1d0 [ 223.995939][ T7857] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.995958][ T7857] ? __lock_acquire+0x622/0x1c90 [ 223.996002][ T7857] __sys_sendmsg+0x16d/0x220 [ 223.996023][ T7857] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.996059][ T7857] do_syscall_64+0xcd/0x4c0 [ 223.996083][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.996100][ T7857] RIP: 0033:0x7f93c2d8e929 [ 223.996112][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.996128][ T7857] RSP: 002b:00007f93c3b79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.996145][ T7857] RAX: ffffffffffffffda RBX: 00007f93c2fb6080 RCX: 00007f93c2d8e929 [ 223.996156][ T7857] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 223.996166][ T7857] RBP: 00007f93c3b79090 R08: 0000000000000000 R09: 0000000000000000 [ 223.996176][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.996186][ T7857] R13: 0000000000000000 R14: 00007f93c2fb6080 R15: 00007fff8340fba8 [ 223.996208][ T7857] [ 226.561867][ T9] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 226.565598][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 226.565612][ T30] audit: type=1400 audit(1752139102.454:1408): avc: denied { create } for pid=7880 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.679272][ T30] audit: type=1400 audit(1752139102.484:1409): avc: denied { execmem } for pid=7880 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 226.715928][ T9] usb 3-1: USB disconnect, device number 6 [ 226.728277][ T30] audit: type=1400 audit(1752139102.614:1410): avc: denied { name_bind } for pid=7878 comm="syz.4.474" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 226.752758][ T30] audit: type=1400 audit(1752139102.614:1411): avc: denied { node_bind } for pid=7878 comm="syz.4.474" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 226.776508][ T30] audit: type=1400 audit(1752139102.614:1412): avc: denied { read } for pid=5501 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 227.189995][ T30] audit: type=1400 audit(1752139102.714:1413): avc: denied { create } for pid=7880 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.212221][ T9] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 227.281825][ T30] audit: type=1400 audit(1752139102.724:1414): avc: denied { setopt } for pid=7880 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.313505][ T30] audit: type=1400 audit(1752139102.724:1415): avc: denied { create } for pid=7880 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 227.335143][ T7844] veth0: left promiscuous mode [ 227.616967][ T5501] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 227.673010][ T30] audit: type=1400 audit(1752139102.724:1416): avc: denied { write } for pid=7880 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 227.744819][ T30] audit: type=1400 audit(1752139102.734:1417): avc: denied { ioctl } for pid=7880 comm="syz.3.475" path="socket:[16234]" dev="sockfs" ino=16234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 228.212719][ T9] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 229.212429][ T5907] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 229.642403][ T5907] usb 1-1: device descriptor read/64, error -71 [ 230.022432][ T5907] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 230.169618][ T5907] usb 1-1: device descriptor read/64, error -71 [ 230.829295][ T5907] usb usb1-port1: attempt power cycle [ 231.043836][ T7931] could not allocate digest TFM handle sha224-ssse3 [ 231.402428][ T5907] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 231.771555][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 231.771587][ T30] audit: type=1400 audit(1752139107.654:1462): avc: denied { create } for pid=7939 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 231.833452][ T5907] usb 1-1: device descriptor read/8, error -71 [ 231.989549][ T30] audit: type=1400 audit(1752139107.874:1463): avc: denied { read } for pid=7949 comm="syz.0.492" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 232.016084][ T30] audit: type=1400 audit(1752139107.874:1464): avc: denied { open } for pid=7949 comm="syz.0.492" path="/97/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 232.064188][ T30] audit: type=1400 audit(1752139107.954:1465): avc: denied { mount } for pid=7949 comm="syz.0.492" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 233.165283][ T30] audit: type=1400 audit(1752139109.044:1466): avc: denied { open } for pid=7964 comm="syz.4.496" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 233.215812][ T30] audit: type=1400 audit(1752139109.044:1467): avc: denied { ioctl } for pid=7964 comm="syz.4.496" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 233.287267][ T30] audit: type=1400 audit(1752139109.044:1468): avc: denied { ioctl } for pid=7964 comm="syz.4.496" path="socket:[16692]" dev="sockfs" ino=16692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.324343][ T7968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.312429][ T7978] netlink: 104 bytes leftover after parsing attributes in process `syz.4.499'. [ 234.554236][ T30] audit: type=1400 audit(1752139110.174:1469): avc: denied { write } for pid=7971 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 234.625973][ T30] audit: type=1400 audit(1752139110.194:1470): avc: denied { create } for pid=7971 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.660676][ T30] audit: type=1400 audit(1752139110.194:1471): avc: denied { write } for pid=7971 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.263172][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 235.442863][ T43] usb 5-1: device descriptor read/64, error -71 [ 235.862436][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 236.094125][ T43] usb 5-1: device descriptor read/64, error -71 [ 236.323704][ T43] usb usb5-port1: attempt power cycle [ 236.688852][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 236.740203][ T43] usb 5-1: device descriptor read/8, error -71 [ 236.840046][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 236.841419][ T30] audit: type=1400 audit(1752139112.704:1484): avc: denied { read } for pid=8014 comm="syz.0.511" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 237.063252][ T30] audit: type=1400 audit(1752139112.704:1485): avc: denied { open } for pid=8014 comm="syz.0.511" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 237.088803][ T30] audit: type=1400 audit(1752139112.714:1486): avc: denied { ioctl } for pid=8014 comm="syz.0.511" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 237.178329][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 237.672665][ T43] usb 5-1: device descriptor read/8, error -71 [ 237.779862][ T8015] capability: warning: `syz.0.511' uses 32-bit capabilities (legacy support in use) [ 237.789474][ T43] usb usb5-port1: unable to enumerate USB device [ 238.032503][ T5949] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 238.252430][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 238.296474][ T5949] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 238.320065][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 238.367329][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.424317][ T5949] usb 3-1: Product: syz [ 238.450814][ T5949] usb 3-1: Manufacturer: syz [ 238.486914][ T5949] usb 3-1: SerialNumber: syz [ 238.553626][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 238.576349][ T5949] usb 3-1: config 0 descriptor?? [ 238.610756][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 238.699844][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.762026][ T43] usb 5-1: Product: syz [ 238.795954][ T43] usb 5-1: Manufacturer: syz [ 238.832592][ T43] usb 5-1: SerialNumber: syz [ 238.981828][ T43] usb 5-1: config 0 descriptor?? [ 239.074534][ T5949] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 239.101471][ T8036] could not allocate digest TFM handle sha224-ssse3 [ 239.868815][ T30] audit: type=1400 audit(1752139115.534:1487): avc: denied { append } for pid=8040 comm="syz.1.520" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.914519][ T43] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 240.181993][ T5949] usb write operation failed. (-71) [ 240.205130][ T5949] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 240.226005][ T5949] dvbdev: DVB: registering new adapter (Terratec H7) [ 240.234607][ T5949] usb 3-1: media controller created [ 240.243743][ T5949] usb read operation failed. (-71) [ 240.249331][ T5949] usb write operation failed. (-71) [ 240.262962][ T5949] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 240.285940][ T5949] usb 3-1: USB disconnect, device number 7 [ 240.526702][ T43] usb write operation failed. (-71) [ 240.534982][ T43] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 240.546874][ T43] dvbdev: DVB: registering new adapter (Terratec H7) [ 240.553616][ T43] usb 5-1: media controller created [ 240.559031][ T43] usb read operation failed. (-71) [ 240.565805][ T43] usb write operation failed. (-71) [ 240.573557][ T43] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 240.590761][ T43] usb 5-1: USB disconnect, device number 12 [ 240.712485][ T5907] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 240.852373][ T5907] usb 1-1: device descriptor read/64, error -71 [ 241.093593][ T5907] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 242.050501][ T30] audit: type=1400 audit(1752139117.884:1488): avc: denied { getopt } for pid=8065 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.141924][ T30] audit: type=1400 audit(1752139118.024:1489): avc: denied { read write } for pid=8069 comm="syz.4.529" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.170022][ T8068] FAULT_INJECTION: forcing a failure. [ 242.170022][ T8068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.186006][ T5907] usb 1-1: device descriptor read/64, error -71 [ 242.195986][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.2.528 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 242.196010][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.196020][ T8068] Call Trace: [ 242.196026][ T8068] [ 242.196031][ T8068] dump_stack_lvl+0x16c/0x1f0 [ 242.196057][ T8068] should_fail_ex+0x512/0x640 [ 242.196080][ T8068] strncpy_from_user+0x3b/0x2e0 [ 242.196100][ T8068] getname_flags.part.0+0x8f/0x550 [ 242.196119][ T8068] getname_flags+0x93/0xf0 [ 242.196138][ T8068] __x64_sys_rename+0x58/0xa0 [ 242.196164][ T8068] do_syscall_64+0xcd/0x4c0 [ 242.196188][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.196204][ T8068] RIP: 0033:0x7f810bd8e929 [ 242.196219][ T8068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.196235][ T8068] RSP: 002b:00007f810cb65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 242.196252][ T8068] RAX: ffffffffffffffda RBX: 00007f810bfb5fa0 RCX: 00007f810bd8e929 [ 242.196262][ T8068] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000280 [ 242.196271][ T8068] RBP: 00007f810cb65090 R08: 0000000000000000 R09: 0000000000000000 [ 242.196280][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.196288][ T8068] R13: 0000000000000000 R14: 00007f810bfb5fa0 R15: 00007ffcdf2e6658 [ 242.196307][ T8068] [ 242.360389][ T30] audit: type=1400 audit(1752139118.024:1490): avc: denied { open } for pid=8069 comm="syz.4.529" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.493063][ T5907] usb usb1-port1: attempt power cycle [ 242.577410][ T30] audit: type=1400 audit(1752139118.054:1491): avc: denied { map } for pid=8069 comm="syz.4.529" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.625495][ T30] audit: type=1400 audit(1752139118.054:1492): avc: denied { read write execute } for pid=8069 comm="syz.4.529" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.651717][ T30] audit: type=1400 audit(1752139118.084:1494): avc: denied { read } for pid=8067 comm="syz.2.528" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 242.685669][ T30] audit: type=1400 audit(1752139118.084:1493): avc: denied { ioctl } for pid=8065 comm="syz.3.527" path="socket:[17612]" dev="sockfs" ino=17612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.715123][ T30] audit: type=1400 audit(1752139118.244:1495): avc: denied { ioctl } for pid=8057 comm="syz.0.524" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.741821][ T30] audit: type=1400 audit(1752139118.454:1496): avc: denied { create } for pid=8069 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.763170][ T30] audit: type=1400 audit(1752139118.454:1497): avc: denied { read write } for pid=8069 comm="syz.4.529" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 242.884350][ T5907] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 242.961545][ T5907] usb 1-1: device descriptor read/8, error -71 [ 243.322617][ T5907] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 243.718895][ T8084] could not allocate digest TFM handle sha224-ssse3 [ 243.782580][ T5907] usb 1-1: device descriptor read/8, error -71 [ 244.263159][ T5907] usb usb1-port1: unable to enumerate USB device [ 245.982341][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 247.002454][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 247.572897][ T8129] could not allocate digest TFM handle sha224-ssse3 [ 247.643889][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 247.643906][ T30] audit: type=1400 audit(1752139123.534:1556): avc: denied { read } for pid=8127 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 247.742364][ T9] usb 5-1: device descriptor read/64, error -71 [ 247.757583][ T8139] FAULT_INJECTION: forcing a failure. [ 247.757583][ T8139] name failslab, interval 1, probability 0, space 0, times 0 [ 247.777590][ T8139] CPU: 1 UID: 0 PID: 8139 Comm: syz.0.546 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 247.777615][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.777625][ T8139] Call Trace: [ 247.777632][ T8139] [ 247.777638][ T8139] dump_stack_lvl+0x16c/0x1f0 [ 247.777666][ T8139] should_fail_ex+0x512/0x640 [ 247.777688][ T8139] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 247.777713][ T8139] should_failslab+0xc2/0x120 [ 247.777738][ T8139] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 247.777760][ T8139] ? io_submit_one+0x122/0x1df0 [ 247.777786][ T8139] io_submit_one+0x122/0x1df0 [ 247.777812][ T8139] ? __lock_acquire+0xb8a/0x1c90 [ 247.777833][ T8139] ? __pfx_io_submit_one+0x10/0x10 [ 247.777864][ T8139] ? __might_fault+0xe3/0x190 [ 247.777884][ T8139] ? __might_fault+0x13b/0x190 [ 247.777911][ T8139] ? __x64_sys_io_submit+0x1a9/0x350 [ 247.777934][ T8139] __x64_sys_io_submit+0x1a9/0x350 [ 247.777960][ T8139] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 247.777983][ T8139] ? fput+0x70/0xf0 [ 247.778009][ T8139] do_syscall_64+0xcd/0x4c0 [ 247.778035][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.778052][ T8139] RIP: 0033:0x7f6de8f8e929 [ 247.778066][ T8139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.778083][ T8139] RSP: 002b:00007f6de9dcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 247.778100][ T8139] RAX: ffffffffffffffda RBX: 00007f6de91b5fa0 RCX: 00007f6de8f8e929 [ 247.778111][ T8139] RDX: 0000200000000300 RSI: 2000000000000326 RDI: 00007f6de9dac000 [ 247.778122][ T8139] RBP: 00007f6de9dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 247.778132][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.778141][ T8139] R13: 0000000000000000 R14: 00007f6de91b5fa0 R15: 00007ffc48af2638 [ 247.778164][ T8139] [ 248.125266][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 248.647732][ T30] audit: type=1400 audit(1752139124.044:1557): avc: denied { watch watch_reads } for pid=8136 comm="syz.2.545" path="/99/file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.754598][ T30] audit: type=1400 audit(1752139124.584:1558): avc: denied { execute } for pid=8136 comm="syz.2.545" name="file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.804011][ T30] audit: type=1400 audit(1752139124.584:1559): avc: denied { execute_no_trans } for pid=8136 comm="syz.2.545" path="/99/file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.822377][ T9] usb 5-1: device descriptor read/64, error -71 [ 248.941892][ T30] audit: type=1400 audit(1752139124.824:1560): avc: denied { write } for pid=8150 comm="syz.0.549" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 248.968361][ T8151] random: crng reseeded on system resumption [ 248.979076][ T30] audit: type=1400 audit(1752139124.844:1561): avc: denied { read write } for pid=8147 comm="syz.3.548" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 249.003585][ T30] audit: type=1400 audit(1752139124.844:1562): avc: denied { open } for pid=8147 comm="syz.3.548" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 249.006073][ T9] usb usb5-port1: attempt power cycle [ 249.033817][ T8154] FAULT_INJECTION: forcing a failure. [ 249.033817][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.049493][ T8154] CPU: 1 UID: 0 PID: 8154 Comm: syz.0.549 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 249.049517][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.049527][ T8154] Call Trace: [ 249.049533][ T8154] [ 249.049539][ T8154] dump_stack_lvl+0x16c/0x1f0 [ 249.049567][ T8154] should_fail_ex+0x512/0x640 [ 249.049593][ T8154] _copy_to_user+0x32/0xd0 [ 249.049619][ T8154] simple_read_from_buffer+0xcb/0x170 [ 249.049643][ T8154] proc_fail_nth_read+0x197/0x270 [ 249.049666][ T8154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.049689][ T8154] ? rw_verify_area+0xcf/0x680 [ 249.049708][ T8154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.049728][ T8154] vfs_read+0x1e4/0xc60 [ 249.049753][ T8154] ? __pfx___mutex_lock+0x10/0x10 [ 249.049777][ T8154] ? __pfx_vfs_read+0x10/0x10 [ 249.049804][ T8154] ? __fget_files+0x20e/0x3c0 [ 249.049835][ T8154] ksys_read+0x12a/0x250 [ 249.049856][ T8154] ? __pfx_ksys_read+0x10/0x10 [ 249.049878][ T8154] ? fdget+0x187/0x210 [ 249.049904][ T8154] do_syscall_64+0xcd/0x4c0 [ 249.049931][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.049949][ T8154] RIP: 0033:0x7f6de8f8d33c [ 249.049962][ T8154] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.049978][ T8154] RSP: 002b:00007f6de9dac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.049995][ T8154] RAX: ffffffffffffffda RBX: 00007f6de91b6080 RCX: 00007f6de8f8d33c [ 249.050006][ T8154] RDX: 000000000000000f RSI: 00007f6de9dac0a0 RDI: 0000000000000004 [ 249.050015][ T8154] RBP: 00007f6de9dac090 R08: 0000000000000000 R09: 0000000000000000 [ 249.050025][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.050035][ T8154] R13: 0000000000000001 R14: 00007f6de91b6080 R15: 00007ffc48af2638 [ 249.050057][ T8154] [ 249.050653][ T30] audit: type=1400 audit(1752139124.844:1563): avc: denied { ioctl } for pid=8147 comm="syz.3.548" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 249.078389][ T30] audit: type=1400 audit(1752139124.854:1564): avc: denied { open } for pid=8150 comm="syz.0.549" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.093614][ T30] audit: type=1400 audit(1752139124.874:1565): avc: denied { firmware_load } for pid=73 comm="kworker/u8:5" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 249.216700][ T8158] Bluetooth: MGMT ver 1.23 [ 249.321140][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 249.429795][ T8158] IPv6: syztnl0: Disabled Multicast RS [ 249.492703][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 249.497253][ T8165] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 249.542787][ T9] usb 5-1: device descriptor read/8, error -71 [ 249.551706][ T8165] team0: Device ipvlan1 failed to register rx_handler [ 249.872384][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 250.106851][ T9] usb 5-1: device not accepting address 16, error -71 [ 250.195598][ T9] usb usb5-port1: unable to enumerate USB device [ 250.760543][ T8187] fuse: Unknown parameter 'fd0x0000000000000007' [ 250.794322][ T8187] netlink: 'syz.0.552': attribute type 4 has an invalid length. [ 250.806628][ T8187] netlink: 'syz.0.552': attribute type 4 has an invalid length. [ 250.942463][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 251.216778][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.240307][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 251.272548][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.347246][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.441886][ T8186] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 251.450777][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 251.530900][ T8197] netlink: 'syz.3.561': attribute type 10 has an invalid length. [ 251.550183][ T8197] team0: Device ipvlan1 failed to register rx_handler [ 251.902388][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 252.011001][ T8199] overlayfs: cannot append lower layer [ 252.422665][ T9] usb 3-1: USB disconnect, device number 8 [ 252.543803][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.562482][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.580519][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 252.590219][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.610899][ T10] usb 1-1: config 0 descriptor?? [ 252.727978][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 252.727994][ T30] audit: type=1400 audit(1752139128.614:1574): avc: denied { create } for pid=8203 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 253.407350][ T30] audit: type=1400 audit(1752139129.264:1575): avc: denied { ioctl } for pid=8208 comm="syz.2.564" path="socket:[17177]" dev="sockfs" ino=17177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.656446][ T8210] vlan2: entered promiscuous mode [ 253.661781][ T8210] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 253.670907][ T8210] vlan2: entered allmulticast mode [ 253.685309][ T8210] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 253.751100][ T30] audit: type=1400 audit(1752139129.634:1576): avc: denied { watch watch_reads } for pid=8208 comm="syz.2.564" path="/104" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 253.770287][ T10] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 254.018964][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'. [ 254.394679][ T30] audit: type=1400 audit(1752139130.274:1577): avc: denied { create } for pid=8222 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.430716][ T30] audit: type=1400 audit(1752139130.284:1578): avc: denied { setopt } for pid=8222 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.460731][ T8225] tmpfs: Bad value for 'mpol' [ 254.602372][ T30] audit: type=1400 audit(1752139130.394:1579): avc: denied { bind } for pid=8222 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.621994][ T30] audit: type=1400 audit(1752139130.394:1580): avc: denied { name_bind } for pid=8222 comm="syz.3.568" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 254.644412][ T30] audit: type=1400 audit(1752139130.394:1581): avc: denied { node_bind } for pid=8222 comm="syz.3.568" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 254.730965][ T30] audit: type=1400 audit(1752139130.394:1582): avc: denied { write } for pid=8222 comm="syz.3.568" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.764012][ T30] audit: type=1400 audit(1752139130.394:1583): avc: denied { connect } for pid=8222 comm="syz.3.568" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.992397][ T8235] comedi comedi0: Minor 14 could not be opened [ 255.197700][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.204017][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.418075][ T5879] usb 1-1: USB disconnect, device number 19 [ 256.305594][ T8260] FAULT_INJECTION: forcing a failure. [ 256.305594][ T8260] name failslab, interval 1, probability 0, space 0, times 0 [ 256.320397][ T8260] CPU: 0 UID: 0 PID: 8260 Comm: syz.2.579 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 256.320419][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.320429][ T8260] Call Trace: [ 256.320435][ T8260] [ 256.320442][ T8260] dump_stack_lvl+0x16c/0x1f0 [ 256.320469][ T8260] should_fail_ex+0x512/0x640 [ 256.320491][ T8260] ? fs_reclaim_acquire+0xae/0x150 [ 256.320511][ T8260] ? tomoyo_encode2+0x100/0x3e0 [ 256.320533][ T8260] should_failslab+0xc2/0x120 [ 256.320558][ T8260] __kmalloc_noprof+0xd2/0x510 [ 256.320580][ T8260] ? d_absolute_path+0x136/0x1a0 [ 256.320602][ T8260] tomoyo_encode2+0x100/0x3e0 [ 256.320629][ T8260] tomoyo_encode+0x29/0x50 [ 256.320651][ T8260] tomoyo_realpath_from_path+0x18f/0x6e0 [ 256.320682][ T8260] tomoyo_path_number_perm+0x245/0x580 [ 256.320701][ T8260] ? tomoyo_path_number_perm+0x237/0x580 [ 256.320724][ T8260] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.320745][ T8260] ? find_held_lock+0x2b/0x80 [ 256.320790][ T8260] ? find_held_lock+0x2b/0x80 [ 256.320810][ T8260] ? hook_file_ioctl_common+0x145/0x410 [ 256.320832][ T8260] ? __fget_files+0x20e/0x3c0 [ 256.320859][ T8260] security_file_ioctl+0x9b/0x240 [ 256.320885][ T8260] __x64_sys_ioctl+0xb7/0x210 [ 256.320906][ T8260] do_syscall_64+0xcd/0x4c0 [ 256.320932][ T8260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.320949][ T8260] RIP: 0033:0x7f810bd8e929 [ 256.320962][ T8260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.320979][ T8260] RSP: 002b:00007f810cb44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.320995][ T8260] RAX: ffffffffffffffda RBX: 00007f810bfb6080 RCX: 00007f810bd8e929 [ 256.321007][ T8260] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 000000000000000c [ 256.321016][ T8260] RBP: 00007f810cb44090 R08: 0000000000000000 R09: 0000000000000000 [ 256.321026][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.321035][ T8260] R13: 0000000000000000 R14: 00007f810bfb6080 R15: 00007ffcdf2e6658 [ 256.321059][ T8260] [ 256.321374][ T8260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 256.542280][ T8260] comedi comedi0: Minor 14 could not be opened [ 256.872432][ T5929] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 257.558133][ T5949] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 257.568335][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.579356][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.589348][ T5929] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 257.598397][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.607734][ T5929] usb 1-1: config 0 descriptor?? [ 258.130610][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 258.130625][ T30] audit: type=1400 audit(1752139134.014:1593): avc: denied { create } for pid=8284 comm="syz.4.586" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.173025][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 258.180136][ T5949] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 258.191457][ T5949] usb 3-1: config 0 has no interface number 0 [ 258.197949][ T5949] usb 3-1: config 0 interface 120 has no altsetting 0 [ 258.207638][ T5949] usb 3-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=e9.8b [ 258.216961][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.225194][ T5949] usb 3-1: Product: syz [ 258.229637][ T5949] usb 3-1: Manufacturer: syz [ 258.234570][ T5949] usb 3-1: SerialNumber: syz [ 258.242632][ T5949] usb 3-1: config 0 descriptor?? [ 258.264322][ T5949] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 258.277245][ T5949] dw2102: su3000_power_ctrl: 1, initialized 0 [ 258.285681][ T5949] dvb-usb: bulk message failed: -22 (2/0) [ 258.301138][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.311503][ T5949] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 258.372500][ T30] audit: type=1400 audit(1752139134.254:1594): avc: denied { unlink } for pid=5843 comm="syz-executor" name="file0" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.392045][ T5929] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 258.406318][ T5949] usb 3-1: media controller created [ 258.411893][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 258.420611][ T5929] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 258.441523][ T5949] dw2102: i2c transfer failed. [ 258.460562][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 258.592899][ T5949] dw2102: i2c transfer failed. [ 258.597724][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 258.603492][ T5949] dw2102: i2c transfer failed. [ 258.608275][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 258.614047][ T5949] dw2102: i2c transfer failed. [ 258.618826][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 258.625358][ T5949] dw2102: i2c transfer failed. [ 258.631652][ T5929] cp2112 0003:10C4:EA90.0006: error requesting version [ 258.638959][ T5949] dvb-usb: bulk message failed: -22 (6/0) [ 258.646693][ T5929] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -32 [ 258.655802][ T5949] dw2102: i2c transfer failed. [ 258.660568][ T5949] dvb-usb: MAC address: 02:02:02:02:02:02 [ 258.804435][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.770695][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 259.776490][ T5949] dw2102: command 0x51 transfer failed. [ 259.803590][ T43] usb 1-1: USB disconnect, device number 20 [ 260.401420][ T30] audit: type=1400 audit(1752139136.284:1595): avc: denied { write } for pid=8304 comm="syz.3.590" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 260.422558][ T5949] DVB: Unable to find symbol m88rs2000_attach() [ 260.430258][ T5949] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 260.846190][ T30] audit: type=1400 audit(1752139136.374:1596): avc: denied { create } for pid=8303 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 261.033625][ T30] audit: type=1400 audit(1752139136.374:1597): avc: denied { listen } for pid=8303 comm="syz.0.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 261.150950][ T30] audit: type=1400 audit(1752139137.024:1598): avc: denied { write } for pid=8313 comm="syz.4.594" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 261.202425][ T5949] rc_core: IR keymap rc-su3000 not found [ 261.208051][ T5949] Registered IR keymap rc-empty [ 261.303845][ T30] audit: type=1400 audit(1752139137.194:1599): avc: denied { ioctl } for pid=8328 comm="syz.3.597" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 261.403767][ T5949] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 261.424221][ T5949] input: TeVii S632 USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 261.445353][ T5949] dvb-usb: schedule remote query interval to 150 msecs. [ 261.452510][ T30] audit: type=1400 audit(1752139137.334:1600): avc: denied { read } for pid=5191 comm="acpid" name="event4" dev="devtmpfs" ino=3057 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 261.462333][ T5949] dw2102: su3000_power_ctrl: 0, initialized 1 [ 261.950428][ T30] audit: type=1400 audit(1752139137.334:1601): avc: denied { open } for pid=5191 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3057 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 261.978078][ T5983] dvb-usb: bulk message failed: -22 (1/0) [ 261.984589][ T30] audit: type=1400 audit(1752139137.334:1602): avc: denied { ioctl } for pid=5191 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3057 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.011505][ T5949] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 262.019418][ T5983] dw2102: i2c transfer failed. [ 262.086297][ T5949] usb 3-1: USB disconnect, device number 9 [ 262.317388][ T5949] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 262.872404][ T5949] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 263.033016][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 263.054798][ T5949] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 263.065143][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.078571][ T5949] usb 3-1: Product: syz [ 263.083609][ T5949] usb 3-1: Manufacturer: syz [ 263.088846][ T5949] usb 3-1: SerialNumber: syz [ 263.133154][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 263.133178][ T30] audit: type=1400 audit(1752139139.014:1608): avc: denied { name_bind } for pid=8356 comm="syz.4.606" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 263.345154][ T5949] usb 3-1: config 0 descriptor?? [ 263.645321][ T5949] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 264.113264][ T30] audit: type=1400 audit(1752139139.994:1609): avc: denied { create } for pid=8364 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.313537][ T5949] usb write operation failed. (-71) [ 264.335861][ T5949] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.436259][ T30] audit: type=1400 audit(1752139140.244:1610): avc: denied { create } for pid=8364 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.700181][ T5949] dvbdev: DVB: registering new adapter (Terratec H7) [ 264.719439][ T30] audit: type=1400 audit(1752139140.244:1611): avc: denied { setopt } for pid=8364 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.763386][ T5949] usb 3-1: media controller created [ 264.777174][ T5949] usb read operation failed. (-71) [ 264.830152][ T30] audit: type=1400 audit(1752139140.254:1612): avc: denied { create } for pid=8364 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 264.830279][ T5949] usb write operation failed. (-71) [ 264.855813][ T30] audit: type=1400 audit(1752139140.264:1613): avc: denied { write } for pid=8364 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 264.876481][ T30] audit: type=1400 audit(1752139140.274:1614): avc: denied { ioctl } for pid=8364 comm="syz.4.608" path="socket:[18186]" dev="sockfs" ino=18186 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 264.901962][ T30] audit: type=1400 audit(1752139140.304:1615): avc: denied { bind } for pid=8364 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.052645][ T5949] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 265.209891][ T5949] usb 3-1: USB disconnect, device number 10 [ 265.249095][ T30] audit: type=1400 audit(1752139141.134:1616): avc: denied { create } for pid=8372 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 265.321703][ T8382] FAULT_INJECTION: forcing a failure. [ 265.321703][ T8382] name failslab, interval 1, probability 0, space 0, times 0 [ 265.335775][ T8382] CPU: 1 UID: 0 PID: 8382 Comm: syz.3.611 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 265.335798][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.335808][ T8382] Call Trace: [ 265.335814][ T8382] [ 265.335820][ T8382] dump_stack_lvl+0x16c/0x1f0 [ 265.335848][ T8382] should_fail_ex+0x512/0x640 [ 265.335869][ T8382] ? fs_reclaim_acquire+0xae/0x150 [ 265.335889][ T8382] should_failslab+0xc2/0x120 [ 265.335913][ T8382] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 265.335937][ T8382] ? security_inode_alloc+0x3b/0x2b0 [ 265.335961][ T8382] security_inode_alloc+0x3b/0x2b0 [ 265.335982][ T8382] inode_init_always_gfp+0xce4/0x1030 [ 265.336010][ T8382] alloc_inode+0x86/0x240 [ 265.336027][ T8382] sock_alloc+0x40/0x280 [ 265.336053][ T8382] __sock_create+0xc1/0x8d0 [ 265.336080][ T8382] __sys_socketpair+0x1d8/0x5a0 [ 265.336100][ T8382] ? __pfx___sys_socketpair+0x10/0x10 [ 265.336122][ T8382] ? __pfx_ksys_write+0x10/0x10 [ 265.336148][ T8382] __x64_sys_socketpair+0x96/0x100 [ 265.336166][ T8382] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.336189][ T8382] do_syscall_64+0xcd/0x4c0 [ 265.336214][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.336231][ T8382] RIP: 0033:0x7f119c78e929 [ 265.336245][ T8382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.336261][ T8382] RSP: 002b:00007f119d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 265.336277][ T8382] RAX: ffffffffffffffda RBX: 00007f119c9b6160 RCX: 00007f119c78e929 [ 265.336288][ T8382] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000006 [ 265.336298][ T8382] RBP: 00007f119d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 265.336308][ T8382] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 265.336317][ T8382] R13: 0000000000000000 R14: 00007f119c9b6160 R15: 00007ffd0167fa48 [ 265.336341][ T8382] [ 265.528212][ T8382] socket: no more sockets [ 265.539679][ T5838] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 265.559031][ T5838] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 265.650800][ T30] audit: type=1400 audit(1752139141.454:1617): avc: denied { connect } for pid=8372 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 265.681530][ T882] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 265.700259][ T5838] usb 4-1: USB disconnect, device number 8 [ 265.712426][ T882] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 266.300919][ T5983] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 266.343537][ T882] usb 2-1: USB disconnect, device number 7 [ 266.583733][ T5983] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.592017][ T5983] usb 5-1: config 0 has no interface number 0 [ 267.145045][ T5983] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 267.154358][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.179401][ T5983] usb 5-1: config 0 descriptor?? [ 267.187987][ T5983] usb 5-1: selecting invalid altsetting 1 [ 267.570101][ T5983] dvb_ttusb_budget: ttusb_init_controller: error [ 267.576637][ T5983] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 267.687484][ T8379] FAULT_INJECTION: forcing a failure. [ 267.687484][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.713901][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.4.612 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 267.713917][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.713923][ T8379] Call Trace: [ 267.713926][ T8379] [ 267.713930][ T8379] dump_stack_lvl+0x16c/0x1f0 [ 267.713948][ T8379] should_fail_ex+0x512/0x640 [ 267.713964][ T8379] _copy_from_user+0x2e/0xd0 [ 267.713980][ T8379] kstrtouint_from_user+0xd6/0x1d0 [ 267.713991][ T8379] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 267.714001][ T8379] ? __lock_acquire+0xb8a/0x1c90 [ 267.714018][ T8379] proc_fail_nth_write+0x83/0x250 [ 267.714031][ T8379] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.714048][ T8379] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.714059][ T8379] vfs_write+0x29d/0x1150 [ 267.714075][ T8379] ? __pfx___mutex_lock+0x10/0x10 [ 267.714089][ T8379] ? __pfx_vfs_write+0x10/0x10 [ 267.714106][ T8379] ? __fget_files+0x20e/0x3c0 [ 267.714123][ T8379] ksys_write+0x12a/0x250 [ 267.714138][ T8379] ? __pfx_ksys_write+0x10/0x10 [ 267.714154][ T8379] do_syscall_64+0xcd/0x4c0 [ 267.714170][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.714181][ T8379] RIP: 0033:0x7f6f9038d3df [ 267.714189][ T8379] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 267.714199][ T8379] RSP: 002b:00007f6f91232030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 267.714212][ T8379] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f9038d3df [ 267.714223][ T8379] RDX: 0000000000000001 RSI: 00007f6f912320a0 RDI: 0000000000000010 [ 267.714233][ T8379] RBP: 00007f6f91232090 R08: 0000000000000000 R09: 0000000000000000 [ 267.714242][ T8379] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 267.714252][ T8379] R13: 0000000000000000 R14: 00007f6f905b5fa0 R15: 00007ffed0b7b3b8 [ 267.714276][ T8379] [ 267.970540][ T5983] DVB: Unable to find symbol cx22700_attach() [ 268.039202][ T8409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.580402][ T5983] DVB: Unable to find symbol tda10046_attach() [ 268.940605][ T5983] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 268.950475][ T5983] usb 5-1: USB disconnect, device number 17 [ 268.984125][ T5879] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 269.327310][ T30] audit: type=1400 audit(1752139145.214:1618): avc: denied { bind } for pid=8419 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 269.379894][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 269.503727][ T5879] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 269.527072][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.546222][ T5879] usb 2-1: Product: syz [ 269.550395][ T5879] usb 2-1: Manufacturer: syz [ 269.555059][ T5879] usb 2-1: SerialNumber: syz [ 269.569340][ T5879] usb 2-1: config 0 descriptor?? [ 270.005009][ T5879] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 271.383050][ T5879] usb write operation failed. (-71) [ 271.534903][ T5879] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 271.545790][ T5879] dvbdev: DVB: registering new adapter (Terratec H7) [ 271.563934][ T5879] usb 2-1: media controller created [ 271.586460][ T5879] usb read operation failed. (-71) [ 271.597435][ T5879] usb write operation failed. (-71) [ 271.622261][ T5879] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 271.689205][ T30] audit: type=1400 audit(1752139147.544:1619): avc: denied { shutdown } for pid=8449 comm="syz.0.631" laddr=fe80::1d lport=34288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.847721][ T5879] usb 2-1: USB disconnect, device number 8 [ 271.864940][ T30] audit: type=1400 audit(1752139147.554:1620): avc: denied { read } for pid=8449 comm="syz.0.631" laddr=fe80::1d lport=34288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.932630][ T30] audit: type=1400 audit(1752139147.604:1621): avc: denied { create } for pid=8448 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 273.587852][ T8463] could not allocate digest TFM handle sha224-ssse3 [ 273.696684][ T30] audit: type=1400 audit(1752139149.554:1622): avc: denied { map } for pid=8466 comm="syz.4.635" path="socket:[19170]" dev="sockfs" ino=19170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.956439][ T8473] __vm_enough_memory: pid: 8473, comm: syz.1.636, bytes: 21200451473408 not enough memory for the allocation [ 274.108614][ T30] audit: type=1400 audit(1752139149.994:1623): avc: denied { create } for pid=8472 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 274.211220][ T8484] FAULT_INJECTION: forcing a failure. [ 274.211220][ T8484] name failslab, interval 1, probability 0, space 0, times 0 [ 274.223935][ T8484] CPU: 0 UID: 0 PID: 8484 Comm: syz.4.638 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 274.223963][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.223974][ T8484] Call Trace: [ 274.223980][ T8484] [ 274.223987][ T8484] dump_stack_lvl+0x16c/0x1f0 [ 274.224015][ T8484] should_fail_ex+0x512/0x640 [ 274.224036][ T8484] ? fs_reclaim_acquire+0xae/0x150 [ 274.224055][ T8484] ? tomoyo_encode2+0x100/0x3e0 [ 274.224077][ T8484] should_failslab+0xc2/0x120 [ 274.224102][ T8484] __kmalloc_noprof+0xd2/0x510 [ 274.224123][ T8484] ? tomoyo_encode2+0x92/0x3e0 [ 274.224151][ T8484] tomoyo_encode2+0x100/0x3e0 [ 274.224177][ T8484] tomoyo_encode+0x29/0x50 [ 274.224199][ T8484] tomoyo_realpath_from_path+0x18f/0x6e0 [ 274.224231][ T8484] tomoyo_path_number_perm+0x245/0x580 [ 274.224251][ T8484] ? tomoyo_path_number_perm+0x237/0x580 [ 274.224273][ T8484] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.224295][ T8484] ? preempt_schedule_common+0x44/0xc0 [ 274.224342][ T8484] ? find_held_lock+0x2b/0x80 [ 274.224364][ T8484] ? hook_file_ioctl_common+0x145/0x410 [ 274.224386][ T8484] ? __fget_files+0x20e/0x3c0 [ 274.224413][ T8484] security_file_ioctl+0x9b/0x240 [ 274.224438][ T8484] __x64_sys_ioctl+0xb7/0x210 [ 274.224459][ T8484] do_syscall_64+0xcd/0x4c0 [ 274.224485][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.224502][ T8484] RIP: 0033:0x7f6f9038e929 [ 274.224516][ T8484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.224533][ T8484] RSP: 002b:00007f6f911f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.224549][ T8484] RAX: ffffffffffffffda RBX: 00007f6f905b6160 RCX: 00007f6f9038e929 [ 274.224560][ T8484] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000004 [ 274.224570][ T8484] RBP: 00007f6f911f0090 R08: 0000000000000000 R09: 0000000000000000 [ 274.224580][ T8484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.224590][ T8484] R13: 0000000000000000 R14: 00007f6f905b6160 R15: 00007ffed0b7b3b8 [ 274.224614][ T8484] [ 274.224672][ T8484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.462743][ T30] audit: type=1400 audit(1752139149.994:1624): avc: denied { connect } for pid=8472 comm="syz.1.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.347697][ T30] audit: type=1400 audit(1752139150.844:1625): avc: denied { block_suspend } for pid=8478 comm="syz.3.639" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 275.856429][ T30] audit: type=1400 audit(1752139150.884:1626): avc: denied { read write } for pid=8478 comm="syz.3.639" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 275.881644][ T30] audit: type=1400 audit(1752139150.884:1627): avc: denied { open } for pid=8478 comm="syz.3.639" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 275.908028][ T30] audit: type=1400 audit(1752139150.884:1628): avc: denied { ioctl } for pid=8478 comm="syz.3.639" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 276.140375][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'. [ 276.406913][ T30] audit: type=1400 audit(1752139152.294:1629): avc: denied { create } for pid=8491 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.408684][ T8494] netlink: 'syz.1.642': attribute type 2 has an invalid length. [ 276.470555][ T30] audit: type=1400 audit(1752139152.294:1630): avc: denied { connect } for pid=8491 comm="syz.1.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.586721][ T30] audit: type=1400 audit(1752139152.474:1631): avc: denied { ioctl } for pid=8491 comm="syz.1.642" path="socket:[19539]" dev="sockfs" ino=19539 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.870174][ T8502] FAULT_INJECTION: forcing a failure. [ 276.870174][ T8502] name failslab, interval 1, probability 0, space 0, times 0 [ 276.882896][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: syz.0.644 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 276.882920][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.882930][ T8502] Call Trace: [ 276.882937][ T8502] [ 276.882944][ T8502] dump_stack_lvl+0x16c/0x1f0 [ 276.882973][ T8502] should_fail_ex+0x512/0x640 [ 276.882995][ T8502] ? fs_reclaim_acquire+0xae/0x150 [ 276.883015][ T8502] ? tomoyo_encode2+0x100/0x3e0 [ 276.883037][ T8502] should_failslab+0xc2/0x120 [ 276.883062][ T8502] __kmalloc_noprof+0xd2/0x510 [ 276.883084][ T8502] ? d_absolute_path+0x136/0x1a0 [ 276.883106][ T8502] tomoyo_encode2+0x100/0x3e0 [ 276.883133][ T8502] tomoyo_encode+0x29/0x50 [ 276.883156][ T8502] tomoyo_realpath_from_path+0x18f/0x6e0 [ 276.883188][ T8502] tomoyo_path_number_perm+0x245/0x580 [ 276.883207][ T8502] ? tomoyo_path_number_perm+0x237/0x580 [ 276.883230][ T8502] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 276.883252][ T8502] ? __schedule+0x1181/0x5de0 [ 276.883297][ T8502] ? rcu_is_watching+0x12/0xc0 [ 276.883318][ T8502] ? irqentry_exit+0x3b/0x90 [ 276.883339][ T8502] ? hook_file_ioctl_common+0x145/0x410 [ 276.883354][ T8502] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.883388][ T8502] security_file_ioctl+0x9b/0x240 [ 276.883413][ T8502] __x64_sys_ioctl+0xb7/0x210 [ 276.883434][ T8502] do_syscall_64+0xcd/0x4c0 [ 276.883459][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.883476][ T8502] RIP: 0033:0x7f6de8f8e929 [ 276.883490][ T8502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.883507][ T8502] RSP: 002b:00007f6de9d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.883523][ T8502] RAX: ffffffffffffffda RBX: 00007f6de91b6160 RCX: 00007f6de8f8e929 [ 276.883534][ T8502] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000005 [ 276.883544][ T8502] RBP: 00007f6de9d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 276.883554][ T8502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.883565][ T8502] R13: 0000000000000000 R14: 00007f6de91b6160 R15: 00007ffc48af2638 [ 276.883589][ T8502] [ 277.096539][ T8502] ERROR: Out of memory at tomoyo_realpath_from_path. [ 280.797776][ T8525] could not allocate digest TFM handle sha224-ssse3 [ 281.091319][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'. [ 281.746160][ T5838] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 281.872940][ T8558] FAULT_INJECTION: forcing a failure. [ 281.872940][ T8558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.912161][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.0.657 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 281.912188][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.912198][ T8558] Call Trace: [ 281.912204][ T8558] [ 281.912211][ T8558] dump_stack_lvl+0x16c/0x1f0 [ 281.912239][ T8558] should_fail_ex+0x512/0x640 [ 281.912264][ T8558] _copy_to_user+0x32/0xd0 [ 281.912292][ T8558] simple_read_from_buffer+0xcb/0x170 [ 281.912315][ T8558] proc_fail_nth_read+0x197/0x270 [ 281.912334][ T8558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.912356][ T8558] ? rw_verify_area+0xcf/0x680 [ 281.912375][ T8558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.912396][ T8558] vfs_read+0x1e4/0xc60 [ 281.912419][ T8558] ? __pfx___mutex_lock+0x10/0x10 [ 281.912443][ T8558] ? __pfx_vfs_read+0x10/0x10 [ 281.912471][ T8558] ? __fget_files+0x20e/0x3c0 [ 281.912501][ T8558] ksys_read+0x12a/0x250 [ 281.912520][ T8558] ? __pfx_ksys_read+0x10/0x10 [ 281.912548][ T8558] do_syscall_64+0xcd/0x4c0 [ 281.912574][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.912598][ T8558] RIP: 0033:0x7f6de8f8d33c [ 281.912612][ T8558] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 281.912627][ T8558] RSP: 002b:00007f6de9dac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.912643][ T8558] RAX: ffffffffffffffda RBX: 00007f6de91b6080 RCX: 00007f6de8f8d33c [ 281.912653][ T8558] RDX: 000000000000000f RSI: 00007f6de9dac0a0 RDI: 0000000000000005 [ 281.912663][ T8558] RBP: 00007f6de9dac090 R08: 0000000000000000 R09: 0000000000000000 [ 281.912673][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.912682][ T8558] R13: 0000000000000000 R14: 00007f6de91b6080 R15: 00007ffc48af2638 [ 281.912706][ T8558] [ 282.313732][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.325841][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.362423][ T5838] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 282.399986][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.453326][ T5838] usb 2-1: config 0 descriptor?? [ 282.661463][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 283.310796][ T5838] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 283.481634][ T5838] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 283.532413][ T8568] could not allocate digest TFM handle sha224-ssse3 [ 283.582988][ C0] ------------[ cut here ]------------ [ 283.588648][ C0] WARNING: CPU: 0 PID: 8574 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 [ 283.598129][ C0] Modules linked in: [ 283.602122][ C0] CPU: 0 UID: 0 PID: 8574 Comm: fido_id Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 283.613849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 283.620281][ T5838] cp2112 0003:10C4:EA90.0007: error requesting version [ 283.623925][ C0] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 283.623956][ C0] Code: 0f 0b 90 e9 12 fe ff ff e8 69 c0 b5 f7 90 0f 0b 90 e9 5e fe ff ff e8 5b c0 b5 f7 90 0f 0b 90 e9 94 fe ff ff e8 4d c0 b5 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 af 9b 1c f8 e9 d7 fc ff ff 4c 89 ff e8 [ 283.623974][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010246 [ 283.623991][ C0] RAX: 0000000000000000 RBX: ffff888032b25e80 RCX: ffffffff8a063597 [ 283.624005][ C0] RDX: ffff8880275fa440 RSI: ffffffff8a0636c3 RDI: 0000000000000005 [ 283.624018][ C0] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 283.624030][ C0] R10: 0000000000000fff R11: 0000000000000001 R12: ffff888032b25e80 [ 283.624044][ C0] R13: ffff888032b25f10 R14: ffffc90000007e90 R15: 0000000000000003 [ 283.624057][ C0] FS: 0000000000000000(0000) GS:ffff888124716000(0000) knlGS:0000000000000000 [ 283.624077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.624091][ C0] CR2: 00007f8130536000 CR3: 00000000370a6000 CR4: 00000000003526f0 [ 283.624104][ C0] Call Trace: [ 283.624111][ C0] [ 283.624120][ C0] ? inet6_cleanup_sock+0x117/0x210 [ 283.736807][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 283.742456][ C0] __sk_destruct+0x81/0x980 [ 283.746954][ C0] ? rcu_core+0x797/0x14e0 [ 283.751364][ C0] rcu_core+0x79c/0x14e0 [ 283.755625][ C0] ? __pfx_rcu_core+0x10/0x10 [ 283.760289][ C0] ? ktime_get+0x1a7/0x310 [ 283.764709][ C0] ? mark_held_locks+0x49/0x80 [ 283.769459][ C0] handle_softirqs+0x219/0x8e0 [ 283.774230][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 283.779512][ C0] __irq_exit_rcu+0x109/0x170 [ 283.784189][ C0] irq_exit_rcu+0x9/0x30 [ 283.788428][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 283.794060][ C0] [ 283.796969][ C0] [ 283.799895][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.805876][ C0] RIP: 0010:write_comp_data+0x3/0x90 [ 283.811142][ C0] Code: ab af 14 12 48 8b 80 30 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 <49> 89 f8 49 89 f1 65 48 8b 15 77 af 14 12 65 8b 05 88 af 14 12 a9 [ 283.830740][ C0] RSP: 0018:ffffc900035973d0 EFLAGS: 00000246 [ 283.836797][ C0] RAX: 0000000000000001 RBX: ffff88801b874640 RCX: ffffffff8b7fdda5 [ 283.844756][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 283.852714][ C0] RBP: ffff888074a73dc0 R08: 0000000000000005 R09: 0000000000000005 [ 283.860665][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 283.868624][ C0] R13: 000000000000000c R14: 0000000000000001 R15: 0000000000000000 [ 283.876617][ C0] ? mt_validate_nulls+0x545/0x9e0 [ 283.881718][ C0] mt_validate_nulls+0x545/0x9e0 [ 283.886649][ C0] ? __pfx_mt_validate_nulls+0x10/0x10 [ 283.892110][ C0] ? mas_next_node+0x7e0/0xf50 [ 283.896879][ C0] mt_validate+0x30d8/0x4210 [ 283.901454][ C0] ? __pfx_mt_validate+0x10/0x10 [ 283.906401][ C0] validate_mm+0xb0/0x570 [ 283.910711][ C0] ? __pfx_validate_mm+0x10/0x10 [ 283.915641][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.920827][ C0] ? kmem_cache_free+0x16d/0x4d0 [ 283.925753][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 283.931624][ C0] ? percpu_counter_add_batch+0xb8/0x1f0 [ 283.937249][ C0] vms_complete_munmap_vmas+0x602/0x970 [ 283.942799][ C0] __mmap_region+0x8e7/0x25e0 [ 283.947465][ C0] ? mt_validate_nulls+0x1c1/0x9e0 [ 283.952579][ C0] ? __pfx___mmap_region+0x10/0x10 [ 283.957673][ C0] ? __lock_acquire+0x622/0x1c90 [ 283.962606][ C0] ? avc_has_perm_noaudit+0x117/0x3b0 [ 283.967971][ C0] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 283.973854][ C0] mmap_region+0x1ab/0x3f0 [ 283.978251][ C0] ? __get_unmapped_area+0x267/0x440 [ 283.983525][ C0] do_mmap+0xa3e/0x1210 [ 283.987663][ C0] ? __pfx_do_mmap+0x10/0x10 [ 283.992226][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 283.997854][ C0] vm_mmap_pgoff+0x281/0x450 [ 284.002440][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 284.007536][ C0] ? __fget_files+0x20e/0x3c0 [ 284.012198][ C0] ksys_mmap_pgoff+0x32c/0x5c0 [ 284.016955][ C0] __x64_sys_mmap+0x125/0x190 [ 284.021614][ C0] do_syscall_64+0xcd/0x4c0 [ 284.026109][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.031978][ C0] RIP: 0033:0x7f8130561242 [ 284.036380][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 284.055973][ C0] RSP: 002b:00007fff58d96488 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 284.064375][ C0] RAX: ffffffffffffffda RBX: 00007f81304a1000 RCX: 00007f8130561242 [ 284.072338][ C0] RDX: 0000000000000001 RSI: 0000000000005000 RDI: 00007f81304a1000 [ 284.080287][ C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000013000 [ 284.088243][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff58d96510 [ 284.096216][ C0] R13: 00007f8130535b20 R14: 00007fff58d968c0 R15: 00000fffeb1b2c94 [ 284.104211][ C0] [ 284.107230][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.114502][ C0] CPU: 0 UID: 0 PID: 8574 Comm: fido_id Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 284.126188][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.136216][ C0] Call Trace: [ 284.139483][ C0] [ 284.142313][ C0] dump_stack_lvl+0x3d/0x1f0 [ 284.146889][ C0] panic+0x71c/0x800 [ 284.150771][ C0] ? __pfx_panic+0x10/0x10 [ 284.155166][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 284.160346][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 284.165448][ C0] ? inet_sock_destruct+0x684/0x830 [ 284.170630][ C0] check_panic_on_warn+0xab/0xb0 [ 284.175559][ C0] __warn+0xf6/0x3c0 [ 284.179431][ C0] ? inet_sock_destruct+0x684/0x830 [ 284.184606][ C0] report_bug+0x3c3/0x580 [ 284.188915][ C0] ? inet_sock_destruct+0x684/0x830 [ 284.194092][ C0] handle_bug+0x184/0x210 [ 284.198404][ C0] exc_invalid_op+0x17/0x50 [ 284.202886][ C0] asm_exc_invalid_op+0x1a/0x20 [ 284.207722][ C0] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 284.213505][ C0] Code: 0f 0b 90 e9 12 fe ff ff e8 69 c0 b5 f7 90 0f 0b 90 e9 5e fe ff ff e8 5b c0 b5 f7 90 0f 0b 90 e9 94 fe ff ff e8 4d c0 b5 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 af 9b 1c f8 e9 d7 fc ff ff 4c 89 ff e8 [ 284.233101][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010246 [ 284.239144][ C0] RAX: 0000000000000000 RBX: ffff888032b25e80 RCX: ffffffff8a063597 [ 284.247089][ C0] RDX: ffff8880275fa440 RSI: ffffffff8a0636c3 RDI: 0000000000000005 [ 284.255045][ C0] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 284.262996][ C0] R10: 0000000000000fff R11: 0000000000000001 R12: ffff888032b25e80 [ 284.270945][ C0] R13: ffff888032b25f10 R14: ffffc90000007e90 R15: 0000000000000003 [ 284.278896][ C0] ? inet_sock_destruct+0x557/0x830 [ 284.284075][ C0] ? inet_sock_destruct+0x683/0x830 [ 284.289254][ C0] ? inet6_cleanup_sock+0x117/0x210 [ 284.294432][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 284.300057][ C0] __sk_destruct+0x81/0x980 [ 284.304541][ C0] ? rcu_core+0x797/0x14e0 [ 284.308946][ C0] rcu_core+0x79c/0x14e0 [ 284.313190][ C0] ? __pfx_rcu_core+0x10/0x10 [ 284.317844][ C0] ? ktime_get+0x1a7/0x310 [ 284.322240][ C0] ? mark_held_locks+0x49/0x80 [ 284.327007][ C0] handle_softirqs+0x219/0x8e0 [ 284.331757][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 284.337030][ C0] __irq_exit_rcu+0x109/0x170 [ 284.341695][ C0] irq_exit_rcu+0x9/0x30 [ 284.345919][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 284.351536][ C0] [ 284.354456][ C0] [ 284.357364][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 284.363329][ C0] RIP: 0010:write_comp_data+0x3/0x90 [ 284.368593][ C0] Code: ab af 14 12 48 8b 80 30 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 <49> 89 f8 49 89 f1 65 48 8b 15 77 af 14 12 65 8b 05 88 af 14 12 a9 [ 284.388180][ C0] RSP: 0018:ffffc900035973d0 EFLAGS: 00000246 [ 284.394225][ C0] RAX: 0000000000000001 RBX: ffff88801b874640 RCX: ffffffff8b7fdda5 [ 284.402171][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 284.410116][ C0] RBP: ffff888074a73dc0 R08: 0000000000000005 R09: 0000000000000005 [ 284.418061][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 284.426008][ C0] R13: 000000000000000c R14: 0000000000000001 R15: 0000000000000000 [ 284.433959][ C0] ? mt_validate_nulls+0x545/0x9e0 [ 284.439057][ C0] mt_validate_nulls+0x545/0x9e0 [ 284.443975][ C0] ? __pfx_mt_validate_nulls+0x10/0x10 [ 284.449416][ C0] ? mas_next_node+0x7e0/0xf50 [ 284.454160][ C0] mt_validate+0x30d8/0x4210 [ 284.458734][ C0] ? __pfx_mt_validate+0x10/0x10 [ 284.463657][ C0] validate_mm+0xb0/0x570 [ 284.467969][ C0] ? __pfx_validate_mm+0x10/0x10 [ 284.472892][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 284.478102][ C0] ? kmem_cache_free+0x16d/0x4d0 [ 284.483018][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 284.488887][ C0] ? percpu_counter_add_batch+0xb8/0x1f0 [ 284.494500][ C0] vms_complete_munmap_vmas+0x602/0x970 [ 284.500029][ C0] __mmap_region+0x8e7/0x25e0 [ 284.504684][ C0] ? mt_validate_nulls+0x1c1/0x9e0 [ 284.509774][ C0] ? __pfx___mmap_region+0x10/0x10 [ 284.514868][ C0] ? __lock_acquire+0x622/0x1c90 [ 284.519800][ C0] ? avc_has_perm_noaudit+0x117/0x3b0 [ 284.525162][ C0] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 284.531044][ C0] mmap_region+0x1ab/0x3f0 [ 284.535440][ C0] ? __get_unmapped_area+0x267/0x440 [ 284.540699][ C0] do_mmap+0xa3e/0x1210 [ 284.544833][ C0] ? __pfx_do_mmap+0x10/0x10 [ 284.549398][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 284.555014][ C0] vm_mmap_pgoff+0x281/0x450 [ 284.559591][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 284.564697][ C0] ? __fget_files+0x20e/0x3c0 [ 284.569356][ C0] ksys_mmap_pgoff+0x32c/0x5c0 [ 284.574101][ C0] __x64_sys_mmap+0x125/0x190 [ 284.578763][ C0] do_syscall_64+0xcd/0x4c0 [ 284.583248][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.589123][ C0] RIP: 0033:0x7f8130561242 [ 284.593539][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 284.613122][ C0] RSP: 002b:00007fff58d96488 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 284.621509][ C0] RAX: ffffffffffffffda RBX: 00007f81304a1000 RCX: 00007f8130561242 [ 284.629454][ C0] RDX: 0000000000000001 RSI: 0000000000005000 RDI: 00007f81304a1000 [ 284.637399][ C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000013000 [ 284.645345][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007fff58d96510 [ 284.653298][ C0] R13: 00007f8130535b20 R14: 00007fff58d968c0 R15: 00000fffeb1b2c94 [ 284.661265][ C0] [ 284.664460][ C0] Kernel Offset: disabled [ 284.668773][ C0] Rebooting in 86400 seconds..