last executing test programs: 9.574159863s ago: executing program 3 (id=280): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 8.263631323s ago: executing program 3 (id=285): syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) (rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1}, 0x8000}], 0x1, 0x2102, 0x0) (async, rerun: 64) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r2) (async) keyctl$update(0x2, 0x0, 0x0, 0x5f) mkdir(0x0, 0x1ff) (async) mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) (async) read(0xffffffffffffffff, &(0x7f0000000500), 0xfa0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname(r3, 0x0, &(0x7f0000000080)) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='usb1', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) 7.202686284s ago: executing program 3 (id=287): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x16, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) fstat(0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x10000, 0xfffffffd, 0x34324142, 0x3, 0x7, [{0x8, 0x4}, {0x3c, 0x10}, {0x5, 0x10001}, {0x9f, 0x4}, {0x4, 0x9}, {0x9, 0x8}, {0x7fff, 0x1}, {0x84, 0x4}], 0x81, 0x2, 0x0, 0x0, 0x4}}) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r6 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r6}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000040)=0x22, 0x4) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a40)="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", 0x579}], 0x1}}], 0x1, 0x4001c00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x7, 0x0, 0x5040}]}, @var={0x7, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x30, 0x61, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/256, 0x4a, 0x100, 0x6}, 0x28) 6.935610058s ago: executing program 1 (id=288): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003345700205804037062fc0d02030109021200010898a00809045e030031b19607"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c00)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000b00000005"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, &(0x7f0000000300)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000340), 0xe1ce, r2, 0x0, 0xa0028000}, 0x38) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="0012040000005e630e1fef1242e6e03585d4780b154472"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.457004018s ago: executing program 0 (id=289): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xd5c9, 0x0, 0x4, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) setuid(0xee01) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r9, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, 0x0, &(0x7f0000000300)=0x2a0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r7, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1000, 0x1, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f3c, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x1000000, 0x234, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x2b0}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r6, 0xc0207511, &(0x7f00000002c0)={r5, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r12, 0xa, &(0x7f00000003c0)={0x8, 0x9}, &(0x7f0000000400)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 6.106830762s ago: executing program 0 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48e, 0x8861}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xe8962, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000680)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a25d70e26103e294b7894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}], 0x1) close(r2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x14227}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, 0x0, 0x0) getsockname$packet(r8, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x400}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r9, 0x118, 0x0, &(0x7f0000000140)=0xa, 0x4) bind$nfc_llcp(r8, &(0x7f00000001c0)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0xfc, 0xda, "c4669ff0a84bc024bf0aca6beb9363a680b652a86bcf56a1b924942b543a5ccb09007b9aa6d800000b00b97880001022f900", 0x3f}, 0x60) getsockopt$inet_buf(r9, 0x118, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500766574fb68305f746f5f626f626400000008000a665c49c7269d63dd4adead67bb0a162ed4a29a7e42491dc09749c82b4178a9ba941997d165c2bf9fb7ecb61bd4684ec7e49cd83040fe455f473b7062b8c0669451c8318893f110d15e79ec21e628917d715a946ce747e34adfdb355cb8a6e00e1d90287b5b0db11a8d787d966c88d5512c93f4d6a53af3471efe35c74a57b66eb7de8eb962ea231e", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 5.996671491s ago: executing program 2 (id=293): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mount(0x0, &(0x7f0000000000)='./dev\x00', 0x0, 0x0, 0x0) 5.458198231s ago: executing program 3 (id=294): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) 5.04455898s ago: executing program 2 (id=295): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x4, 0x4) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="a37f55407e73398b4a1b9874c382e89f8caaa3195ed6a40b753ce6ea26b593bd790afae620b8915f044ee76a0161af139c34b1cf9bb3ef44ae3ac9e692f45a93eef449ccdd074530e8b11e0dae6d23768e3071320f12a8dae6e2c62110518df220989b8b8c86a4d8521334be5675c5eac8b99c5fb2fb073b7844973eae53c7fb5b1c4240e7a1cf772bee8dfbc5ba2c2e17f285e6669e54aa807b0e3ce4e4ff7d1eb796504b874f85fcb419c6878265dbd8c6e7b186d965696b792f0f41be1ae01d19c3444731332f01bc1a2e0cc60fa47cb4a1faa75928b266229b0b985737b9400cd633c0", 0xe5}, {&(0x7f0000000380)="019d23e828affffd3a1d727916d9acd9ab4baf795e336aaf43488e0fd5c994a7497769327693d1ce1206ec5f4d90", 0x2e}, {&(0x7f00000003c0)="d7843c7cff4922fec717c86466d785267ad59b3440262da791062a1030f4ece9c2c7251eded064093d956aec996c2584a7d970c5c8a3cabb23ad9a70bf286c35c4c44d01a85927b33bdafad6cf25f45540c7fa4e9a7497cbce9af0fb65652de7290307e7c28f0de212d441a6b113e0c57ac76ad339c083dbf84a6183adaef5aa352c7d238677f187f859c3623e9d26de92a19ad74998d35a1226c87731664daa41e4635fd8", 0xa5}, {&(0x7f0000000480)="8921edde59ce382c86adedcb9e6c2f9f5ea510d98d0f8d467c343f618a127088306646f0a00e3eb537abfd1b8cd5f30de83cddecb6e62822d1f690a42fa55366fd85d5d163c0ab127a30f88e6c210653d1406c5045f76d9cad3faad0201e76eb432338c18b3bdea4e024d07ec996f81d48107b3427930245f37e961b", 0x7c}, {&(0x7f0000000500)="dab3dc9e405c1656fee7b68c6c95a1403c37d5b517fb06a2e8a63d8ab853ad464a11632c0da94b7288ce3988cfe948e6d2575439d07ada9b313c2aedb0e158eda1c5b5bba98dc5697cce94056896d62b4293e16ff596f6c21b8f61595f2eccaf7724c42868c8dd97a7c942dbeb46fd0521f92b69d50a198409a5b3b1ec653bb96bf69d", 0x83}], 0x5, &(0x7f0000000640)=[@assoc={0x18, 0x117, 0x4, 0x7f}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xc3, "c45c41929ac84be29f8cb2a9043b7bd477f9fa8db829630d16cce4444b8fb9c3748fe21b0af4aba33888643c3be3dd3c987d12090b7e194daf0baf36cd2b25418a72b7a94d3f1f1716879e8474f82ab6db4c70dfc49a2b8c3dcb91e93ea2003febbc27b582d704f37cd102425694a068dca7451a6d2ba14c2df377ec35c2a1ad6014bfd745e588ca46ab7eaca24f1a52d9b31d8a22c04c3770b1bc34dff04a0c0ab587190c46adea20b99fa800001506d75f2dd60fff7fa8f0c5eb9e79ae2c43f4b3e4"}], 0x120, 0x24040010}, 0x4000080) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 4.763437778s ago: executing program 0 (id=296): syz_open_dev$video4linux(&(0x7f00000001c0), 0x10000008, 0x84400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000002}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) mremap(&(0x7f000007b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000239000/0x1000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x62}], 0x1000000000000390) r4 = fsopen(&(0x7f0000000040)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) unshare(0x2020400) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x20}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x134, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_clone(0x8000800, &(0x7f00000004c0)="615806c54db4bd3b4c2941d848fe3ef5259e10257b9cba6434cec4f0181029346e659d87b7787147b23b50b3d6510ee3b503093cc157025783d202c428c36b184aeec53668b5034a3c2f02f06c2a8b58a93ace85d5e30f0820de0780fb", 0x5d, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000600)="1c766b915090eb9653fe950364dcbdbf0965678df56297a141bf255fe198493f77bd60c5c7fa639af8a1ee964dbf174c435de4b44136511233dd9007783aa124ff94f319fa3855d180ef12e0a705f4633677126422eb9370f06634024debee43a041f0519983c84d7a1a06891b36cc1d14dda14d6cc7c6a8bc0ba57ea525c594a18045732894b16d445bf3c76a3b2b2084e7621c7dcc524aa908dccd6ce1d27a549aea3f1e3644d880afefa576ed943e0bd51e481abd") 4.588624798s ago: executing program 1 (id=297): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='romfs\x00', 0x2308420, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r0 = socket$netlink(0x10, 0x3, 0x7) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100005ff000000003f0000000000004a", @ANYRES32=0x0, @ANYBLOB="8008000040c9ce5ec77f0206995a1b01002c0012800b000057fd028006000f0006000000060010004e220000000005000180000017277dbb75b42dcba7f445cc2517c72814a49663df0ddc73a37025b27895cdb6f22199cbd51fdb4bba27fa5f8973cf70ad560161285267a5767ef2095952f89f785556"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r4, r5) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r7, &(0x7f0000000500)=""/1024, 0x400) read$FUSE(r6, 0x0, 0x0) write$vhost_msg_v2(r6, 0x0, 0x0) mq_open(&(0x7f0000000900)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\x06\x00[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6c:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82\x82=W\xae\x83l\xd2\xe7\xcaP_\x8e\a\"\vx\xac\xb5Z8\xb3\xbb\xa1\xd9\"\x7f\xae\x1a/\xcf<\xf4\"\x14\xbf\x92\x0f\x9b\x00\x1c\x12.(\x9f$4@\xf7<-\xac{>e\xec\x83\v\x80\x9a\xffQ\xd4\xc4', 0x2, 0x11b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.611192504s ago: executing program 0 (id=298): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r1, 0x0, 0x10000, 0x0, 0x1, 0x31d7b4, 0x948e6}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xfffffffffffffd61}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x840) r4 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x1cc8c3) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') preadv(r7, &(0x7f0000001700)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x1) socket$inet6(0xa, 0xa, 0x6) r8 = socket$netlink(0x10, 0x3, 0x8) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000", 0x40}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000200), 0x6, 0x4201) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x1, 0x1, 0x3001, 0x4, 0x5, 0x0, 0x0, 0x4}}) 3.567864419s ago: executing program 1 (id=299): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setuid(0xee01) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x200004, 0x9e5}) r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0xffff, {0x3, 0x7ffffffa, 0x80000002, 0x9, 0x10000}}) r4 = inotify_init1(0x800) read(r4, &(0x7f0000000200)=""/168, 0xa8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 3.436752756s ago: executing program 0 (id=300): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x3c, 0x29, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0x1, 0xfff1}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xe}}, @TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @TCA_RATE={0x6, 0x5, {0x1, 0x10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004044}, 0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039ad0106000109021b0001000000000904"], 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) (async) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) (async) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x3c, 0x29, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0x1, 0xfff1}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xe}}, @TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @TCA_RATE={0x6, 0x5, {0x1, 0x10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004044}, 0x40) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039ad0106000109021b0001000000000904"], 0x0) (async) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (async) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) (async) 3.239245313s ago: executing program 4 (id=301): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001400b59540ff3f9d0000000000000000", @ANYRES32=r1, @ANYBLOB="14000100fe8000000000000000000000000000bb08000800680200000800090004000000140006007f000000030000009e3c000054c60000"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x21, 0x0, 0x0, 0x100080, 0x417a0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000280)=""/183, &(0x7f0000000340)=0xb7) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r5 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x0) fsopen(&(0x7f00000000c0)='smb3\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x82) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_MSG_GETSETELEM(r8, 0x0, 0x8000) socket$inet(0xa, 0x801, 0x84) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 3.098688973s ago: executing program 4 (id=302): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd, 0x0, 0xe}]}) write$ppp(r0, &(0x7f0000000280)='B`', 0x2) (fail_nth: 2) 2.966897358s ago: executing program 4 (id=303): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) syz_usb_connect$uac1(0x5, 0x8c, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x499, 0x101b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x4, 0x10, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x39, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x7, 0x5b}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x81, 0x7, 0x1, {0x7, 0x25, 0x1, 0x8, 0x0, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x6, 0x3, 0x0, {0x7, 0x25, 0x1, 0x8, 0x20, 0x15}}}}}}}}]}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00003a0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x55, 0x42, 0x49, 0x40, 0x1430, 0x241b, 0x170a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x25, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200}}, {{0x9, 0x5, 0x86, 0x2, 0x200}}]}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x80, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) 2.964671467s ago: executing program 1 (id=304): epoll_create1(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000e49db74c51cf8de6bee86402b4e22e832880de03d0ebb2fbcf588f2984021d682691d25382644e43a5d693a507"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xe, 0xb}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002c0004800500030002000000050003000200000005000300000000000500030002000000050003000200000008000100ffffffff0800020003"], 0x50}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x29c, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4db53900}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe59e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa194}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2da69678}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa456}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ac3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33dbf8c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2895}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x509b679a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4aebb655}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b16bc1e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11e7c391}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x661c9ae5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52a6eb63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70b1886f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44ed5e31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53c265bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33049789}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11a3ef4f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cb51d1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42fd349e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64f03447}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x509}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6dbfe57a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd7fe603}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb902}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x776b6989}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51ad59c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a24cd91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fef}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab95dab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x658fdffb}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31407669}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2081}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76a2}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8379}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dd271d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4dab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bebc817}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ec1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad56}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d1d5cf1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe83}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d53}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1941e1da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb53170e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4656a8e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32a7}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 2.711770804s ago: executing program 1 (id=305): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a80100001900010028bd7000fbdbdf251d00"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x6}]}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) setgroups(0xefff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b3300000000fffff0000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000200000006001d800c00"/28], 0x38}}, 0x0) 2.291518979s ago: executing program 3 (id=306): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) (fail_nth: 2) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x8, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x7fd, 0xee01, r2, 0x1000, '\x00', 0xa, 0x8000, 0xb4e9, 0x4, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x9}, 0x8001, 0x3, 0x0, 0x9}}}}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1, 0x4}}, 0x50) 2.000943752s ago: executing program 2 (id=307): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.911228264s ago: executing program 0 (id=308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) shutdown(r0, 0x1) write(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7, 0x0, 0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffea4}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "99e0df5e", {0x3, 0x0, 0x0, 0x9, 0x400, 0xb, 0x5}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={r3, 0x1, 0x30, 0x9, 0x7}, &(0x7f0000000200)=0x18) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, &(0x7f0000000380)) 1.832197294s ago: executing program 2 (id=309): syz_open_dev$video4linux(&(0x7f00000001c0), 0x10000008, 0x84400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000002}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) mremap(&(0x7f000007b000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000239000/0x1000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x62}], 0x1000000000000390) r4 = fsopen(&(0x7f0000000040)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) unshare(0x2020400) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x20}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x134, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_clone(0x8000800, &(0x7f00000004c0)="615806c54db4bd3b4c2941d848fe3ef5259e10257b9cba6434cec4f0181029346e659d87b7787147b23b50b3d6510ee3b503093cc157025783d202c428c36b184aeec53668b5034a3c2f02f06c2a8b58a93ace85d5e30f0820de0780fb", 0x5d, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000600)="1c766b915090eb9653fe950364dcbdbf0965678df56297a141bf255fe198493f77bd60c5c7fa639af8a1ee964dbf174c435de4b44136511233dd9007783aa124ff94f319fa3855d180ef12e0a705f4633677126422eb9370f06634024debee43a041f0519983c84d7a1a06891b36cc1d14dda14d6cc7c6a8bc0ba57ea525c594a18045732894b16d445bf3c76a3b2b2084e7621c7dcc524aa908dccd6ce1d27a549aea3f1e3644d880afefa576ed943e0bd51e481abd") 1.403732351s ago: executing program 3 (id=310): openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x1) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x73, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x40, 0xb, 0x34, {0x34, 0x2, "c26313852642792c3cbdeace918d0fb74237cc4b44b72fb0688881ce2a52973661d67a0c5540c1a1d959ad58fe59444ec9a4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x1802001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='oom_score_adj 1', 0x11) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.28385167s ago: executing program 4 (id=311): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r1, 0x0, 0x10000, 0x0, 0x1, 0x31d7b4, 0x948e6}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xfffffffffffffd61}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x840) r4 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r6 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x1cc8c3) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') preadv(r7, &(0x7f0000001700)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x1) socket$inet6(0xa, 0xa, 0x6) r8 = socket$netlink(0x10, 0x3, 0x8) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000", 0x40}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000200), 0x6, 0x4201) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f00000002c0)={0x1, 0x0, {0x1, 0x1, 0x3001, 0x4, 0x5, 0x0, 0x0, 0x4}}) 942.685185ms ago: executing program 4 (id=312): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r9, r7, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 910.928303ms ago: executing program 2 (id=313): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r9, r7, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 474.418211ms ago: executing program 4 (id=314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl(r1, 0x404c4701, &(0x7f0000000100)="0100000000000000010000000000000001000000000000000000000040000000400000000000000001") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000840), &(0x7f0000000140)=r3}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x31, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}}}, 0x0) 156.384155ms ago: executing program 2 (id=315): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 0s ago: executing program 1 (id=316): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) kernel console output (not intermixed with test programs): me="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 82.887192][ T5715] gud 5-1:1.0: Failed to get connectors (error=-5) [ 82.902648][ T5715] gud 5-1:1.0: probe with driver gud failed with error -5 [ 83.001499][ T30] audit: type=1400 audit(1786931413.789:387): avc: denied { search } for pid=5941 comm="syz.0.48" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 83.871121][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 83.900128][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 84.042945][ T187] usb 5-1: USB disconnect, device number 3 [ 84.078793][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 84.131400][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 84.150275][ T30] audit: type=1400 audit(1786931413.789:388): avc: denied { search } for pid=5941 comm="syz.0.48" name="events" dev="tracefs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.187686][ T9] usb 4-1: USB disconnect, device number 5 [ 84.230284][ T5962] tipc: Enabled bearer , priority 0 [ 84.259467][ T30] audit: type=1400 audit(1786931413.789:389): avc: denied { search } for pid=5941 comm="syz.0.48" name="dwc3" dev="tracefs" ino=8980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.313623][ T5965] syzkaller0: entered promiscuous mode [ 84.327463][ T5965] syzkaller0: entered allmulticast mode [ 84.333098][ T30] audit: type=1400 audit(1786931413.789:390): avc: denied { search } for pid=5941 comm="syz.0.48" name="dwc3_ctrl_req" dev="tracefs" ino=8982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.358494][ T5715] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.370879][ T5964] bridge0: port 3(erspan0) entered blocking state [ 84.380062][ T5964] bridge0: port 3(erspan0) entered disabled state [ 84.387430][ T5964] erspan0: entered allmulticast mode [ 84.392827][ T30] audit: type=1400 audit(1786931413.789:391): avc: denied { read write } for pid=5941 comm="syz.0.48" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 84.418686][ T5964] erspan0: entered promiscuous mode [ 84.431108][ T5964] bridge0: port 3(erspan0) entered blocking state [ 84.437902][ T5964] bridge0: port 3(erspan0) entered forwarding state [ 84.486034][ T5965] tipc: Resetting bearer [ 84.501315][ T5966] erspan0: left allmulticast mode [ 84.522173][ T5966] erspan0: left promiscuous mode [ 84.531731][ T5715] usb 1-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 84.547502][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.559022][ T5715] usb 1-1: Product: syz [ 84.570585][ T5966] bridge0: port 3(erspan0) entered disabled state [ 84.580385][ T5715] usb 1-1: Manufacturer: syz [ 84.591681][ T5715] usb 1-1: SerialNumber: syz [ 84.600728][ T5957] tipc: Resetting bearer [ 84.616637][ T5957] tipc: Disabling bearer [ 84.789002][ T5971] tipc: Started in network mode [ 84.871451][ T5715] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.916083][ T5715] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 84.940905][ T5715] usb 1-1: unable to issue vendor read request (ret = -71) [ 84.949348][ T5971] tipc: Node identity 2e512d230833, cluster identity 4711 [ 84.974429][ T5971] tipc: Enabled bearer , priority 0 [ 84.983907][ T5715] usb 1-1: unable to issue vendor read request (ret = -71) [ 85.003303][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.019153][ T5715] usb 1-1: unable to issue vendor read request (ret = -71) [ 85.039512][ T5989] syzkaller0: entered promiscuous mode [ 85.058267][ T5715] usb 1-1: unable to issue vendor read request (ret = -71) [ 85.098122][ T5989] syzkaller0: entered allmulticast mode [ 85.106649][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 85.106658][ T30] audit: type=1400 audit(1786931416.239:417): avc: denied { ioctl } for pid=5982 comm="syz.0.62" path="socket:[9132]" dev="sockfs" ino=9132 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.143838][ T5715] usb 1-1: unable to issue vendor read request (ret = -71) [ 85.172168][ T5715] usb 1-1: unable to issue vendor read request (ret = -71) [ 85.186888][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 85.220015][ T5715] usb 1-1: unable to issue vendor read request (ret = -71) [ 85.247201][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.262673][ T5987] syzkaller0: entered promiscuous mode [ 85.269667][ T5715] usb 1-1: unable to issue vendor read request (ret = -71) [ 85.277269][ T5987] syzkaller0: entered allmulticast mode [ 85.284293][ T9] usb 5-1: Product: syz [ 85.308462][ T9] usb 5-1: Manufacturer: syz [ 85.319209][ T30] audit: type=1400 audit(1786931416.289:418): avc: denied { create } for pid=5982 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.342202][ T9] usb 5-1: SerialNumber: syz [ 85.377540][ T9] usb 5-1: config 0 descriptor?? [ 85.409253][ T5715] usb 1-1: USB disconnect, device number 5 [ 85.426344][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 85.452278][ T30] audit: type=1400 audit(1786931416.289:419): avc: denied { setopt } for pid=5982 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.477701][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 85.485238][ T5714] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 85.566190][ T5989] tipc: Resetting bearer [ 85.613162][ T30] audit: type=1400 audit(1786931416.289:420): avc: denied { write } for pid=5982 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.660472][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 85.681556][ T5714] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 85.698115][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.719097][ T30] audit: type=1400 audit(1786931416.289:421): avc: denied { write } for pid=5982 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.743994][ T5969] tipc: Resetting bearer [ 85.759617][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 85.773083][ T5714] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.802159][ T9] usb 5-1: media controller created [ 85.816473][ T5714] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 85.829982][ T30] audit: type=1326 audit(1786931416.299:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.64" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd0f9e0d9 code=0x7ffc0000 [ 85.865987][ T5998] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 85.874985][ T5973] dib0700: tx buffer length is larger than 4. Not supported. [ 85.888109][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.897635][ T5969] tipc: Disabling bearer [ 85.903615][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.946130][ T5715] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 85.989294][ T30] audit: type=1326 audit(1786931416.339:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.64" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7effd0f9e0d9 code=0x7ffc0000 [ 86.065673][ T9] DVB: Unable to find symbol dib7000p_attach() [ 86.094774][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 86.121013][ T30] audit: type=1326 audit(1786931416.339:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.64" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd0f9e0d9 code=0x7ffc0000 [ 86.152142][ T5715] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 86.218091][ T5715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.262523][ T5715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.283746][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 86.290253][ T9] Registered IR keymap rc-empty [ 86.306490][ T30] audit: type=1326 audit(1786931416.339:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.64" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd0f9e0d9 code=0x7ffc0000 [ 86.339137][ T5715] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 86.351094][ T9] dvb-usb: could not initialize remote control. [ 86.365975][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 86.378811][ T5715] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.394102][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.407964][ T9] usb 5-1: USB disconnect, device number 4 [ 86.449856][ T30] audit: type=1326 audit(1786931416.339:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5990 comm="syz.1.64" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7effd0f9e0d9 code=0x7ffc0000 [ 86.490700][ T5595] usb 2-1: USB disconnect, device number 3 [ 86.545774][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 86.623448][ T5714] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 86.714855][ T6012] tipc: Enabled bearer , priority 0 [ 86.721989][ T6012] syzkaller0: entered promiscuous mode [ 86.727815][ T6012] syzkaller0: entered allmulticast mode [ 86.746898][ T6012] tipc: Resetting bearer [ 86.757262][ T6011] tipc: Resetting bearer [ 86.767110][ T6011] tipc: Disabling bearer [ 86.794312][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 86.812096][ T5714] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 86.835503][ T5714] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 86.846650][ T5714] usb 4-1: config 0 has no interface number 0 [ 86.862825][ T5714] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.883793][ T5714] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 86.908195][ T5714] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.939738][ T5714] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.972610][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 86.982922][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.991466][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.010250][ T5714] usb 4-1: config 0 descriptor?? [ 87.032614][ T5714] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 87.145958][ T6022] FAULT_INJECTION: forcing a failure. [ 87.145958][ T6022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.161547][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 87.170618][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT(full) [ 87.170631][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.170638][ T6022] Call Trace: [ 87.170642][ T6022] [ 87.170646][ T6022] dump_stack_lvl+0x100/0x190 [ 87.170664][ T6022] should_fail_ex.cold+0x5/0xa [ 87.170678][ T6022] strncpy_from_user+0x3b/0x2d0 [ 87.170695][ T6022] do_getname+0x78/0x390 [ 87.170714][ T6022] do_sys_openat2+0xc7/0x1e0 [ 87.170729][ T6022] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.170742][ T6022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 87.170758][ T6022] ? __fget_files+0x21f/0x3d0 [ 87.170773][ T6022] __x64_sys_creat+0xcc/0x120 [ 87.170788][ T6022] ? __pfx___x64_sys_creat+0x10/0x10 [ 87.170803][ T6022] ? __pfx_ksys_write+0x10/0x10 [ 87.170816][ T6022] ? do_syscall_64+0x90/0x870 [ 87.170834][ T6022] do_syscall_64+0x115/0x870 [ 87.170847][ T6022] ? clear_bhb_loop+0x70/0xc0 [ 87.170860][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.170872][ T6022] RIP: 0033:0x7effd0f9e0d9 [ 87.170881][ T6022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.170891][ T6022] RSP: 002b:00007effd1e2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 87.170902][ T6022] RAX: ffffffffffffffda RBX: 00007effd1226090 RCX: 00007effd0f9e0d9 [ 87.170908][ T6022] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000200000000080 [ 87.170915][ T6022] RBP: 00007effd1e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 87.170921][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.170927][ T6022] R13: 00007effd1226128 R14: 00007effd1226090 R15: 00007ffd256e2358 [ 87.170940][ T6022] [ 87.173103][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.381874][ T5715] gud 1-1:1.0: Failed to get connectors (error=-5) [ 87.388474][ T5715] gud 1-1:1.0: probe with driver gud failed with error -5 [ 87.409573][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.420127][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.436023][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.609090][ T6028] Zero length message leads to an empty skb [ 87.630382][ T9] usb 4-1: USB disconnect, device number 6 [ 87.636226][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 87.699606][ T6008] ldusb: No device or device unplugged -19 [ 87.705571][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 87.712914][ T6023] ldusb: No device or device unplugged -19 [ 88.031860][ T6030] tipc: Enabled bearer , priority 0 [ 88.052801][ T6030] syzkaller0: entered promiscuous mode [ 88.071244][ T6030] syzkaller0: entered allmulticast mode [ 88.094437][ T6030] tipc: Resetting bearer [ 88.110029][ T6029] tipc: Resetting bearer [ 88.122125][ T6029] tipc: Disabling bearer [ 88.214037][ T5715] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 88.265593][ T6045] netlink: 'syz.1.81': attribute type 21 has an invalid length. [ 88.273972][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.1.81'. [ 88.282970][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'. [ 88.373681][ T5715] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 89.181032][ T5715] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 89.211116][ T5715] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 89.221023][ T9] usb 1-1: USB disconnect, device number 6 [ 89.239780][ T6048] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 89.246427][ T6048] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.254361][ T6048] vhci_hcd vhci_hcd.0: Device attached [ 89.264626][ T6048] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 89.272513][ T6048] netlink: 'syz.1.82': attribute type 2 has an invalid length. [ 89.280124][ T6048] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 89.329590][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.360382][ T5715] usb 4-1: Product: syz [ 89.370061][ T5715] usb 4-1: Manufacturer: syz [ 89.376812][ T5715] usb 4-1: SerialNumber: syz [ 89.386586][ T5715] usb 4-1: config 0 descriptor?? [ 89.395114][ T5715] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 89.510610][ T6062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.520626][ T6062] bridge0: port 3(bond1) entered blocking state [ 89.527286][ T6062] bridge0: port 3(bond1) entered disabled state [ 89.533832][ T6062] bond1: entered allmulticast mode [ 89.540136][ T6062] bond1: entered promiscuous mode [ 89.547938][ T6062] bridge0: port 3(bond1) entered blocking state [ 89.554554][ T6062] bridge0: port 3(bond1) entered forwarding state [ 89.573327][ T5595] usb 36-1: SetAddress Request (2) to port 0 [ 89.579475][ T5595] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 89.662028][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.675269][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.695625][ T5714] usb 5-1: USB disconnect, device number 5 [ 90.724562][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.732265][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 90.732275][ T30] audit: type=1400 audit(1786931420.909:499): avc: denied { create } for pid=6066 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.759488][ T5715] gspca_sunplus: reg_r err -110 [ 90.819168][ T5715] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 90.853044][ T6052] vhci_hcd: connection reset by peer [ 90.906869][ T12] vhci_hcd vhci_hcd.1: stop threads [ 90.930228][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.937677][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.953534][ T12] vhci_hcd vhci_hcd.1: release socket [ 90.971216][ T30] audit: type=1400 audit(1786931420.909:500): avc: denied { connect } for pid=6066 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.994184][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.018273][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 91.057963][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.108036][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.125152][ T30] audit: type=1400 audit(1786931420.909:501): avc: denied { setopt } for pid=6066 comm="syz.4.86" laddr=172.20.20.10 lport=38542 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.180742][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.272780][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.294924][ T6082] netlink: 'syz.1.92': attribute type 21 has an invalid length. [ 91.306837][ T30] audit: type=1400 audit(1786931420.909:502): avc: denied { write } for pid=6066 comm="syz.4.86" path="socket:[10576]" dev="sockfs" ino=10576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.334751][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.345160][ T9] usb 3-1: Product: syz [ 91.356882][ T9] usb 3-1: Manufacturer: syz [ 91.374639][ T9] usb 3-1: SerialNumber: syz [ 91.386749][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.408740][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 91.417466][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 91.438268][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 91.447451][ T30] audit: type=1400 audit(1786931420.909:503): avc: denied { read } for pid=6066 comm="syz.4.86" path="socket:[10576]" dev="sockfs" ino=10576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.526792][ T30] audit: type=1400 audit(1786931421.729:504): avc: denied { map } for pid=6066 comm="syz.4.86" path="socket:[10578]" dev="sockfs" ino=10578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 91.604116][ T5789] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 91.632370][ T30] audit: type=1400 audit(1786931421.729:505): avc: denied { cmd } for pid=6066 comm="syz.4.86" path="socket:[10578]" dev="sockfs" ino=10578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.665642][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 91.697347][ T142] bridge0: port 3(bond1) entered disabled state [ 91.724809][ T9] usb 3-1: USB disconnect, device number 5 [ 91.732193][ T6082] netlink: 132 bytes leftover after parsing attributes in process `syz.1.92'. [ 91.753713][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 91.763996][ T9] usblp0: removed [ 91.771710][ T30] audit: type=1400 audit(1786931422.089:506): avc: denied { execute } for pid=6072 comm="syz.0.88" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 91.805169][ T5789] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 91.833997][ T142] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.848234][ T5789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.863369][ T142] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.897333][ T5789] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.911568][ T142] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.947044][ T30] audit: type=1400 audit(1786931422.089:507): avc: denied { map_read map_write } for pid=6071 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 91.969588][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.989028][ T142] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.013229][ T6086] FAULT_INJECTION: forcing a failure. [ 92.013229][ T6086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.064202][ T30] audit: type=1400 audit(1786931422.179:508): avc: denied { bind } for pid=6072 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.091849][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.1.93 Not tainted syzkaller #0 PREEMPT(full) [ 92.091865][ T6086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.091871][ T6086] Call Trace: [ 92.091876][ T6086] [ 92.091880][ T6086] dump_stack_lvl+0x100/0x190 [ 92.091897][ T6086] should_fail_ex.cold+0x5/0xa [ 92.091912][ T6086] _copy_from_user+0x2e/0xd0 [ 92.091929][ T6086] move_addr_to_kernel+0x65/0x170 [ 92.091942][ T6086] copy_msghdr_from_user+0x3f0/0x4c0 [ 92.091954][ T6086] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 92.091972][ T6086] ___sys_sendmsg+0x106/0x1e0 [ 92.091984][ T6086] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.091994][ T6086] ? __lock_acquire+0x49f/0x1a40 [ 92.092009][ T6086] ? get_pid_task+0x106/0x250 [ 92.092035][ T6086] __sys_sendmsg+0x160/0x210 [ 92.092051][ T6086] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.092073][ T6086] do_syscall_64+0x115/0x870 [ 92.092086][ T6086] ? clear_bhb_loop+0x70/0xc0 [ 92.092100][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.092111][ T6086] RIP: 0033:0x7effd0f9e0d9 [ 92.092121][ T6086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.092131][ T6086] RSP: 002b:00007effd1e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.092141][ T6086] RAX: ffffffffffffffda RBX: 00007effd1225fa0 RCX: 00007effd0f9e0d9 [ 92.092148][ T6086] RDX: 0000000000040880 RSI: 0000200000000540 RDI: 0000000000000004 [ 92.092154][ T6086] RBP: 00007effd1e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 92.092160][ T6086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.092166][ T6086] R13: 00007effd1226038 R14: 00007effd1225fa0 R15: 00007ffd256e2358 [ 92.092180][ T6086] [ 92.308408][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 92.323435][ T6090] bridge1: port 1(erspan0) entered blocking state [ 92.329882][ T6090] bridge1: port 1(erspan0) entered disabled state [ 92.336793][ T6090] erspan0: entered allmulticast mode [ 92.342988][ T6090] erspan0: entered promiscuous mode [ 92.348704][ T6090] bridge1: port 1(erspan0) entered blocking state [ 92.355151][ T6090] bridge1: port 1(erspan0) entered forwarding state [ 92.574422][ T5715] usb 1-1: USB disconnect, device number 7 [ 92.673414][ T5789] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.747827][ T9] usb 4-1: USB disconnect, device number 7 [ 92.823293][ T5789] usb 3-1: Using ep0 maxpacket: 16 [ 92.832083][ T5789] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 92.874815][ T5789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.909698][ T5789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.951152][ T5789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.994949][ T5789] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.015530][ T5789] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.037810][ T5598] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 93.048205][ T5598] CPU: 0 UID: 0 PID: 5598 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 93.048220][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 93.048228][ T5598] Workqueue: hci3 hci_rx_work [ 93.048242][ T5598] Call Trace: [ 93.048246][ T5598] [ 93.048251][ T5598] dump_stack_lvl+0x100/0x190 [ 93.048268][ T5598] sysfs_warn_dup.cold+0x1c/0x28 [ 93.048286][ T5598] sysfs_create_dir_ns+0x24b/0x2b0 [ 93.048299][ T5598] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 93.048310][ T5598] ? find_held_lock+0x2b/0x80 [ 93.048320][ T5598] ? kobject_add_internal+0x25f/0x930 [ 93.048336][ T5598] ? kobject_add_internal+0x25f/0x930 [ 93.048354][ T5598] ? do_raw_spin_unlock+0x145/0x1e0 [ 93.048371][ T5598] kobject_add_internal+0x2c8/0x930 [ 93.048390][ T5598] kobject_add+0x16a/0x1e0 [ 93.048406][ T5598] ? __pfx_kobject_add+0x10/0x10 [ 93.048421][ T5598] ? class_to_subsys+0x10f/0x150 [ 93.048441][ T5598] ? kobject_put+0xb9/0x640 [ 93.048455][ T5598] ? _raw_spin_unlock+0x28/0x50 [ 93.048469][ T5598] device_add+0x294/0x1970 [ 93.048485][ T5598] ? __pfx_dev_set_name+0x10/0x10 [ 93.048496][ T5598] ? __pfx_device_add+0x10/0x10 [ 93.048513][ T5598] ? mgmt_send_event_skb+0x2fb/0x460 [ 93.048528][ T5598] hci_conn_add_sysfs+0x1a3/0x260 [ 93.048543][ T5598] le_conn_complete_evt+0x11eb/0x1f60 [ 93.048559][ T5598] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 93.048570][ T5598] ? hci_event_packet+0x186/0xcd0 [ 93.048585][ T5598] hci_le_conn_complete_evt+0x23c/0x3a0 [ 93.048597][ T5598] ? skb_pull_data+0x15f/0x1e0 [ 93.048610][ T5598] hci_le_meta_evt+0x34a/0x5f0 [ 93.048622][ T5598] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 93.048636][ T5598] hci_event_packet+0x51c/0xcd0 [ 93.048648][ T5598] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 93.048660][ T5598] ? __pfx_hci_event_packet+0x10/0x10 [ 93.048673][ T5598] ? kcov_remote_start+0x384/0x670 [ 93.048687][ T5598] ? lockdep_hardirqs_on+0x78/0x100 [ 93.048702][ T5598] hci_rx_work+0x451/0xfc0 [ 93.048716][ T5598] process_one_work+0xa23/0x1940 [ 93.048736][ T5598] ? __pfx_process_one_work+0x10/0x10 [ 93.048752][ T5598] ? __pfx_hci_rx_work+0x10/0x10 [ 93.048764][ T5598] worker_thread+0x5ef/0xe50 [ 93.048785][ T5598] ? kthread+0x13a/0x450 [ 93.048796][ T5598] ? __pfx_worker_thread+0x10/0x10 [ 93.048807][ T5598] kthread+0x370/0x450 [ 93.048817][ T5598] ? __pfx_kthread+0x10/0x10 [ 93.048829][ T5598] ret_from_fork+0x72b/0xd50 [ 93.048846][ T5598] ? __pfx_ret_from_fork+0x10/0x10 [ 93.048868][ T5598] ? rcu_is_watching+0x12/0xc0 [ 93.048885][ T5598] ? __switch_to+0x800/0x10f0 [ 93.048899][ T5598] ? __pfx_kthread+0x10/0x10 [ 93.048911][ T5598] ret_from_fork_asm+0x1a/0x30 [ 93.048936][ T5598] [ 93.049237][ T5598] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 93.354461][ T5598] Bluetooth: hci3: failed to register connection device [ 93.413064][ T5789] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.461544][ T5789] usb 3-1: Manufacturer: syz [ 93.489783][ T5789] usb 3-1: config 0 descriptor?? [ 94.342800][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 94.514234][ T6136] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.599921][ T5715] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 94.673757][ T5789] rc_core: IR keymap rc-hauppauge not found [ 94.684586][ T5595] usb 36-1: device descriptor read/8, error -110 [ 94.692983][ T6133] ======================================================= [ 94.692983][ T6133] WARNING: The mand mount option has been deprecated and [ 94.692983][ T6133] and is ignored by this kernel. Remove the mand [ 94.692983][ T6133] option from the mount to silence this warning. [ 94.692983][ T6133] ======================================================= [ 94.869775][ T5789] Registered IR keymap rc-empty [ 94.875002][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 94.889516][ T5715] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 94.904122][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.940576][ T5715] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 113, changing to 7 [ 94.955577][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 94.969164][ T5715] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.009870][ T5789] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 95.055608][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.082894][ T5715] usb 1-1: Product: syz [ 95.092423][ T5789] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 95.114011][ T5715] usb 1-1: Manufacturer: syz [ 95.141680][ T5715] usb 1-1: SerialNumber: syz [ 95.185645][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.237141][ T6154] device-mapper: ioctl: Invalid data size in the ioctl structure: 1716715832 [ 95.249699][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.283876][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.314659][ T5595] usb usb36-port1: attempt power cycle [ 95.323319][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.353375][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.383464][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.413299][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.443645][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.473519][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.493297][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.504774][ T5789] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 95.535576][ T5789] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 95.550530][ T5789] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 95.577474][ T5789] usb 3-1: USB disconnect, device number 6 [ 95.663317][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 95.676781][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 95.697263][ T10] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 95.708523][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.731088][ T10] usb 2-1: config 0 has no interface number 0 [ 95.745756][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 95.767259][ T10] usb 2-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.797028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.829040][ T10] usb 2-1: Product: syz [ 95.846461][ T10] usb 2-1: Manufacturer: syz [ 95.861319][ T10] usb 2-1: SerialNumber: syz [ 95.868773][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 95.868782][ T30] audit: type=1326 audit(1786931427.009:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 95.906700][ T5595] usb usb36-port1: unable to enumerate USB device [ 95.933157][ T10] usb 2-1: config 0 descriptor?? [ 95.966179][ T6156] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.003612][ T10] asix 2-1:0.34: probe with driver asix failed with error -22 [ 96.015145][ T30] audit: type=1326 audit(1786931427.049:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 96.129696][ T30] audit: type=1326 audit(1786931427.049:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 96.184808][ T5595] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.249891][ T30] audit: type=1326 audit(1786931427.049:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 96.388128][ T30] audit: type=1326 audit(1786931427.049:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 96.434051][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'. [ 96.442952][ T5595] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 96.475786][ T5595] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.492573][ T5595] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.535381][ T5715] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.571984][ T30] audit: type=1326 audit(1786931427.049:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 96.598364][ T5595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.698356][ T5715] usb 1-1: USB disconnect, device number 8 [ 96.790279][ T30] audit: type=1326 audit(1786931427.049:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 96.859164][ T6172] syzkaller0: entered promiscuous mode [ 96.890055][ T6172] syzkaller0: entered allmulticast mode [ 96.953287][ T30] audit: type=1326 audit(1786931427.049:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 97.089575][ T5715] usb 5-1: USB disconnect, device number 6 [ 97.100384][ T30] audit: type=1326 audit(1786931427.049:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 97.236256][ T30] audit: type=1326 audit(1786931427.049:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13ec99e0d9 code=0x7ffc0000 [ 97.527702][ T6187] FAULT_INJECTION: forcing a failure. [ 97.527702][ T6187] name failslab, interval 1, probability 0, space 0, times 0 [ 97.576814][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: syz.2.125 Not tainted syzkaller #0 PREEMPT(full) [ 97.576828][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.576834][ T6187] Call Trace: [ 97.576839][ T6187] [ 97.576843][ T6187] dump_stack_lvl+0x100/0x190 [ 97.576860][ T6187] should_fail_ex.cold+0x5/0xa [ 97.576875][ T6187] should_failslab+0xc2/0x120 [ 97.576890][ T6187] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 97.576904][ T6187] ? __alloc_skb+0x5b7/0x710 [ 97.576918][ T6187] ? __alloc_skb+0x140/0x710 [ 97.576936][ T6187] __alloc_skb+0x140/0x710 [ 97.576949][ T6187] ? __alloc_skb+0x5b7/0x710 [ 97.576963][ T6187] ? __pfx___alloc_skb+0x10/0x10 [ 97.576976][ T6187] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 97.576993][ T6187] ? sock_has_perm+0x25a/0x2f0 [ 97.577008][ T6187] ? __pfx_sock_has_perm+0x10/0x10 [ 97.577023][ T6187] netlink_alloc_large_skb+0x69/0x150 [ 97.577037][ T6187] netlink_sendmsg+0x680/0xda0 [ 97.577052][ T6187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.577066][ T6187] ? selinux_socket_sendmsg+0x198/0x2f0 [ 97.577084][ T6187] ____sys_sendmsg+0xa4d/0xbe0 [ 97.577094][ T6187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.577107][ T6187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.577124][ T6187] ___sys_sendmsg+0x190/0x1e0 [ 97.577136][ T6187] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.577147][ T6187] ? __lock_acquire+0x49f/0x1a40 [ 97.577161][ T6187] ? get_pid_task+0x106/0x250 [ 97.577187][ T6187] __sys_sendmsg+0x160/0x210 [ 97.577202][ T6187] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.577225][ T6187] do_syscall_64+0x115/0x870 [ 97.577238][ T6187] ? clear_bhb_loop+0x70/0xc0 [ 97.577252][ T6187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.577263][ T6187] RIP: 0033:0x7f2d1ef9e0d9 [ 97.577272][ T6187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.577282][ T6187] RSP: 002b:00007f2d1ff26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.577293][ T6187] RAX: ffffffffffffffda RBX: 00007f2d1f225fa0 RCX: 00007f2d1ef9e0d9 [ 97.577300][ T6187] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 97.577306][ T6187] RBP: 00007f2d1ff26090 R08: 0000000000000000 R09: 0000000000000000 [ 97.577312][ T6187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.577318][ T6187] R13: 00007f2d1f226038 R14: 00007f2d1f225fa0 R15: 00007fffc31c13e8 [ 97.577332][ T6187] [ 97.838658][ T6189] FAULT_INJECTION: forcing a failure. [ 97.838658][ T6189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.852063][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.3.122 Not tainted syzkaller #0 PREEMPT(full) [ 97.852077][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 97.852084][ T6189] Call Trace: [ 97.852088][ T6189] [ 97.852092][ T6189] dump_stack_lvl+0x100/0x190 [ 97.852110][ T6189] should_fail_ex.cold+0x5/0xa [ 97.852125][ T6189] _copy_to_user+0x32/0xd0 [ 97.852142][ T6189] simple_read_from_buffer+0xcb/0x170 [ 97.852155][ T6189] proc_fail_nth_read+0x1af/0x230 [ 97.852175][ T6189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.852194][ T6189] ? rw_verify_area+0xce/0x6d0 [ 97.852210][ T6189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.852228][ T6189] vfs_read+0x1e4/0xb40 [ 97.852248][ T6189] ? __pfx_vfs_read+0x10/0x10 [ 97.852265][ T6189] ? __fget_files+0x215/0x3d0 [ 97.852279][ T6189] ? __fget_files+0x21f/0x3d0 [ 97.852294][ T6189] ksys_read+0x12a/0x250 [ 97.852304][ T6189] ? __pfx_ksys_read+0x10/0x10 [ 97.852318][ T6189] do_syscall_64+0x115/0x870 [ 97.852331][ T6189] ? clear_bhb_loop+0x70/0xc0 [ 97.852344][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.852356][ T6189] RIP: 0033:0x7fa32e55e90e [ 97.852365][ T6189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.852375][ T6189] RSP: 002b:00007fa32f46afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.852386][ T6189] RAX: ffffffffffffffda RBX: 00007fa32f46b6c0 RCX: 00007fa32e55e90e [ 97.852392][ T6189] RDX: 000000000000000f RSI: 00007fa32f46b0a0 RDI: 0000000000000005 [ 97.852399][ T6189] RBP: 00007fa32f46b090 R08: 0000000000000000 R09: 0000000000000000 [ 97.852405][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.852411][ T6189] R13: 00007fa32e826038 R14: 00007fa32e825fa0 R15: 00007ffe3b7f0478 [ 97.852424][ T6189] [ 98.082403][ T6193] FAULT_INJECTION: forcing a failure. [ 98.082403][ T6193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.095814][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.2.127 Not tainted syzkaller #0 PREEMPT(full) [ 98.095828][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 98.095834][ T6193] Call Trace: [ 98.095838][ T6193] [ 98.095842][ T6193] dump_stack_lvl+0x100/0x190 [ 98.095858][ T6193] should_fail_ex.cold+0x5/0xa [ 98.095873][ T6193] _copy_from_user+0x2e/0xd0 [ 98.095889][ T6193] memdup_user_nul+0x6c/0x120 [ 98.095903][ T6193] nvmf_dev_write+0x6d/0xb60 [ 98.095919][ T6193] ? rw_verify_area+0xce/0x6d0 [ 98.095937][ T6193] vfs_write+0x2aa/0x1050 [ 98.095948][ T6193] ? __pfx_nvmf_dev_write+0x10/0x10 [ 98.095964][ T6193] ? __pfx_vfs_write+0x10/0x10 [ 98.095973][ T6193] ? find_held_lock+0x2b/0x80 [ 98.095984][ T6193] ? __fget_files+0x215/0x3d0 [ 98.095996][ T6193] ? __fget_files+0x215/0x3d0 [ 98.096010][ T6193] ? __fget_files+0x21f/0x3d0 [ 98.096025][ T6193] ksys_write+0x12a/0x250 [ 98.096035][ T6193] ? __pfx_ksys_write+0x10/0x10 [ 98.096049][ T6193] do_syscall_64+0x115/0x870 [ 98.096062][ T6193] ? clear_bhb_loop+0x70/0xc0 [ 98.096075][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.096086][ T6193] RIP: 0033:0x7f2d1ef9e0d9 [ 98.096095][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.096106][ T6193] RSP: 002b:00007f2d1ff26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.096117][ T6193] RAX: ffffffffffffffda RBX: 00007f2d1f225fa0 RCX: 00007f2d1ef9e0d9 [ 98.096123][ T6193] RDX: 00000000000000b9 RSI: 0000200000000680 RDI: 0000000000000003 [ 98.096130][ T6193] RBP: 00007f2d1ff26090 R08: 0000000000000000 R09: 0000000000000000 [ 98.096136][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.096142][ T6193] R13: 00007f2d1f226038 R14: 00007f2d1f225fa0 R15: 00007fffc31c13e8 [ 98.096155][ T6193] [ 98.554077][ T10] usb 2-1: USB disconnect, device number 4 [ 98.855373][ T6201] binder: BC_ACQUIRE_RESULT not supported [ 98.899031][ T6201] binder: 6197:6201 ioctl c0306201 2000000004c0 returned -22 [ 99.015299][ T5715] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.174771][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 99.183040][ T5715] usb 5-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 99.204571][ T5715] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 113, changing to 7 [ 99.228476][ T5715] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.266531][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.275811][ T5715] usb 5-1: Product: syz [ 99.288460][ T5715] usb 5-1: Manufacturer: syz [ 99.306796][ T5715] usb 5-1: SerialNumber: syz [ 99.421969][ T6212] FAULT_INJECTION: forcing a failure. [ 99.421969][ T6212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.462926][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.3.131 Not tainted syzkaller #0 PREEMPT(full) [ 99.462940][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.462947][ T6212] Call Trace: [ 99.462950][ T6212] [ 99.462954][ T6212] dump_stack_lvl+0x100/0x190 [ 99.462972][ T6212] should_fail_ex.cold+0x5/0xa [ 99.462986][ T6212] _copy_to_user+0x32/0xd0 [ 99.463004][ T6212] simple_read_from_buffer+0xcb/0x170 [ 99.463018][ T6212] proc_fail_nth_read+0x1af/0x230 [ 99.463037][ T6212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.463058][ T6212] ? rw_verify_area+0xce/0x6d0 [ 99.463074][ T6212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.463093][ T6212] vfs_read+0x1e4/0xb40 [ 99.463112][ T6212] ? __pfx_vfs_read+0x10/0x10 [ 99.463129][ T6212] ? __fget_files+0x215/0x3d0 [ 99.463144][ T6212] ? __fget_files+0x21f/0x3d0 [ 99.463160][ T6212] ksys_read+0x12a/0x250 [ 99.463170][ T6212] ? __pfx_ksys_read+0x10/0x10 [ 99.463184][ T6212] do_syscall_64+0x115/0x870 [ 99.463197][ T6212] ? clear_bhb_loop+0x70/0xc0 [ 99.463210][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.463222][ T6212] RIP: 0033:0x7fa32e55e90e [ 99.463231][ T6212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.463241][ T6212] RSP: 002b:00007fa32f46afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.463252][ T6212] RAX: ffffffffffffffda RBX: 00007fa32f46b6c0 RCX: 00007fa32e55e90e [ 99.463259][ T6212] RDX: 000000000000000f RSI: 00007fa32f46b0a0 RDI: 0000000000000004 [ 99.463265][ T6212] RBP: 00007fa32f46b090 R08: 0000000000000000 R09: 0000000000000000 [ 99.463271][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.463277][ T6212] R13: 00007fa32e826038 R14: 00007fa32e825fa0 R15: 00007ffe3b7f0478 [ 99.463291][ T6212] [ 99.715324][ T6216] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 99.952711][ T6216] gretap1: entered promiscuous mode [ 100.072963][ T6217] bond1 (unregistering): Released all slaves [ 100.117835][ T6227] vivid-000: disconnect [ 100.309023][ T6238] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 100.331018][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.139'. [ 100.359549][ T6238] qnx6: wrong signature (magic) in superblock #1. [ 100.424873][ T6238] qnx6: unable to read the first superblock [ 100.469081][ T6244] capability: warning: `syz.2.140' uses 32-bit capabilities (legacy support in use) [ 100.505812][ T6242] erspan0: left allmulticast mode [ 100.512080][ T6242] erspan0: left promiscuous mode [ 100.520954][ T6244] VFS: file-max limit 0 reached [ 100.531027][ T6242] bridge1: port 1(erspan0) entered disabled state [ 100.556562][ T6242] bridge2: port 1(erspan0) entered blocking state [ 100.576609][ T6242] bridge2: port 1(erspan0) entered disabled state [ 100.594198][ T5598] Bluetooth: hci3: command 0x0406 tx timeout [ 100.619563][ T6242] erspan0: entered allmulticast mode [ 100.638096][ T6247] FAULT_INJECTION: forcing a failure. [ 100.638096][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 100.651673][ T6242] erspan0: entered promiscuous mode [ 100.663961][ T6242] bridge2: port 1(erspan0) entered blocking state [ 100.670407][ T6242] bridge2: port 1(erspan0) entered forwarding state [ 100.684958][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: syz.2.141 Not tainted syzkaller #0 PREEMPT(full) [ 100.684972][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 100.684979][ T6247] Call Trace: [ 100.684982][ T6247] [ 100.684986][ T6247] dump_stack_lvl+0x100/0x190 [ 100.685004][ T6247] should_fail_ex.cold+0x5/0xa [ 100.685019][ T6247] should_failslab+0xc2/0x120 [ 100.685034][ T6247] __kmalloc_noprof+0xfc/0x820 [ 100.685050][ T6247] ? tomoyo_encode2+0xfb/0x3c0 [ 100.685063][ T6247] tomoyo_encode2+0xfb/0x3c0 [ 100.685076][ T6247] tomoyo_encode+0x29/0x50 [ 100.685085][ T6247] tomoyo_realpath_from_path+0x18c/0x690 [ 100.685100][ T6247] tomoyo_path_number_perm+0x23c/0x580 [ 100.685115][ T6247] ? tomoyo_path_number_perm+0x22e/0x580 [ 100.685132][ T6247] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.685162][ T6247] ? find_held_lock+0x2b/0x80 [ 100.685173][ T6247] ? __fget_files+0x215/0x3d0 [ 100.685184][ T6247] ? hook_file_ioctl_common+0x140/0x440 [ 100.685196][ T6247] ? __fget_files+0x215/0x3d0 [ 100.685210][ T6247] ? __fget_files+0x21f/0x3d0 [ 100.685224][ T6247] security_file_ioctl+0xd3/0x230 [ 100.685242][ T6247] __x64_sys_ioctl+0xb7/0x210 [ 100.685260][ T6247] do_syscall_64+0x115/0x870 [ 100.685273][ T6247] ? clear_bhb_loop+0x70/0xc0 [ 100.685286][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.685298][ T6247] RIP: 0033:0x7f2d1ef9e0d9 [ 100.685307][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.685317][ T6247] RSP: 002b:00007f2d1ff26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.685328][ T6247] RAX: ffffffffffffffda RBX: 00007f2d1f225fa0 RCX: 00007f2d1ef9e0d9 [ 100.685335][ T6247] RDX: 0000200000000180 RSI: 00000000c038563c RDI: 0000000000000003 [ 100.685341][ T6247] RBP: 00007f2d1ff26090 R08: 0000000000000000 R09: 0000000000000000 [ 100.685347][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.685353][ T6247] R13: 00007f2d1f226038 R14: 00007f2d1f225fa0 R15: 00007fffc31c13e8 [ 100.685367][ T6247] [ 100.685408][ T6247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.446201][ T6226] vivid-000: reconnect [ 101.592933][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 101.592943][ T30] audit: type=1400 audit(1786931432.719:665): avc: denied { shutdown } for pid=6258 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.811595][ T5715] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.998584][ T30] audit: type=1400 audit(1786931432.759:666): avc: denied { getopt } for pid=6258 comm="syz.0.143" lport=51041 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 102.825393][ T5715] usb 5-1: USB disconnect, device number 7 [ 103.486010][ T30] audit: type=1400 audit(1786931433.159:667): avc: denied { read write } for pid=6261 comm="syz.3.144" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.670570][ T6275] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.712031][ T30] audit: type=1400 audit(1786931433.159:668): avc: denied { open } for pid=6261 comm="syz.3.144" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.737563][ T6275] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 103.807206][ T6275] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.832391][ T6275] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 103.856409][ T30] audit: type=1400 audit(1786931433.169:669): avc: denied { ioctl } for pid=6261 comm="syz.3.144" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.894864][ T6275] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.927895][ T6275] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 104.046149][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 104.071538][ T6275] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.087670][ T6275] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 104.180919][ T6275] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.214447][ T6275] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 104.411951][ T30] audit: type=1400 audit(1786931435.539:670): avc: denied { create } for pid=6290 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.531549][ T30] audit: type=1400 audit(1786931435.589:671): avc: denied { bind } for pid=6290 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.728543][ T6300] FAULT_INJECTION: forcing a failure. [ 104.728543][ T6300] name failslab, interval 1, probability 0, space 0, times 0 [ 104.795922][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.4.147 Not tainted syzkaller #0 PREEMPT(full) [ 104.795936][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 104.795943][ T6300] Call Trace: [ 104.795947][ T6300] [ 104.795951][ T6300] dump_stack_lvl+0x100/0x190 [ 104.795969][ T6300] should_fail_ex.cold+0x5/0xa [ 104.795983][ T6300] should_failslab+0xc2/0x120 [ 104.795999][ T6300] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 104.796013][ T6300] ? __alloc_skb+0x5b7/0x710 [ 104.796027][ T6300] ? __alloc_skb+0x140/0x710 [ 104.796043][ T6300] __alloc_skb+0x140/0x710 [ 104.796055][ T6300] ? __alloc_skb+0x5b7/0x710 [ 104.796069][ T6300] ? __pfx___alloc_skb+0x10/0x10 [ 104.796086][ T6300] netlink_alloc_large_skb+0x69/0x150 [ 104.796101][ T6300] netlink_sendmsg+0x680/0xda0 [ 104.796115][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.796129][ T6300] ? selinux_socket_sendmsg+0x198/0x2f0 [ 104.796149][ T6300] ____sys_sendmsg+0xa4d/0xbe0 [ 104.796158][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.796172][ T6300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.796189][ T6300] ___sys_sendmsg+0x190/0x1e0 [ 104.796201][ T6300] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.796211][ T6300] ? __lock_acquire+0x49f/0x1a40 [ 104.796226][ T6300] ? get_pid_task+0x106/0x250 [ 104.796251][ T6300] __sys_sendmsg+0x160/0x210 [ 104.796267][ T6300] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.796289][ T6300] do_syscall_64+0x115/0x870 [ 104.796303][ T6300] ? clear_bhb_loop+0x70/0xc0 [ 104.796316][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.796328][ T6300] RIP: 0033:0x7f13ec99e0d9 [ 104.796337][ T6300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.796348][ T6300] RSP: 002b:00007f13ed8a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.796359][ T6300] RAX: ffffffffffffffda RBX: 00007f13ecc25fa0 RCX: 00007f13ec99e0d9 [ 104.796366][ T6300] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 104.796372][ T6300] RBP: 00007f13ed8a0090 R08: 0000000000000000 R09: 0000000000000000 [ 104.796378][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.796384][ T6300] R13: 00007f13ecc26038 R14: 00007f13ecc25fa0 R15: 00007fff0699d7f8 [ 104.796398][ T6300] [ 105.171444][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 105.193173][ T5715] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.363277][ T187] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 105.370725][ T5715] usb 3-1: Using ep0 maxpacket: 8 [ 105.376432][ T5715] usb 3-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 105.534805][ T187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.689212][ T30] audit: type=1400 audit(1786931436.359:672): avc: denied { create } for pid=6308 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.207635][ T187] usb 2-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=c8.b9 [ 106.225261][ T5715] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 113, changing to 7 [ 106.275115][ T5715] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.289812][ T187] usb 2-1: config 8 has an invalid interface number: 254 but max is 0 [ 106.313684][ T30] audit: type=1400 audit(1786931436.359:673): avc: denied { write } for pid=6308 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.341266][ T187] usb 2-1: config 8 has no interface number 0 [ 106.366184][ T187] usb 2-1: config 8 interface 254 has no altsetting 0 [ 106.377704][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.398340][ T5715] usb 3-1: Product: syz [ 106.409954][ T187] usb 2-1: string descriptor 0 read error: -22 [ 106.417412][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.430016][ T5715] usb 3-1: Manufacturer: syz [ 106.442902][ T30] audit: type=1400 audit(1786931436.359:674): avc: denied { ioctl } for pid=6308 comm="syz.0.159" path="socket:[11869]" dev="sockfs" ino=11869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.481432][ T5715] usb 3-1: SerialNumber: syz [ 106.520249][ T187] mct_u232 2-1:8.254: MCT U232 converter detected [ 106.562879][ T187] mct_u232 ttyUSB0: expected endpoint missing [ 106.596899][ T30] audit: type=1400 audit(1786931437.069:675): avc: denied { setopt } for pid=6315 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.674245][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 106.688225][ T30] audit: type=1400 audit(1786931437.509:676): avc: denied { ioctl } for pid=6322 comm="syz.4.163" path="socket:[11978]" dev="sockfs" ino=11978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.780285][ T6335] tipc: Started in network mode [ 106.786092][ T187] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.816401][ T30] audit: type=1400 audit(1786931437.509:677): avc: denied { bind } for pid=6322 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.913864][ T30] audit: type=1400 audit(1786931437.679:678): avc: denied { mount } for pid=6327 comm="syz.0.164" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 106.938364][ T6335] tipc: Node identity 567025c2f299, cluster identity 4711 [ 106.956779][ T187] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.011222][ T187] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.026753][ T6335] tipc: Enabled bearer , priority 0 [ 107.041295][ T187] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.056310][ T6340] syzkaller0: entered promiscuous mode [ 107.061830][ T30] audit: type=1400 audit(1786931437.679:679): avc: denied { read append } for pid=6327 comm="syz.0.164" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.085927][ T6340] syzkaller0: entered allmulticast mode [ 107.093286][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.113194][ T5595] usb 2-1: USB disconnect, device number 5 [ 107.121947][ T5595] mct_u232 2-1:8.254: device disconnected [ 107.132366][ T6330] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 107.151969][ T6335] tipc: Resetting bearer [ 107.167976][ T187] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.178124][ T30] audit: type=1400 audit(1786931437.679:680): avc: denied { open } for pid=6327 comm="syz.0.164" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.207110][ T187] usb 5-1: invalid MIDI in EP 0 [ 107.301939][ T30] audit: type=1400 audit(1786931437.689:681): avc: denied { ioctl } for pid=6327 comm="syz.0.164" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.367397][ T6330] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 107.377586][ T5595] IPVS: starting estimator thread 0... [ 107.429036][ T6330] bridge0: port 3(vlan2) entered blocking state [ 107.439419][ T30] audit: type=1400 audit(1786931437.689:682): avc: denied { ioctl } for pid=6327 comm="syz.0.164" path="socket:[11998]" dev="sockfs" ino=11998 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.469834][ T187] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 107.483224][ T6330] bridge0: port 3(vlan2) entered disabled state [ 107.494796][ T6345] IPVS: using max 75 ests per chain, 180000 per kthread [ 107.505845][ T6330] vlan2: entered allmulticast mode [ 107.523018][ T6330] bridge0: entered allmulticast mode [ 107.536099][ T6330] vlan2: left allmulticast mode [ 107.543990][ T30] audit: type=1400 audit(1786931437.729:683): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 107.575046][ T6330] bridge0: left allmulticast mode [ 107.625210][ T6331] tipc: Resetting bearer [ 107.667370][ T30] audit: type=1400 audit(1786931438.489:684): avc: denied { setopt } for pid=6329 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 107.712366][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 107.747404][ T6331] tipc: Disabling bearer [ 108.546825][ T10] usb 5-1: USB disconnect, device number 8 [ 108.628198][ T5715] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.847827][ T6354] WARNING! power/level is deprecated; use power/control instead [ 108.859747][ T5715] usb 3-1: USB disconnect, device number 7 [ 109.295480][ T6357] FAULT_INJECTION: forcing a failure. [ 109.295480][ T6357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.309337][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.3.173 Not tainted syzkaller #0 PREEMPT(full) [ 109.309352][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.309358][ T6357] Call Trace: [ 109.309362][ T6357] [ 109.309366][ T6357] dump_stack_lvl+0x100/0x190 [ 109.309383][ T6357] should_fail_ex.cold+0x5/0xa [ 109.309397][ T6357] _copy_to_user+0x32/0xd0 [ 109.309414][ T6357] simple_read_from_buffer+0xcb/0x170 [ 109.309428][ T6357] proc_fail_nth_read+0x1af/0x230 [ 109.309447][ T6357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.309466][ T6357] ? rw_verify_area+0xce/0x6d0 [ 109.309482][ T6357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.309500][ T6357] vfs_read+0x1e4/0xb40 [ 109.309519][ T6357] ? __pfx_vfs_read+0x10/0x10 [ 109.309536][ T6357] ? __fget_files+0x215/0x3d0 [ 109.309551][ T6357] ? __fget_files+0x21f/0x3d0 [ 109.309566][ T6357] ksys_read+0x12a/0x250 [ 109.309575][ T6357] ? __pfx_ksys_read+0x10/0x10 [ 109.309585][ T6357] ? trace_hardirqs_off+0x70/0x170 [ 109.309608][ T6357] do_syscall_64+0x115/0x870 [ 109.309622][ T6357] ? clear_bhb_loop+0x70/0xc0 [ 109.309635][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.309647][ T6357] RIP: 0033:0x7fa32e55e90e [ 109.309656][ T6357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.309666][ T6357] RSP: 002b:00007fa32f46afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.309677][ T6357] RAX: ffffffffffffffda RBX: 00007fa32f46b6c0 RCX: 00007fa32e55e90e [ 109.309685][ T6357] RDX: 000000000000000f RSI: 00007fa32f46b0a0 RDI: 0000000000000006 [ 109.309691][ T6357] RBP: 00007fa32f46b090 R08: 0000000000000000 R09: 0000000000000000 [ 109.309697][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.309703][ T6357] R13: 00007fa32e826038 R14: 00007fa32e825fa0 R15: 00007ffe3b7f0478 [ 109.309717][ T6357] [ 109.712797][ T6356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.731081][ T6356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.083526][ T187] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 110.124959][ T5715] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.301493][ T6375] tipc: Enabled bearer , priority 0 [ 110.364101][ T187] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 110.383072][ T5715] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 110.411729][ T6382] 9p: Bad value for 'rfdno' [ 110.416738][ T5715] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 110.427931][ T6371] syzkaller0: entered promiscuous mode [ 110.436413][ T6371] syzkaller0: entered allmulticast mode [ 110.442160][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.451055][ T187] usb 4-1: Product: syz [ 110.455666][ T187] usb 4-1: Manufacturer: syz [ 110.465642][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.478144][ T6371] tipc: Resetting bearer [ 110.484954][ T5715] usb 3-1: config 0 descriptor?? [ 110.491932][ T187] usb 4-1: SerialNumber: syz [ 110.505153][ T187] usb 4-1: config 0 descriptor?? [ 110.520737][ T5715] pwc: Creative Labs Webcam Pro Ex detected. [ 110.528557][ T6370] tipc: Resetting bearer [ 110.536069][ T5715] pwc: Warning: more than 1 configuration available. [ 110.544312][ T187] hub 4-1:0.0: bad descriptor, ignoring hub [ 110.558448][ T187] hub 4-1:0.0: probe with driver hub failed with error -5 [ 110.566293][ T6370] tipc: Disabling bearer [ 110.630492][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 110.712018][ T5715] pwc: Failed to set LED on/off time (-71) [ 110.719292][ T5715] pwc: send_video_command error -71 [ 110.729254][ T5715] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 110.736957][ T5715] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 110.748819][ T187] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 110.762848][ T5715] usb 3-1: USB disconnect, device number 8 [ 110.781687][ T187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.792285][ T187] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 110.801564][ T187] usb 4-1: media controller created [ 110.819254][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.852600][ T187] DVB: Unable to find symbol dib7000p_attach() [ 110.860670][ T187] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 110.913301][ T187] rc_core: IR keymap rc-dib0700-rc5 not found [ 110.919421][ T187] Registered IR keymap rc-empty [ 110.924640][ T187] dvb-usb: could not initialize remote control. [ 110.930915][ T187] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 110.944120][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 111.103917][ T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 111.114215][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.124130][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.134038][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.282922][ T5715] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.304621][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 112.304631][ T30] audit: type=1326 audit(1786931443.429:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb69b9e0d9 code=0x7ffc0000 [ 112.370124][ T5595] usb 1-1: USB disconnect, device number 9 [ 112.412457][ T30] audit: type=1326 audit(1786931443.429:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6388 comm="syz.0.184" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb69b9e0d9 code=0x7ffc0000 [ 112.515453][ T5715] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 112.527087][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.535369][ T5715] usb 5-1: Product: syz [ 112.539572][ T5715] usb 5-1: Manufacturer: syz [ 112.548451][ T5715] usb 5-1: SerialNumber: syz [ 112.567612][ T5715] usb 5-1: config 0 descriptor?? [ 112.584059][ T5715] hub 5-1:0.0: bad descriptor, ignoring hub [ 112.591730][ T5715] hub 5-1:0.0: probe with driver hub failed with error -5 [ 112.788327][ T5715] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 112.873321][ T6363] dib0700: could not acquire lock [ 112.911399][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 112.958324][ T187] usb 4-1: USB disconnect, device number 8 [ 112.984326][ T5715] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 112.995003][ T6394] dib0700: tx buffer length is larger than 4. Not supported. [ 113.038568][ T6412] FAULT_INJECTION: forcing a failure. [ 113.038568][ T6412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.073170][ T5715] usb 5-1: media controller created [ 113.113017][ T187] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 113.135508][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.146420][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 113.146435][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 113.146441][ T6412] Call Trace: [ 113.146445][ T6412] [ 113.146449][ T6412] dump_stack_lvl+0x100/0x190 [ 113.146467][ T6412] should_fail_ex.cold+0x5/0xa [ 113.146481][ T6412] _copy_from_user+0x2e/0xd0 [ 113.146498][ T6412] memdup_user+0x6b/0xe0 [ 113.146511][ T6412] strndup_user+0x78/0xe0 [ 113.146525][ T6412] __x64_sys_mount+0x136/0x310 [ 113.146541][ T6412] ? __pfx___x64_sys_mount+0x10/0x10 [ 113.146565][ T6412] do_syscall_64+0x115/0x870 [ 113.146578][ T6412] ? clear_bhb_loop+0x70/0xc0 [ 113.146592][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.146604][ T6412] RIP: 0033:0x7fdb69b9e0d9 [ 113.146613][ T6412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.146624][ T6412] RSP: 002b:00007fdb67df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.146635][ T6412] RAX: ffffffffffffffda RBX: 00007fdb69e25fa0 RCX: 00007fdb69b9e0d9 [ 113.146642][ T6412] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 113.146649][ T6412] RBP: 00007fdb67df6090 R08: 00002000000001c0 R09: 0000000000000000 [ 113.146655][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.146661][ T6412] R13: 00007fdb69e26038 R14: 00007fdb69e25fa0 R15: 00007ffd479566c8 [ 113.146675][ T6412] [ 113.373632][ T6416] tipc: Enabled bearer , priority 0 [ 113.380661][ T6416] syzkaller0: entered promiscuous mode [ 113.386125][ T6416] syzkaller0: entered allmulticast mode [ 113.394093][ T6416] tipc: Resetting bearer [ 113.467510][ T5715] DVB: Unable to find symbol dib7000p_attach() [ 113.473836][ T5715] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 113.498032][ T6415] tipc: Resetting bearer [ 113.524012][ T5715] rc_core: IR keymap rc-dib0700-rc5 not found [ 113.530293][ T5715] Registered IR keymap rc-empty [ 113.537466][ T5715] dvb-usb: could not initialize remote control. [ 113.548315][ T5715] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 113.577635][ T6415] tipc: Disabling bearer [ 113.638055][ T5715] usb 5-1: USB disconnect, device number 9 [ 113.646608][ T6422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 113.700083][ T6426] FAULT_INJECTION: forcing a failure. [ 113.700083][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 113.733699][ T5715] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 113.814560][ T6426] CPU: 0 UID: 0 PID: 6426 Comm: syz.2.196 Not tainted syzkaller #0 PREEMPT(full) [ 113.814575][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 113.814583][ T6426] Call Trace: [ 113.814587][ T6426] [ 113.814591][ T6426] dump_stack_lvl+0x100/0x190 [ 113.814609][ T6426] should_fail_ex.cold+0x5/0xa [ 113.814623][ T6426] should_failslab+0xc2/0x120 [ 113.814639][ T6426] __kmalloc_noprof+0xfc/0x820 [ 113.814653][ T6426] ? xprt_alloc+0x32/0x9d0 [ 113.814672][ T6426] xprt_alloc+0x32/0x9d0 [ 113.814690][ T6426] xs_setup_xprt+0xaf/0x3c0 [ 113.814704][ T6426] xs_setup_local+0x47/0x820 [ 113.814718][ T6426] xprt_create_transport+0x16c/0x740 [ 113.814738][ T6426] rpc_create+0x390/0x7f0 [ 113.814751][ T6426] ? __pfx_rpc_create+0x10/0x10 [ 113.814778][ T6426] ? rcu_is_watching+0x12/0xc0 [ 113.814796][ T6426] ? trace_contention_end+0x126/0x160 [ 113.814811][ T6426] ? __mutex_lock+0x26d/0x1bd0 [ 113.814827][ T6426] gssp_rpc_create+0xe1/0x180 [ 113.814842][ T6426] ? __pfx_gssp_rpc_create+0x10/0x10 [ 113.814863][ T6426] ? net_generic+0xea/0x2a0 [ 113.814881][ T6426] set_gssp_clnt+0xc3/0x1b0 [ 113.814895][ T6426] ? __pfx_set_gssp_clnt+0x10/0x10 [ 113.814914][ T6426] write_gssp+0x1f7/0x380 [ 113.814927][ T6426] ? __pfx_write_gssp+0x10/0x10 [ 113.814945][ T6426] ? __pfx_write_gssp+0x10/0x10 [ 113.814957][ T6426] proc_reg_write+0x240/0x330 [ 113.814973][ T6426] vfs_write+0x2aa/0x1050 [ 113.814984][ T6426] ? __pfx_proc_reg_write+0x10/0x10 [ 113.814999][ T6426] ? __pfx_vfs_write+0x10/0x10 [ 113.815009][ T6426] ? __fget_files+0x215/0x3d0 [ 113.815024][ T6426] ? __fget_files+0x21f/0x3d0 [ 113.815040][ T6426] ksys_write+0x12a/0x250 [ 113.815050][ T6426] ? __pfx_ksys_write+0x10/0x10 [ 113.815064][ T6426] do_syscall_64+0x115/0x870 [ 113.815077][ T6426] ? clear_bhb_loop+0x70/0xc0 [ 113.815091][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.815102][ T6426] RIP: 0033:0x7f2d1ef9e0d9 [ 113.815112][ T6426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.815122][ T6426] RSP: 002b:00007f2d1ff26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.815133][ T6426] RAX: ffffffffffffffda RBX: 00007f2d1f225fa0 RCX: 00007f2d1ef9e0d9 [ 113.815140][ T6426] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 113.815146][ T6426] RBP: 00007f2d1ff26090 R08: 0000000000000000 R09: 0000000000000000 [ 113.815153][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.815159][ T6426] R13: 00007f2d1f226038 R14: 00007f2d1f225fa0 R15: 00007fffc31c13e8 [ 113.815173][ T6426] [ 114.371123][ T6438] FAULT_INJECTION: forcing a failure. [ 114.371123][ T6438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.403308][ T6438] CPU: 0 UID: 0 PID: 6438 Comm: syz.4.201 Not tainted syzkaller #0 PREEMPT(full) [ 114.403323][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.403329][ T6438] Call Trace: [ 114.403333][ T6438] [ 114.403338][ T6438] dump_stack_lvl+0x100/0x190 [ 114.403355][ T6438] should_fail_ex.cold+0x5/0xa [ 114.403370][ T6438] _copy_from_user+0x2e/0xd0 [ 114.403386][ T6438] get_timespec64+0x8d/0x240 [ 114.403400][ T6438] ? __pfx_get_timespec64+0x10/0x10 [ 114.403417][ T6438] __x64_sys_clock_nanosleep+0x1ce/0x480 [ 114.403431][ T6438] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 114.403449][ T6438] do_syscall_64+0x115/0x870 [ 114.403462][ T6438] ? clear_bhb_loop+0x70/0xc0 [ 114.403476][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.403488][ T6438] RIP: 0033:0x7f13ec95e90e [ 114.403497][ T6438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.403508][ T6438] RSP: 002b:00007f13ed89ff78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 114.403519][ T6438] RAX: ffffffffffffffda RBX: 00007f13ed8a06c0 RCX: 00007f13ec95e90e [ 114.403526][ T6438] RDX: 00007f13ed89ffd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.403532][ T6438] RBP: 00007f13ed8a0090 R08: 0000000000000000 R09: 0000000000000000 [ 114.403538][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.403549][ T6438] R13: 00007f13ecc26038 R14: 00007f13ecc25fa0 R15: 00007fff0699d7f8 [ 114.403562][ T6438] [ 114.883397][ T5789] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 114.966793][ T5715] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 115.018084][ T6453] fuse: Bad value for 'fd' [ 115.054003][ T5789] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 115.068397][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.099232][ T5789] usb 3-1: Product: syz [ 115.117312][ T5789] usb 3-1: Manufacturer: syz [ 115.135266][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 115.148643][ T5789] usb 3-1: SerialNumber: syz [ 115.165816][ T5715] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.178671][ T5789] usb 3-1: config 0 descriptor?? [ 115.207864][ T5789] hub 3-1:0.0: bad descriptor, ignoring hub [ 115.214388][ T5715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.246905][ T5789] hub 3-1:0.0: probe with driver hub failed with error -5 [ 115.260880][ T5715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.286780][ T30] audit: type=1400 audit(1786931446.419:764): avc: denied { ioctl } for pid=6461 comm="syz.0.210" path="socket:[12709]" dev="sockfs" ino=12709 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.318679][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.345273][ T5715] usb 4-1: config 0 descriptor?? [ 115.408240][ T5789] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 115.438780][ T5789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.469800][ T5789] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 115.503367][ T5789] usb 3-1: media controller created [ 115.539660][ T5789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.608700][ T6441] dib0700: tx buffer length is larger than 4. Not supported. [ 115.695923][ T5789] DVB: Unable to find symbol dib7000p_attach() [ 115.704514][ T6475] FAULT_INJECTION: forcing a failure. [ 115.704514][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 115.738601][ T5789] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 115.771733][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.1.214 Not tainted syzkaller #0 PREEMPT(full) [ 115.771748][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.771755][ T6475] Call Trace: [ 115.771759][ T6475] [ 115.771762][ T6475] dump_stack_lvl+0x100/0x190 [ 115.771780][ T6475] should_fail_ex.cold+0x5/0xa [ 115.771795][ T6475] should_failslab+0xc2/0x120 [ 115.771810][ T6475] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 115.771825][ T6475] ? __alloc_skb+0x5b7/0x710 [ 115.771839][ T6475] ? __alloc_skb+0x140/0x710 [ 115.771855][ T6475] __alloc_skb+0x140/0x710 [ 115.771868][ T6475] ? __alloc_skb+0x5b7/0x710 [ 115.771882][ T6475] ? __pfx___alloc_skb+0x10/0x10 [ 115.771895][ T6475] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 115.771913][ T6475] ? sock_has_perm+0x25a/0x2f0 [ 115.771927][ T6475] ? __pfx_sock_has_perm+0x10/0x10 [ 115.771943][ T6475] netlink_alloc_large_skb+0x69/0x150 [ 115.771958][ T6475] netlink_sendmsg+0x680/0xda0 [ 115.771972][ T6475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.771987][ T6475] ? selinux_socket_sendmsg+0x198/0x2f0 [ 115.772005][ T6475] ____sys_sendmsg+0xa4d/0xbe0 [ 115.772015][ T6475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.772029][ T6475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.772045][ T6475] ___sys_sendmsg+0x190/0x1e0 [ 115.772058][ T6475] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.772068][ T6475] ? __lock_acquire+0x49f/0x1a40 [ 115.772083][ T6475] ? get_pid_task+0x106/0x250 [ 115.772108][ T6475] __sys_sendmsg+0x160/0x210 [ 115.772124][ T6475] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.772146][ T6475] do_syscall_64+0x115/0x870 [ 115.772159][ T6475] ? clear_bhb_loop+0x70/0xc0 [ 115.772173][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.772185][ T6475] RIP: 0033:0x7effd0f9e0d9 [ 115.772194][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.772205][ T6475] RSP: 002b:00007effd1e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.772215][ T6475] RAX: ffffffffffffffda RBX: 00007effd1225fa0 RCX: 00007effd0f9e0d9 [ 115.772223][ T6475] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 115.772229][ T6475] RBP: 00007effd1e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.772235][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.772242][ T6475] R13: 00007effd1226038 R14: 00007effd1225fa0 R15: 00007ffd256e2358 [ 115.772255][ T6475] [ 116.042339][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 116.051273][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 116.060454][ T6479] netlink: 116 bytes leftover after parsing attributes in process `syz.3.203'. [ 116.181104][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 116.288174][ T30] audit: type=1400 audit(1786931447.349:765): avc: denied { create } for pid=6484 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.327142][ T30] audit: type=1400 audit(1786931447.349:766): avc: denied { bind } for pid=6484 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.362332][ T30] audit: type=1804 audit(1786931447.349:767): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.217" name="bus" dev="ramfs" ino=12857 res=1 errno=0 [ 116.427631][ T5789] rc_core: IR keymap rc-dib0700-rc5 not found [ 116.442196][ T5789] Registered IR keymap rc-empty [ 116.457341][ T5789] dvb-usb: could not initialize remote control. [ 116.498873][ T5789] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 116.541527][ T5789] usb 3-1: USB disconnect, device number 9 [ 116.613038][ T5789] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 116.821599][ T6501] FAULT_INJECTION: forcing a failure. [ 116.821599][ T6501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.842688][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.1.220 Not tainted syzkaller #0 PREEMPT(full) [ 116.842703][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 116.842710][ T6501] Call Trace: [ 116.842713][ T6501] [ 116.842718][ T6501] dump_stack_lvl+0x100/0x190 [ 116.842735][ T6501] should_fail_ex.cold+0x5/0xa [ 116.842750][ T6501] strncpy_from_user+0x3b/0x2d0 [ 116.842767][ T6501] do_getname+0x78/0x390 [ 116.842784][ T6501] __do_sys_file_getattr+0x47b/0x530 [ 116.842799][ T6501] ? __pfx___do_sys_file_getattr+0x10/0x10 [ 116.842815][ T6501] ? fput+0x79/0x100 [ 116.842829][ T6501] ? ksys_write+0x1ac/0x250 [ 116.842843][ T6501] do_syscall_64+0x115/0x870 [ 116.842857][ T6501] ? clear_bhb_loop+0x70/0xc0 [ 116.842870][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.842882][ T6501] RIP: 0033:0x7effd0f9e0d9 [ 116.842891][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.842902][ T6501] RSP: 002b:00007effd1e0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d4 [ 116.842913][ T6501] RAX: ffffffffffffffda RBX: 00007effd1226180 RCX: 00007effd0f9e0d9 [ 116.842920][ T6501] RDX: 0000200000000280 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 116.842926][ T6501] RBP: 00007effd1e0d090 R08: 0000000000000100 R09: 0000000000000000 [ 116.842933][ T6501] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 116.842939][ T6501] R13: 00007effd1226218 R14: 00007effd1226180 R15: 00007ffd256e2358 [ 116.842952][ T6501] [ 117.085582][ T30] audit: type=1400 audit(1786931448.219:768): avc: denied { map } for pid=6505 comm="syz.4.224" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 118.967030][ T9] usb 4-1: USB disconnect, device number 9 [ 118.977413][ T5715] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 120.014823][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 120.083275][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 120.089793][ T5715] usb 1-1: device descriptor read/all, error -71 [ 120.199289][ T6525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.221844][ T6527] FAULT_INJECTION: forcing a failure. [ 120.221844][ T6527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.276024][ T6533] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 120.339733][ T6527] CPU: 0 UID: 0 PID: 6527 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full) [ 120.339747][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.339754][ T6527] Call Trace: [ 120.339758][ T6527] [ 120.339762][ T6527] dump_stack_lvl+0x100/0x190 [ 120.339779][ T6527] should_fail_ex.cold+0x5/0xa [ 120.339794][ T6527] _copy_to_user+0x32/0xd0 [ 120.339811][ T6527] simple_read_from_buffer+0xcb/0x170 [ 120.339825][ T6527] proc_fail_nth_read+0x1af/0x230 [ 120.339844][ T6527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.339864][ T6527] ? rw_verify_area+0xce/0x6d0 [ 120.339880][ T6527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.339898][ T6527] vfs_read+0x1e4/0xb40 [ 120.339917][ T6527] ? __pfx_vfs_read+0x10/0x10 [ 120.339934][ T6527] ? __fget_files+0x215/0x3d0 [ 120.339950][ T6527] ? __fget_files+0x21f/0x3d0 [ 120.339965][ T6527] ksys_read+0x12a/0x250 [ 120.339975][ T6527] ? __pfx_ksys_read+0x10/0x10 [ 120.339989][ T6527] do_syscall_64+0x115/0x870 [ 120.340002][ T6527] ? clear_bhb_loop+0x70/0xc0 [ 120.340015][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.340027][ T6527] RIP: 0033:0x7effd0f5e90e [ 120.340036][ T6527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 120.340047][ T6527] RSP: 002b:00007effd1e2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.340058][ T6527] RAX: ffffffffffffffda RBX: 00007effd1e2e6c0 RCX: 00007effd0f5e90e [ 120.340065][ T6527] RDX: 000000000000000f RSI: 00007effd1e2e0a0 RDI: 0000000000000004 [ 120.340071][ T6527] RBP: 00007effd1e2e090 R08: 0000000000000000 R09: 0000000000000000 [ 120.340078][ T6527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.340084][ T6527] R13: 00007effd1226128 R14: 00007effd1226090 R15: 00007ffd256e2358 [ 120.340097][ T6527] [ 120.569549][ T6524] tipc: Enabled bearer , priority 0 [ 120.577129][ T6524] syzkaller0: entered promiscuous mode [ 120.582593][ T6524] syzkaller0: entered allmulticast mode [ 120.592407][ T6524] tipc: Resetting bearer [ 120.637882][ T6522] tipc: Resetting bearer [ 120.651671][ T6522] tipc: Disabling bearer [ 120.741009][ T30] audit: type=1400 audit(1786931451.749:769): avc: denied { create } for pid=6534 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 120.776968][ T6545] FAULT_INJECTION: forcing a failure. [ 120.776968][ T6545] name failslab, interval 1, probability 0, space 0, times 0 [ 120.839945][ T6545] CPU: 0 UID: 0 PID: 6545 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT(full) [ 120.839959][ T6545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 120.839966][ T6545] Call Trace: [ 120.839970][ T6545] [ 120.839974][ T6545] dump_stack_lvl+0x100/0x190 [ 120.839991][ T6545] should_fail_ex.cold+0x5/0xa [ 120.840006][ T6545] should_failslab+0xc2/0x120 [ 120.840021][ T6545] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 120.840035][ T6545] ? __alloc_skb+0x5b7/0x710 [ 120.840049][ T6545] ? __alloc_skb+0x140/0x710 [ 120.840065][ T6545] __alloc_skb+0x140/0x710 [ 120.840078][ T6545] ? __alloc_skb+0x5b7/0x710 [ 120.840091][ T6545] ? __pfx___alloc_skb+0x10/0x10 [ 120.840109][ T6545] netlink_alloc_large_skb+0x69/0x150 [ 120.840123][ T6545] netlink_sendmsg+0x680/0xda0 [ 120.840138][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.840152][ T6545] ? selinux_socket_sendmsg+0x198/0x2f0 [ 120.840172][ T6545] ____sys_sendmsg+0xa4d/0xbe0 [ 120.840182][ T6545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.840195][ T6545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.840212][ T6545] ___sys_sendmsg+0x190/0x1e0 [ 120.840224][ T6545] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.840235][ T6545] ? __lock_acquire+0x49f/0x1a40 [ 120.840250][ T6545] ? get_pid_task+0x106/0x250 [ 120.840275][ T6545] __sys_sendmsg+0x160/0x210 [ 120.840290][ T6545] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.840313][ T6545] do_syscall_64+0x115/0x870 [ 120.840326][ T6545] ? clear_bhb_loop+0x70/0xc0 [ 120.840339][ T6545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.840351][ T6545] RIP: 0033:0x7f2d1ef9e0d9 [ 120.840361][ T6545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.840372][ T6545] RSP: 002b:00007f2d1ff26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.840383][ T6545] RAX: ffffffffffffffda RBX: 00007f2d1f225fa0 RCX: 00007f2d1ef9e0d9 [ 120.840390][ T6545] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 120.840396][ T6545] RBP: 00007f2d1ff26090 R08: 0000000000000000 R09: 0000000000000000 [ 120.840403][ T6545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.840409][ T6545] R13: 00007f2d1f226038 R14: 00007f2d1f225fa0 R15: 00007fffc31c13e8 [ 120.840422][ T6545] [ 121.139630][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 121.162261][ T6554] f2fs: Unknown parameter 'discard' [ 121.170611][ T30] audit: type=1400 audit(1786931452.269:770): avc: denied { ioctl } for pid=6553 comm="syz.2.240" path="socket:[13166]" dev="sockfs" ino=13166 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.195702][ T30] audit: type=1400 audit(1786931452.269:771): avc: denied { watch } for pid=6553 comm="syz.2.240" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.352472][ T30] audit: type=1400 audit(1786931452.479:772): avc: denied { mount } for pid=6559 comm="syz.2.244" name="/" dev="rpc_pipefs" ino=13395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 121.441111][ T6564] cramfs: Unknown parameter 'addr' [ 122.195665][ T30] audit: type=1400 audit(1786931453.299:773): avc: denied { read } for pid=6562 comm="syz.1.245" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.277783][ T30] audit: type=1400 audit(1786931453.299:774): avc: denied { open } for pid=6562 comm="syz.1.245" path="/55/config" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.351920][ T30] audit: type=1400 audit(1786931453.299:775): avc: denied { append } for pid=6562 comm="syz.1.245" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 122.568561][ T30] audit: type=1400 audit(1786931453.309:776): avc: denied { ioctl } for pid=6562 comm="syz.1.245" path="/55/config" dev="configfs" ino=1111 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.824360][ T6586] o2cb: This node has not been configured. [ 122.830541][ T6586] o2cb: Cluster check failed. Fix errors before retrying. [ 122.837821][ T6586] (syz.4.252,6586,0):user_dlm_register:674 ERROR: status = -22 [ 122.845635][ T6586] (syz.4.252,6586,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 122.942885][ T30] audit: type=1400 audit(1786931453.309:777): avc: denied { read write } for pid=6559 comm="syz.2.244" dev="sockfs" ino=13318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.102839][ T30] audit: type=1400 audit(1786931453.629:778): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 123.168831][ T6598] binder: 6597:6598 ioctl c00c6211 0 returned -14 [ 125.191866][ T6623] 9p: Bad value for 'wfdno' [ 126.171569][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 126.171580][ T30] audit: type=1400 audit(1786931457.299:794): avc: denied { bind } for pid=6636 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.354295][ T5715] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.514202][ T5715] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 126.565554][ T5715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.612674][ T5715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.675083][ T5715] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.731757][ T5715] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.812622][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.826838][ T6648] 9pnet_fd: Insufficient options for proto=fd [ 126.834662][ T30] audit: type=1400 audit(1786931457.959:795): avc: denied { map } for pid=6647 comm="syz.1.277" path="/65/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 126.869178][ T6651] No source specified [ 126.900439][ T6651] comedi: valid board names for 8255 driver are: [ 126.944935][ T6651] 8255 [ 126.962018][ T30] audit: type=1400 audit(1786931457.959:796): avc: denied { execute } for pid=6647 comm="syz.1.277" path="/65/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 126.995768][ T6651] comedi: valid board names for vmk80xx driver are: [ 127.034185][ T6651] vmk80xx [ 127.054659][ T6651] comedi: valid board names for usbduxsigma driver are: [ 127.107686][ T6651] usbduxsigma [ 127.736691][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.743445][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.751811][ T30] audit: type=1400 audit(1786931458.009:797): avc: denied { map } for pid=6647 comm="syz.1.277" path="socket:[13715]" dev="sockfs" ino=13715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.785355][ T6651] comedi: valid board names for usbduxfast driver are: [ 127.807523][ T6651] usbduxfast [ 127.823215][ T6651] comedi: valid board names for usbdux driver are: [ 127.866851][ T6651] usbdux [ 127.876391][ T30] audit: type=1400 audit(1786931458.009:798): avc: denied { read } for pid=6647 comm="syz.1.277" path="socket:[13715]" dev="sockfs" ino=13715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.905204][ T6651] comedi: valid board names for ni6501 driver are: [ 127.934854][ T6651] ni6501 [ 127.953068][ T6651] comedi: valid board names for dt9812 driver are: [ 127.983800][ T6651] dt9812 [ 127.994108][ T6651] comedi: valid board names for ni_labpc_cs driver are: [ 128.007848][ T30] audit: type=1400 audit(1786931458.239:799): avc: denied { read } for pid=6653 comm="syz.1.278" lport=45231 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.036080][ T6651] ni_labpc_cs [ 128.048009][ T6651] comedi: valid board names for ni_daq_700 driver are: [ 128.085050][ T6651] ni_daq_700 [ 128.092824][ T6651] comedi: valid board names for labpc_pci driver are: [ 128.118345][ T6651] labpc_pci [ 128.124023][ T30] audit: type=1400 audit(1786931459.259:800): avc: denied { write } for pid=6661 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.155408][ T6651] comedi: valid board names for adl_pci9118 driver are: [ 128.176945][ T6651] pci9118dg [ 128.184898][ T6651] pci9118hg [ 128.194527][ T6651] pci9118hr [ 128.202567][ T30] audit: type=1400 audit(1786931459.319:801): avc: denied { write } for pid=6661 comm="syz.0.281" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.227304][ T6651] comedi: valid board names for 8255_pci driver are: [ 128.253720][ T6651] 8255_pci [ 128.259791][ T6651] comedi: valid board names for s526 driver are: [ 128.288136][ T6651] s526 [ 128.297983][ T6651] comedi: valid board names for multiq3 driver are: [ 129.028276][ T6651] multiq3 [ 129.037822][ T6651] comedi: valid board names for pcmuio driver are: [ 129.057968][ T6651] pcmuio48 [ 129.068793][ T6651] pcmuio96 [ 129.078525][ T6651] comedi: valid board names for pcmmio driver are: [ 129.105538][ T5715] usb 3-1: USB disconnect, device number 11 [ 129.129409][ T6651] pcmmio [ 129.148130][ T6651] comedi: valid board names for pcmda12 driver are: [ 129.206743][ T6651] pcmda12 [ 129.783374][ T6670] FAULT_INJECTION: forcing a failure. [ 129.783374][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 129.798306][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.2.284 Not tainted syzkaller #0 PREEMPT(full) [ 129.798321][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 129.798327][ T6670] Call Trace: [ 129.798331][ T6670] [ 129.798335][ T6670] dump_stack_lvl+0x100/0x190 [ 129.798352][ T6670] should_fail_ex.cold+0x5/0xa [ 129.798367][ T6670] should_failslab+0xc2/0x120 [ 129.798382][ T6670] __kmalloc_noprof+0xfc/0x820 [ 129.798396][ T6670] ? tomoyo_encode2+0xfb/0x3c0 [ 129.798410][ T6670] tomoyo_encode2+0xfb/0x3c0 [ 129.798422][ T6670] tomoyo_encode+0x29/0x50 [ 129.798432][ T6670] tomoyo_realpath_from_path+0x18c/0x690 [ 129.798446][ T6670] tomoyo_path_number_perm+0x23c/0x580 [ 129.798462][ T6670] ? tomoyo_path_number_perm+0x22e/0x580 [ 129.798479][ T6670] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.798508][ T6670] ? find_held_lock+0x2b/0x80 [ 129.798524][ T6670] ? __fget_files+0x215/0x3d0 [ 129.798536][ T6670] ? hook_file_ioctl_common+0x140/0x440 [ 129.798548][ T6670] ? __fget_files+0x215/0x3d0 [ 129.798562][ T6670] ? __fget_files+0x21f/0x3d0 [ 129.798576][ T6670] security_file_ioctl+0xd3/0x230 [ 129.798594][ T6670] __x64_sys_ioctl+0xb7/0x210 [ 129.798612][ T6670] do_syscall_64+0x115/0x870 [ 129.798625][ T6670] ? clear_bhb_loop+0x70/0xc0 [ 129.798639][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.798651][ T6670] RIP: 0033:0x7f2d1ef9e0d9 [ 129.798660][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.798671][ T6670] RSP: 002b:00007f2d1ff26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.798682][ T6670] RAX: ffffffffffffffda RBX: 00007f2d1f225fa0 RCX: 00007f2d1ef9e0d9 [ 129.798689][ T6670] RDX: 0000200000000540 RSI: 0000000000003b80 RDI: 0000000000000003 [ 129.798695][ T6670] RBP: 00007f2d1ff26090 R08: 0000000000000000 R09: 0000000000000000 [ 129.798701][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.798708][ T6670] R13: 00007f2d1f226038 R14: 00007f2d1f225fa0 R15: 00007fffc31c13e8 [ 129.798721][ T6670] [ 129.798731][ T6670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 130.063773][ T30] audit: type=1400 audit(1786931461.199:802): avc: denied { mount } for pid=6668 comm="syz.3.285" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 130.089368][ T6651] comedi: valid board names for pcmad driver are: [ 130.140748][ T6651] pcmad12 [ 130.158204][ T6651] pcmad16 [ 130.178467][ T6651] comedi: valid board names for ni_labpc driver are: [ 130.213296][ T6651] lab-pc-1200 [ 130.216778][ T30] audit: type=1400 audit(1786931461.239:803): avc: denied { connect } for pid=6668 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.253436][ T6651] lab-pc-1200ai [ 130.273002][ T6651] lab-pc+ [ 130.308030][ T6651] comedi: valid board names for atmio16 driver are: [ 130.353786][ T6651] atmio16 [ 130.371932][ T6651] atmio16d [ 130.387906][ T6651] comedi: valid board names for ni_at_ao driver are: [ 130.420312][ T6651] at-ao-6 [ 130.436486][ T6651] at-ao-10 [ 130.449756][ T6651] comedi: valid board names for ni_at_a2150 driver are: [ 130.479438][ T6651] ni_at_a2150 [ 130.499777][ T6651] comedi: valid board names for adq12b driver are: [ 130.542722][ T6651] adq12b [ 130.551905][ T6651] comedi: valid board names for mpc624 driver are: [ 130.573842][ T5715] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.590617][ T6651] mpc624 [ 130.600379][ T6651] comedi: valid board names for c6xdigio driver are: [ 130.621250][ T6651] c6xdigio [ 130.633942][ T6651] comedi: valid board names for aio_iiro_16 driver are: [ 130.655602][ T6651] aio_iiro_16 [ 130.665150][ T6651] comedi: valid board names for aio_aio12_8 driver are: [ 130.693931][ T6651] aio_aio12_8 [ 130.702361][ T6651] aio_ai12_8 [ 130.708408][ T6651] aio_ao12_4 [ 130.719484][ T6651] comedi: valid board names for fl512 driver are: [ 130.740824][ T6651] fl512 [ 130.746353][ T5715] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 130.759437][ T6651] comedi: valid board names for dmm32at driver are: [ 130.780444][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.790806][ T6651] dmm32at [ 130.799773][ T6651] comedi: valid board names for dt282x driver are: [ 130.806398][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.816384][ T5715] usb 4-1: Product: syz [ 130.834766][ T5715] usb 4-1: Manufacturer: syz [ 130.845757][ T6651] dt2821 [ 130.849036][ T6651] dt2821-f [ 130.852175][ T5715] usb 4-1: SerialNumber: syz [ 130.864219][ T6651] dt2821-g [ 130.875048][ T5715] usb 4-1: config 0 descriptor?? [ 130.892944][ T6651] dt2823 [ 130.901896][ T6651] dt2824-pgh [ 130.912278][ T5715] hub 4-1:0.0: bad descriptor, ignoring hub [ 130.920980][ T6651] dt2824-pgl [ 130.935590][ T5715] hub 4-1:0.0: probe with driver hub failed with error -5 [ 130.942746][ T6651] dt2825 [ 130.955795][ T6651] dt2827 [ 130.963556][ T6651] dt2828 [ 130.974262][ T6651] dt2829 [ 130.992013][ T6651] dt21-ez [ 130.996197][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 131.008436][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.026372][ T6651] dt23-ez [ 131.033838][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 131.046795][ T6651] dt24-ez [ 131.067165][ T6651] dt24-ez-pgl [ 131.082348][ T6651] comedi: valid board names for dt2817 driver are: [ 131.096097][ T9] usb 2-1: config 8 has an invalid interface number: 94 but max is 0 [ 131.108269][ T6651] dt2817 [ 131.113465][ T5715] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 131.123308][ T9] usb 2-1: config 8 has no interface number 0 [ 131.130854][ T6651] comedi: valid board names for dt2815 driver are: [ 131.142705][ T9] usb 2-1: config 8 interface 94 has no altsetting 0 [ 131.155255][ T6651] dt2815 [ 131.159589][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.171728][ T6651] comedi: valid board names for dt2814 driver are: [ 131.186227][ T9] usb 2-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 131.196197][ T6651] dt2814 [ 131.201438][ T5715] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 131.223018][ T6651] comedi: valid board names for dt2811 driver are: [ 131.231252][ T9] usb 2-1: Product: syz [ 131.248314][ T9] usb 2-1: Manufacturer: syz [ 131.258227][ T6651] dt2811-pgh [ 131.263162][ T5715] usb 4-1: media controller created [ 131.270935][ T6651] dt2811-pgl [ 131.285587][ T9] usb 2-1: SerialNumber: syz [ 131.304474][ T6651] comedi: valid board names for dt2801 driver are: [ 131.316033][ T6677] dib0700: tx buffer length is larger than 4. Not supported. [ 131.344090][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.359689][ T6651] dt2801 [ 131.375269][ T6651] comedi: valid board names for das6402 driver are: [ 131.415960][ T6651] das6402-12 [ 131.436186][ T6651] das6402-16 [ 131.454373][ T6651] comedi: valid board names for das1800 driver are: [ 131.498247][ T6651] das-1701st [ 131.512648][ T5715] DVB: Unable to find symbol dib7000p_attach() [ 131.521213][ T6651] das-1701st-da [ 131.531409][ T6651] das-1702st [ 131.540380][ T5715] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 131.549132][ T6702] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 131.558460][ T6651] das-1702st-da [ 131.565814][ T6651] das-1702hr [ 131.577896][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 131.577905][ T30] audit: type=1400 audit(1786931462.709:806): avc: denied { mounton } for pid=6705 comm="syz.2.293" path="/proc/197/task" dev="proc" ino=13901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 131.607113][ T6651] das-1702hr-da [ 131.624885][ T6651] das-1701ao [ 131.637331][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 131.647728][ T6651] das-1702ao [ 131.657856][ T6651] das-1801st [ 131.668506][ T6651] das-1801st-da [ 131.679311][ T6651] das-1802st [ 131.688936][ T6651] das-1802st-da [ 131.693676][ T6702] veth3: entered allmulticast mode [ 131.701969][ T6651] das-1802hr [ 131.705404][ T5715] rc_core: IR keymap rc-dib0700-rc5 not found [ 131.719081][ T6651] das-1802hr-da [ 131.725356][ T5715] Registered IR keymap rc-empty [ 131.732757][ T30] audit: type=1400 audit(1786931462.759:807): avc: denied { create } for pid=6701 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.754873][ T9] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 131.763830][ T6702] batman_adv: batadv0: Adding interface: veth3 [ 131.770122][ T6651] das-1801hc [ 131.779669][ T5715] dvb-usb: could not initialize remote control. [ 131.785964][ T6651] das-1802hc [ 131.789742][ T6702] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.818707][ T6651] das-1801ao [ 131.822034][ T5715] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 131.835419][ T6651] das-1802ao [ 131.843979][ T6651] comedi: valid board names for das800 driver are: [ 131.860634][ T30] audit: type=1400 audit(1786931462.769:808): avc: denied { setopt } for pid=6701 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.879989][ T6651] das-800 [ 131.885106][ T5715] usb 4-1: USB disconnect, device number 10 [ 131.891050][ T6651] cio-das800 [ 131.908667][ T6651] das-801 [ 131.936696][ T6651] cio-das801 [ 131.949961][ T6702] batman_adv: batadv0: Interface activated: veth3 [ 131.957029][ T9] gspca_sn9c2028: read1 error -32 [ 131.968554][ T6651] das-802 [ 131.983205][ T9] gspca_sn9c2028: read1 error -32 [ 132.001832][ T5715] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 132.012888][ T6651] cio-das802 [ 132.017995][ T30] audit: type=1400 audit(1786931462.769:809): avc: denied { getopt } for pid=6701 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.050637][ T6651] cio-das802/16 [ 132.081345][ T6651] comedi: valid board names for isa-das08 driver are: [ 132.122720][ T6651] isa-das08 [ 132.144168][ T6651] das08-pgm [ 132.156588][ T6651] das08-pgh [ 132.170586][ T6651] das08-pgl [ 132.182748][ T6651] das08-aoh [ 132.198007][ T6651] das08-aol [ 132.208352][ T6651] das08-aom [ 132.220130][ T6651] das08/jr-ao [ 132.229521][ T6651] das08jr-16-ao [ 132.239739][ T6651] pc104-das08 [ 132.252733][ T6651] das08jr/16 [ 132.263600][ T6651] comedi: valid board names for das16m1 driver are: [ 132.289528][ T5789] usb 2-1: USB disconnect, device number 6 [ 132.308267][ T6651] das16m1 [ 132.319121][ T6651] comedi: valid board names for dac02 driver are: [ 132.341351][ T6651] dac02 [ 132.355352][ T6651] comedi: valid board names for rti802 driver are: [ 132.370555][ T6651] rti802 [ 132.373736][ T6651] comedi: valid board names for rti800 driver are: [ 132.386376][ T6651] rti800 [ 132.393362][ T6651] rti815 [ 132.402671][ T6651] comedi: valid board names for pcm3724 driver are: [ 132.410489][ T5715] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 132.432619][ T6651] pcm3724 [ 132.442968][ T6651] comedi: valid board names for pcl818 driver are: [ 132.461454][ T6651] pcl818l [ 132.467874][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 132.478074][ T6651] pcl818h [ 132.484550][ T6651] pcl818hd [ 132.487718][ T6651] pcl818hg [ 132.490833][ T6651] pcl818 [ 132.496089][ T6651] pcl718 [ 132.499075][ T6651] pcm3718 [ 132.502078][ T6651] comedi: valid board names for pcl816 driver are: [ 132.508804][ T6651] pcl816 [ 132.511785][ T6651] pcl814b [ 132.514931][ T6651] comedi: valid board names for pcl812 driver are: [ 132.521409][ T6651] pcl812 [ 132.524788][ T6651] pcl812pg [ 132.651092][ T6651] acl8112pg [ 132.656360][ T5715] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 132.672931][ T6651] acl8112dg [ 132.680661][ T6651] acl8112hg [ 132.686159][ T5715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.699288][ T6651] a821pgl [ 132.705639][ T6651] a821pglnda [ 132.711488][ T30] audit: type=1400 audit(1786931463.839:810): avc: denied { create } for pid=6718 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.731377][ T5715] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.741147][ T6651] a821pgh [ 132.746041][ T6651] a822pgl [ 132.749099][ T6651] a822pgh [ 132.752124][ T5715] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.767175][ T6651] a823pgl [ 132.773163][ T6651] a823pgh [ 132.780185][ T6651] pcl813 [ 132.785311][ T6651] pcl813b [ 132.788371][ T5715] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.801214][ T30] audit: type=1400 audit(1786931463.839:811): avc: denied { read } for pid=6718 comm="syz.0.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.821072][ T6651] acl8113 [ 132.824201][ T6651] iso813 [ 132.827159][ T6651] acl8216 [ 132.830186][ T6651] a826pg [ 132.833174][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.841375][ T6651] comedi: valid board names for pcl730 driver are: [ 132.865119][ T6651] pcl730 [ 132.881748][ T6651] iso730 [ 132.894418][ T6651] acl7130 [ 132.902585][ T6651] pcm3730 [ 132.909766][ T30] audit: type=1400 audit(1786931464.049:812): avc: denied { remount } for pid=6722 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 132.930933][ T6651] pcl725 [ 132.939097][ T6651] p8r8dio [ 133.313699][ T187] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 133.455752][ T6651] acl7225b [ 133.799810][ T6651] p16r16dio [ 133.816387][ T6651] pcl733 [ 133.829568][ T6651] pcl734 [ 133.839278][ T6651] opmm-1616-xt [ 133.856164][ T6651] pearl-mm-p [ 133.873675][ T6651] ir104-pbf [ 133.889687][ T6651] comedi: valid board names for pcl726 driver are: [ 133.913141][ T6651] pcl726 [ 133.922733][ T6651] pcl727 [ 133.933157][ T6651] pcl728 [ 133.941682][ T6651] acl6126 [ 133.949292][ T6651] acl6128 [ 133.957353][ T6651] comedi: valid board names for pcl724 driver are: [ 133.973786][ T6651] pcl724 [ 133.979910][ T6651] pcl722 [ 133.986597][ T6651] pcl731 [ 133.998846][ T6651] acl7122 [ 134.008412][ T6651] acl7124 [ 134.026109][ T6651] pet48dio [ 134.041853][ T6651] pcmio48 [ 134.053912][ T6651] onyx-mm-dio [ 134.063205][ T6651] comedi: valid board names for pcl711 driver are: [ 134.089833][ T6651] pcl711 [ 134.093026][ T6651] pcl711b [ 134.097028][ T6651] acl8112hg [ 134.100373][ T6651] acl8112dg [ 134.104372][ T6651] comedi: valid board names for amplc_pc263 driver are: [ 134.111453][ T6651] pc263 [ 134.114911][ T6651] comedi: valid board names for amplc_pc236 driver are: [ 134.122203][ T6651] pc36at [ 134.127829][ T6651] comedi: valid board names for amplc_dio200 driver are: [ 134.135104][ T6651] pc212e [ 134.138240][ T6651] pc214e [ 134.141325][ T6651] pc215e [ 134.144861][ T6651] pc218e [ 134.148294][ T6651] pc272e [ 134.151683][ T6651] comedi: valid board names for comedi_parport driver are: [ 134.159548][ T6651] comedi_parport [ 134.163483][ T6651] comedi: valid board names for comedi_test driver are: [ 134.170622][ T6651] comedi_test [ 134.175746][ T6651] comedi: valid board names for comedi_bond driver are: [ 134.182891][ T6651] comedi_bond [ 134.303581][ T187] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 134.465532][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 134.492123][ T187] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 134.513527][ T5598] Bluetooth: hci5: command 0x1003 tx timeout [ 134.520824][ T5594] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 134.575498][ T187] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 134.590163][ T187] usb 1-1: config 0 has no interface number 0 [ 134.605075][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.613727][ T6745] tipc: Started in network mode [ 134.619405][ T187] usb 1-1: Product: syz [ 134.624029][ T6745] tipc: Node identity c6f76655aee9, cluster identity 4711 [ 134.631150][ T187] usb 1-1: Manufacturer: syz [ 134.636047][ T6745] tipc: Enabled bearer , priority 0 [ 134.642629][ T187] usb 1-1: SerialNumber: syz [ 134.648942][ T187] usb 1-1: config 0 descriptor?? [ 134.657900][ T6745] syzkaller0: entered promiscuous mode [ 134.663630][ T6745] syzkaller0: entered allmulticast mode [ 134.670264][ T187] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 134.686452][ T6745] tipc: Resetting bearer [ 134.696661][ T6744] tipc: Resetting bearer [ 134.708361][ T6744] tipc: Disabling bearer [ 134.813374][ T5715] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.884478][ T187] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 134.899111][ T187] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 134.973436][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 134.978913][ T5715] usb 5-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice= 0.40 [ 134.989011][ T5715] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 135.000064][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.010739][ T5715] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.022752][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.031050][ T5715] usb 5-1: Product: syz [ 135.035412][ T5715] usb 5-1: Manufacturer: syz [ 135.040012][ T5715] usb 5-1: SerialNumber: syz [ 135.105060][ T187] usb 4-1: USB disconnect, device number 11 [ 135.163470][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 135.177645][ T6749] FAULT_INJECTION: forcing a failure. [ 135.177645][ T6749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.202068][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 135.217265][ T6749] CPU: 0 UID: 0 PID: 6749 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(full) [ 135.217280][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.217286][ T6749] Call Trace: [ 135.217293][ T6749] [ 135.217297][ T6749] dump_stack_lvl+0x100/0x190 [ 135.217314][ T6749] should_fail_ex.cold+0x5/0xa [ 135.217332][ T6749] strncpy_from_user+0x3b/0x2d0 [ 135.217350][ T6749] do_getname+0x78/0x390 [ 135.217367][ T6749] __x64_sys_statx+0x1a3/0x1e0 [ 135.217385][ T6749] do_syscall_64+0x115/0x870 [ 135.217398][ T6749] ? clear_bhb_loop+0x70/0xc0 [ 135.217412][ T6749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.217423][ T6749] RIP: 0033:0x7fa32e59e0d9 [ 135.217433][ T6749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.217444][ T6749] RSP: 002b:00007fa32f46b028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 135.217455][ T6749] RAX: ffffffffffffffda RBX: 00007fa32e825fa0 RCX: 00007fa32e59e0d9 [ 135.217461][ T6749] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 135.217468][ T6749] RBP: 00007fa32f46b090 R08: 0000000000000000 R09: 0000000000000000 [ 135.217474][ T6749] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 135.217481][ T6749] R13: 00007fa32e826038 R14: 00007fa32e825fa0 R15: 00007ffe3b7f0478 [ 135.217494][ T6749] [ 135.220119][ T9] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 135.375287][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.406185][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.455590][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.469699][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 135.480796][ T187] usb 1-1: USB disconnect, device number 12 [ 135.510564][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.525841][ T187] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 135.566367][ T187] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 135.635225][ T187] quatech2 1-1:0.51: device disconnected [ 135.656581][ T5715] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.676933][ T5715] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 135.688147][ T5715] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.697161][ T5715] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 135.707709][ T5715] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.746479][ T5715] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 135.758307][ T5715] usb 5-1: USB disconnect, device number 10 [ 135.766112][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.787461][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.811070][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.824398][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.841888][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.851432][ T9] usb 2-1: config 0 has no interface number 0 [ 135.858465][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 135.869756][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 135.882048][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.900244][ T9] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.914844][ T9] usb 2-1: config 0 interface 125 has no altsetting 2 [ 135.923181][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.933142][ T9] usb 2-1: Product: syz [ 135.937503][ T9] usb 2-1: Manufacturer: syz [ 135.942106][ T9] usb 2-1: SerialNumber: syz [ 135.951401][ T9] usb 2-1: config 0 descriptor?? [ 135.956494][ T187] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 135.966884][ T9] usb 2-1: selecting invalid altsetting 2 [ 135.972635][ T9] uss720 2-1:0.125: probe with driver uss720 failed with error -22 [ 136.113619][ T187] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.123670][ T187] usb 1-1: config index 0 descriptor too short (expected 65188, got 72) [ 136.165468][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.212527][ T187] usb 1-1: Product: syz [ 136.237171][ T187] usb 1-1: Manufacturer: syz [ 136.261938][ T187] usb 1-1: SerialNumber: syz [ 136.323384][ T5715] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 136.369442][ T6747] netlink: 'syz.1.305': attribute type 29 has an invalid length. [ 136.416227][ T30] audit: type=1400 audit(1786931467.549:813): avc: denied { firmware_load } for pid=5789 comm="kworker/0:7" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 136.447938][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 136.518540][ T5789] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 136.543532][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 136.552597][ T5715] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 136.636564][ T187] usb 2-1: USB disconnect, device number 7 [ 136.990356][ T5715] usb 4-1: config 0 interface 0 has no altsetting 0 [ 137.322413][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.435924][ T5715] usb 4-1: config 0 descriptor?? [ 138.323416][ T5789] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 138.330478][ T5789] ath9k_htc: Failed to initialize the device [ 150.814214][ C0] sched: DL replenish lagged too much [ 188.731687][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.503340][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 242.510277][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10/1:b..l [ 242.518226][ C0] rcu: (detected by 0, t=10502 jiffies, g=29701, q=937 ncpus=1) [ 242.525908][ C0] task:kworker/0:1 state:R running task stack:22120 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 242.539679][ C0] Workqueue: events_power_efficient gc_worker [ 242.545724][ C0] Call Trace: [ 242.548972][ C0] [ 242.551878][ C0] __schedule+0x125c/0x6730 [ 242.556356][ C0] ? irqentry_exit+0x24d/0xa00 [ 242.561099][ C0] ? __pfx___schedule+0x10/0x10 [ 242.565917][ C0] ? mark_held_locks+0x40/0x70 [ 242.570653][ C0] preempt_schedule_irq+0x50/0x90 [ 242.575645][ C0] irqentry_exit+0x205/0xa00 [ 242.580205][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.586156][ C0] RIP: 0010:gc_worker+0x2bf/0x1a10 [ 242.591238][ C0] Code: 00 00 48 c7 c7 c8 a3 42 91 e8 6d 65 0b f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 cb c9 2f f8 58 48 85 db 0f 85 32 13 00 00 1c cf 2f f8 8b 1d 56 ff 67 07 89 dd 31 ff 83 e5 01 89 ee e8 78 [ 242.610822][ C0] RSP: 0018:ffffc900000f7b48 EFLAGS: 00000293 [ 242.616856][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89dab231 [ 242.624794][ C0] RDX: ffff88801eed2540 RSI: ffffffff89dab240 RDI: ffff88801eed2540 [ 242.632733][ C0] RBP: ffff888024c00000 R08: 0000000000000007 R09: 0000000000000000 [ 242.640670][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 242.648617][ C0] R13: 0000000000000000 R14: 0000000000040000 R15: 0000000000001ba9 [ 242.656567][ C0] ? gc_worker+0x1091/0x1a10 [ 242.661134][ C0] ? gc_worker+0x10a0/0x1a10 [ 242.665694][ C0] ? gc_worker+0x10a0/0x1a10 [ 242.670256][ C0] ? __pfx_gc_worker+0x10/0x10 [ 242.674989][ C0] ? rcu_is_watching+0x12/0xc0 [ 242.679734][ C0] process_one_work+0xa23/0x1940 [ 242.684643][ C0] ? __pfx_process_one_work+0x10/0x10 [ 242.689987][ C0] ? __pfx_gc_worker+0x10/0x10 [ 242.694722][ C0] worker_thread+0x5ef/0xe50 [ 242.699283][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.704360][ C0] ? kthread+0x13a/0x450 [ 242.708570][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.713649][ C0] kthread+0x370/0x450 [ 242.717684][ C0] ? __pfx_kthread+0x10/0x10 [ 242.722242][ C0] ret_from_fork+0x72b/0xd50 [ 242.726812][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 242.731892][ C0] ? __switch_to+0x800/0x10f0 [ 242.736535][ C0] ? __pfx_kthread+0x10/0x10 [ 242.741092][ C0] ret_from_fork_asm+0x1a/0x30 [ 242.745832][ C0]