last executing test programs: 8.975766275s ago: executing program 0 (id=2905): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) listen(r6, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810) connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 7.25341163s ago: executing program 0 (id=2914): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf73, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0xdf, &(0x7f0000000180)=""/223, 0x41000, 0x62, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x1, 0x8dd1cd55, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r11], &(0x7f0000000340), 0x10, 0xf}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf73, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0xdf, &(0x7f0000000180)=""/223, 0x41000, 0x62, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x1, 0x8dd1cd55, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r11], &(0x7f0000000340), 0x10, 0xf}, 0x94) r12 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r13) (async) close(r13) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r14, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) write$FUSE_CREATE_OPEN(r12, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r12, r12, &(0x7f0000000080), 0x7f03) (async) sendfile(r12, r12, &(0x7f0000000080), 0x7f03) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8800) (async) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x8800) 6.446816927s ago: executing program 2 (id=2916): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = inotify_add_watch(r0, &(0x7f0000000100)='./file0/file0\x00', 0x300) inotify_rm_watch(r0, r2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xa, &(0x7f0000000600)=@string={0xa, 0x3, "6a5477196df678ea"}}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="7f7215b6d68e34d537"], 0x32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 6.280550976s ago: executing program 0 (id=2917): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100)) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'rose0\x00', @broadcast}) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2b, 0xf9, 0xff, 0x5, 0x20, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x35aedd66}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x10, 0x80, 0x7, 0xca3, {{0x22, 0x4, 0x3, 0x38, 0x88, 0x67, 0x0, 0xa1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x2a, 0x1, [{0x0, 0x9, "afdfd8d58a0d6d"}, {0x7, 0x10, "cb314f594a0d2592695a59718986"}, {0x7, 0x2}, {0x1, 0x9, "06eaf63a129959"}]}, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x3, 0xb, "283ff9de7f42785459"}, {0x2, 0x4, "8fed"}, {0x1, 0x10, "4e4bdcf4b57aa137f1cc252577e4"}, {0x6, 0xd, "be8239f53d158f760c05d2"}, {0x7, 0x9, "3b2c2365d9d770"}]}, @generic={0x88, 0xe, "b216db40fd457b8107a0dc96"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x190, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20004000}, 0x480c0) getsockopt$inet_buf(r4, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) 6.277080094s ago: executing program 1 (id=2918): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'rose0\x00', @broadcast}) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2b, 0xf9, 0xff, 0x5, 0x20, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x35aedd66}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x2, 0x1, 0x54, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x8, 0x40, 0xb5, 0x1ff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x10, 0x80, 0x7, 0xca3, {{0x18, 0x4, 0x3, 0x38, 0x60, 0x67, 0x0, 0xa1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x3, 0xb, "283ff9de7f42785459"}, {0x2, 0x4, "8fed"}, {0x1, 0x10, "4e4bdcf4b57aa137f1cc252577e4"}, {0x6, 0xd, "be8239f53d158f760c05d2"}, {0x7, 0x9, "3b2c2365d9d770"}]}, @generic={0x88, 0xe, "b216db40fd457b8107a0dc96"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1b8, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20004000}, 0x480c0) getsockopt$inet_buf(r4, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) 5.748383333s ago: executing program 4 (id=2919): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x2, &(0x7f0000001f00)=0x10, 0xd) 5.465033338s ago: executing program 4 (id=2920): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x80000001) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000520001010000100000000013080094cc"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010829bd7000ffffffff000000", @ANYRES32=0x0, @ANYBLOB="2880cb19510c805473c8060000000000", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) 5.434858017s ago: executing program 2 (id=2921): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) msgget(0x1, 0x710) msgget(0x1, 0x240) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70fd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) 5.228409021s ago: executing program 2 (id=2923): io_uring_setup(0x208, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc2}) 4.827157778s ago: executing program 1 (id=2924): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) listen(r6, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810) connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 4.756390696s ago: executing program 3 (id=2925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x25, 0x0, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20048004) 4.750710493s ago: executing program 0 (id=2926): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x80140, 0x80) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r4, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x1b69, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x9, 0x6, 0x0, 0x0, 0x4, 0x1}) 4.750009788s ago: executing program 2 (id=2927): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0480000008003950323030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) 4.714530218s ago: executing program 2 (id=2928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380)) syslog(0x3, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x24000840) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x81}}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="8100bbbbbbbb0000000000000806000108"], 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000440)="b9800000c00f3235000100000f30b8010000000f01d966b858008ed0b9fa090000b8ba76455aba21f97c090f3067dbe0440f20c03501000000440f22c0d0845809000000b9800000c00f3235004000000f30c744240023000000c7442402ceb1e0cfc7442406000000000f011c24c4e36969e3c9", 0x74}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)={0x2024, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x1ff4, 0xfc, 0x0, 0x1, [@nested={0x1ff0, 0x8, 0x0, 0x1, [@nested={0x1fe9, 0xab, 0x0, 0x1, [@generic="3b15277f3e1336b0401dc1c28edf5d148a103aaea225343b51003aeb8cc17d334fb46f4f55ce797d6c1b2914471b845f140402ff02f41ec98511d246bdf160f30ca6d0179227b4f6b6510ee7e1436f8ab8ea578cc3f4bad3f28a6d33a666d64a2a2a29c74c48e6f108d711f6f2a33fdd8994872b851582191b479756a621088c1b21b3cef496e5a12cffe355eb483199b62fd6cf87513c582043a1ba43291794eef2cdadad22fc5035ab8043c14b5c630102a07ce565e33362cdbc5a2accf2dae93ed1e42ffff6814eca0a36a76ed815f8c9bd607b95b7ae6cd498d2d7e7096ef3", @nested={0x1f01, 0xdb, 0x0, 0x1, [@generic="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", @nested={0xefd, 0x6d, 0x0, 0x1, [@generic="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"]}]}]}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="97f09726"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x2024}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r9, {r1}}, './file0\x00'}) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000bc0)={&(0x7f0000000b40)=[{0x1, 0x2600, 0xb0, &(0x7f00000004c0)="b7dca170ef03807e99b37e27798000cd8949fc5422c4d44db7be79c8288146c8de00a316698f11f1062988257bbcf71cfe471160833025a186de34b60652f61d3456a1044dc23a0017aab78eb5833d48f10020c85f7f72da49e811337451cbda2f6d11fff65a13f2708971f0b6f28734787db85e4f24886b4f42cef68ccee6e3a5927301acb79bbe0b6d8626661d6c979444613891f3fc37d7fd2c36526576778aa15cc1c5cd84ec27590f220127e4d2"}, {0x1000, 0xd401, 0x7b, &(0x7f0000000580)="6a629ad848b2b1684ab3417c93d27c65cbafe37415bddd129f56e589b593b9f2354581cbb4d73ed7e23e593553f39714412cd47cec918b0ddb251521703b817ec1d68304c48a554358a11c6d55151a43b766ae6206a169005891942fe01dff6c41a35bf92b91ac1aaaa051bd580cba81a13f18d3d69156f6d55e8e"}, {0x6, 0x2400, 0x22, &(0x7f0000000400)="016a65d3494faf0ba2c6f56d52e78394441b231b38819cded1ed5b060c6e1e4fa2bc"}, {0x8, 0x801, 0xa6, &(0x7f0000000600)="8e1245cd376711eaae13f7553885994da83678e5c6a33569c2b66a22497184b02af7c2f62fcb0c1c29fc4f981d0e522a46339899f32d0cb30d4b9c146d268d1ae11d0c09b6b9f381d3c31e4bbb79a50b638ded7144f76a77c0ec4ce53e9f8b8b1bd3a459c88c580f0d6679c7956f97c05c8aa07b99edb8d987f7bbdcbb95274c133c77632c0b73acd11cdefd3de9eb0bfa816eda6dc5ffde349720d0226726f3e6002de8c0ed"}, {0xf4, 0x2a02, 0xdd, &(0x7f00000006c0)="57a18bd8bb13393d3fd8420dd277ce7d4b7d0aa381fce318f7b94b14e7ff5344c63eb38b08c97733230dbd4c538a99fdd42d14226209c15a8ee4770453807fd2d3e232d5ffd34b081a1437d4dbffe69162e18e29ef85c51d9527f604f77500e519bf838061f7f91786359ce5d8344867dfc31d674c681f82fea35e75cc517b5d77b3b282db67e9b9db9af1f12f876ed345b6a0287a90dd1f11ee6a5863adf40a98079a65ea9e7a49cfed3777ed420065591008fafe68ea8d80f4e0c3fcf355cbcfe973b8cfef6e382c242bdcf5cb33cd13f2c021cfdda5f83396727380"}, {0x0, 0x5e10, 0xfc, &(0x7f0000000940)="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"}, {0x9, 0x200, 0xe8, &(0x7f0000000a40)="005991c60527b583f032ef0a0e4331c3541d0d6619f910023cf7eca9e25b1cd3a4393a3bd6393f04dfdb3a6dcdc61e2a608f5a0e6b2bdff37bc9c7ad79cc245b26107256e3a1bcde1447929841f45c8296786a661fe74e56e6f9dd7edc8402e79360280f300ac8a7f437e635adf9565e3da9fe78119ca69fbccecb40db0f016a4c919f1c5fa8c585c9f05509034c12eec71b209cd32563e5491c0a50fa4eb80589f7f081ebf326ff37efc42ade3590ce60013650e17725a65919a96b318e09c6a574adb920674a4b72a915f210c95c67bd32c4855d7496b6d6bc3769efc7b8ef9e034f59795ab4a8"}, {0x1, 0x2010, 0xab, &(0x7f00000007c0)="0516c9c421d9f73b1ec7130d7ef7a639f124a3187cb2b7eacd4a95f495eeaf145dcb00da77ffd746dd2e35f69f0936d36a5f2a9d6cb8dad3b0260d4b7e4db66e781b42df651823d0db26eb3760e2eea9275924ca0c21624c9a001eadb867d563791b34ddfc6653852e376baf787526b1defcb1c41d41a1615cf489350a704a41338aecb166ffb81d2b696ac7c824744adce11dc3c97b851f2bf5e21dabb27104ee77aea98ae9cd557ff4b1"}], 0x8}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.561339301s ago: executing program 3 (id=2929): syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8}, &(0x7f0000001300), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) fcntl$getownex(r3, 0x10, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000180)={0x18, 0x0, {0xfffe, @local, 'batadv_slave_0\x00'}}, 0x1e) 3.611171221s ago: executing program 3 (id=2930): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r6, 0x1) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810) connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 3.311882967s ago: executing program 1 (id=2931): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x2, &(0x7f0000001f00)=0x10, 0xd) 3.072330791s ago: executing program 1 (id=2932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r1, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) socket$netlink(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') 2.934044663s ago: executing program 4 (id=2933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.786305641s ago: executing program 4 (id=2934): r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x33c2, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getegid() r4 = openat$full(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000080) getpgrp(r0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r2}, 0xc) setresuid(0x0, 0x0, 0x0) getgroups(0x5, &(0x7f00000007c0)=[0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0x0]) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 2.318726087s ago: executing program 3 (id=2935): r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x33c2, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getegid() r4 = openat$full(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000080) getpgrp(r0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r2}, 0xc) setresuid(0x0, 0x0, 0x0) getgroups(0x5, &(0x7f00000007c0)=[0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0x0]) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 2.008476703s ago: executing program 1 (id=2936): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100)) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'rose0\x00', @broadcast}) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2b, 0xf9, 0xff, 0x5, 0x20, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x35aedd66}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x10, 0x80, 0x7, 0xca3, {{0x22, 0x4, 0x3, 0x38, 0x88, 0x67, 0x0, 0xa1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x2a, 0x1, [{0x0, 0x9, "afdfd8d58a0d6d"}, {0x7, 0x10, "cb314f594a0d2592695a59718986"}, {0x7, 0x2}, {0x1, 0x9, "06eaf63a129959"}]}, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x3, 0xb, "283ff9de7f42785459"}, {0x2, 0x4, "8fed"}, {0x1, 0x10, "4e4bdcf4b57aa137f1cc252577e4"}, {0x6, 0xd, "be8239f53d158f760c05d2"}, {0x7, 0x9, "3b2c2365d9d770"}]}, @generic={0x88, 0xe, "b216db40fd457b8107a0dc96"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x190, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20004000}, 0x480c0) getsockopt$inet_buf(r4, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) 1.636385501s ago: executing program 0 (id=2937): r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = io_uring_setup(0x33c2, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getegid() r4 = openat$full(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000080) getpgrp(r0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r2}, 0xc) setresuid(0x0, 0x0, 0x0) getgroups(0x5, &(0x7f00000007c0)=[0xffffffffffffffff, 0xee00, 0x0, 0xee01, 0x0]) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 1.558092918s ago: executing program 4 (id=2938): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) 1.507727887s ago: executing program 2 (id=2939): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100)) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'rose0\x00', @broadcast}) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@local, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2b, 0xf9, 0xff, 0x5, 0x20, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x35aedd66}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x10, 0x80, 0x7, 0xca3, {{0x22, 0x4, 0x3, 0x38, 0x88, 0x67, 0x0, 0xa1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x2a, 0x1, [{0x0, 0x9, "afdfd8d58a0d6d"}, {0x7, 0x10, "cb314f594a0d2592695a59718986"}, {0x7, 0x2}, {0x1, 0x9, "06eaf63a129959"}]}, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x3, 0xb, "283ff9de7f42785459"}, {0x2, 0x4, "8fed"}, {0x1, 0x10, "4e4bdcf4b57aa137f1cc252577e4"}, {0x6, 0xd, "be8239f53d158f760c05d2"}, {0x7, 0x9, "3b2c2365d9d770"}]}, @generic={0x88, 0xe, "b216db40fd457b8107a0dc96"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x190, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20004000}, 0x480c0) getsockopt$inet_buf(r4, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) 1.11866274s ago: executing program 4 (id=2940): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x6, 0x8, 0x400, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c69c1acf8805944823a7f"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x437, 0xf000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}]}}}]}, 0x54}}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f47a3b6e947d8444ef8a51116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x29a042, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 587.723665ms ago: executing program 3 (id=2941): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00002727f3f0"], 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 583.740324ms ago: executing program 1 (id=2942): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x8, 0x7ffffdff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000007a0001fc00000000008bd766ec5bb432327c1a74fc43abcd2f43dc59d0ba6b746574059bb69582fd044bbee6147e56a8b305be4e736b7be888d1e818ec654114617529e8810b7c168d84af4a0cbc799ae9f3ea9ce0e53016990610193e90dc7f6b24907362659cd6634633d700"/123], 0x18}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r7, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10008004}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r9}) syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r9, 0x0, &(0x7f0000002240)="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", 0x1000, 0x8}) 303.00407ms ago: executing program 3 (id=2943): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) set_mempolicy(0x2, &(0x7f0000001f00)=0x10, 0xd) 0s ago: executing program 0 (id=2944): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x80800) (fail_nth: 2) kernel console output (not intermixed with test programs): 22.033640][ T5952] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 923.161750][T16473] FAULT_INJECTION: forcing a failure. [ 923.161750][T16473] name failslab, interval 1, probability 0, space 0, times 0 [ 923.176360][T16473] CPU: 1 UID: 0 PID: 16473 Comm: syz.2.2598 Not tainted syzkaller #0 PREEMPT(full) [ 923.176388][T16473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 923.176398][T16473] Call Trace: [ 923.176405][T16473] [ 923.176412][T16473] dump_stack_lvl+0x16c/0x1f0 [ 923.176440][T16473] should_fail_ex+0x512/0x640 [ 923.176462][T16473] ? __kmalloc_noprof+0xbf/0x510 [ 923.176483][T16473] ? __do_sys_futex_waitv+0x127/0x2c0 [ 923.176500][T16473] should_failslab+0xc2/0x120 [ 923.176522][T16473] __kmalloc_noprof+0xd2/0x510 [ 923.176539][T16473] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 923.176569][T16473] __do_sys_futex_waitv+0x127/0x2c0 [ 923.176587][T16473] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 923.176607][T16473] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 923.176636][T16473] do_syscall_64+0xcd/0x4e0 [ 923.176668][T16473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.176687][T16473] RIP: 0033:0x7fe1c218eec9 [ 923.176702][T16473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.176719][T16473] RSP: 002b:00007fe1c2f86038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 923.176737][T16473] RAX: ffffffffffffffda RBX: 00007fe1c23e5fa0 RCX: 00007fe1c218eec9 [ 923.176749][T16473] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 923.176759][T16473] RBP: 00007fe1c2f86090 R08: 0000000000000001 R09: 0000000000000000 [ 923.176770][T16473] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000001 [ 923.176781][T16473] R13: 00007fe1c23e6038 R14: 00007fe1c23e5fa0 R15: 00007fff1aa5afb8 [ 923.176805][T16473] [ 923.718939][T16477] FAULT_INJECTION: forcing a failure. [ 923.718939][T16477] name failslab, interval 1, probability 0, space 0, times 0 [ 923.737022][T16477] CPU: 1 UID: 0 PID: 16477 Comm: syz.2.2600 Not tainted syzkaller #0 PREEMPT(full) [ 923.737048][T16477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 923.737059][T16477] Call Trace: [ 923.737065][T16477] [ 923.737073][T16477] dump_stack_lvl+0x16c/0x1f0 [ 923.737101][T16477] should_fail_ex+0x512/0x640 [ 923.737125][T16477] ? fs_reclaim_acquire+0xae/0x150 [ 923.737151][T16477] ? tomoyo_encode2+0x100/0x3e0 [ 923.737176][T16477] should_failslab+0xc2/0x120 [ 923.737199][T16477] __kmalloc_noprof+0xd2/0x510 [ 923.737218][T16477] ? d_absolute_path+0x136/0x1a0 [ 923.737249][T16477] tomoyo_encode2+0x100/0x3e0 [ 923.737277][T16477] tomoyo_encode+0x29/0x50 [ 923.737303][T16477] tomoyo_realpath_from_path+0x18f/0x6e0 [ 923.737336][T16477] tomoyo_path_number_perm+0x245/0x580 [ 923.737359][T16477] ? tomoyo_path_number_perm+0x237/0x580 [ 923.737384][T16477] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 923.737408][T16477] ? find_held_lock+0x2b/0x80 [ 923.737453][T16477] ? find_held_lock+0x2b/0x80 [ 923.737475][T16477] ? hook_file_ioctl_common+0x145/0x410 [ 923.737506][T16477] ? __fget_files+0x20e/0x3c0 [ 923.737533][T16477] security_file_ioctl+0x9b/0x240 [ 923.737560][T16477] __x64_sys_ioctl+0xb7/0x210 [ 923.737590][T16477] do_syscall_64+0xcd/0x4e0 [ 923.737616][T16477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.737634][T16477] RIP: 0033:0x7fe1c218eec9 [ 923.737649][T16477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.737666][T16477] RSP: 002b:00007fe1c2f86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.737684][T16477] RAX: ffffffffffffffda RBX: 00007fe1c23e5fa0 RCX: 00007fe1c218eec9 [ 923.737696][T16477] RDX: 0000200000000140 RSI: 000000000000560e RDI: 0000000000000004 [ 923.737707][T16477] RBP: 00007fe1c2f86090 R08: 0000000000000000 R09: 0000000000000000 [ 923.737719][T16477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.737730][T16477] R13: 00007fe1c23e6038 R14: 00007fe1c23e5fa0 R15: 00007fff1aa5afb8 [ 923.737755][T16477] [ 923.737772][T16477] ERROR: Out of memory at tomoyo_realpath_from_path. [ 924.055083][ T5952] usb 2-1: USB disconnect, device number 47 [ 924.083971][T12597] usb 1-1: USB disconnect, device number 57 [ 924.290797][T16487] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2601'. [ 924.299906][T16488] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2601'. [ 924.621468][T16490] FAULT_INJECTION: forcing a failure. [ 924.621468][T16490] name failslab, interval 1, probability 0, space 0, times 0 [ 924.634428][T16490] CPU: 0 UID: 0 PID: 16490 Comm: syz.1.2603 Not tainted syzkaller #0 PREEMPT(full) [ 924.634452][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 924.634463][T16490] Call Trace: [ 924.634469][T16490] [ 924.634477][T16490] dump_stack_lvl+0x16c/0x1f0 [ 924.634504][T16490] should_fail_ex+0x512/0x640 [ 924.634527][T16490] ? fs_reclaim_acquire+0xae/0x150 [ 924.634552][T16490] ? tomoyo_encode2+0x100/0x3e0 [ 924.634577][T16490] should_failslab+0xc2/0x120 [ 924.634597][T16490] __kmalloc_noprof+0xd2/0x510 [ 924.634615][T16490] ? d_absolute_path+0x136/0x1a0 [ 924.634645][T16490] tomoyo_encode2+0x100/0x3e0 [ 924.634674][T16490] tomoyo_encode+0x29/0x50 [ 924.634698][T16490] tomoyo_realpath_from_path+0x18f/0x6e0 [ 924.634732][T16490] tomoyo_path_number_perm+0x245/0x580 [ 924.634754][T16490] ? tomoyo_path_number_perm+0x237/0x580 [ 924.634779][T16490] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 924.634804][T16490] ? find_held_lock+0x2b/0x80 [ 924.634850][T16490] ? find_held_lock+0x2b/0x80 [ 924.634870][T16490] ? hook_file_ioctl_common+0x145/0x410 [ 924.634895][T16490] ? __fget_files+0x20e/0x3c0 [ 924.634919][T16490] security_file_ioctl+0x9b/0x240 [ 924.634944][T16490] __x64_sys_ioctl+0xb7/0x210 [ 924.634973][T16490] do_syscall_64+0xcd/0x4e0 [ 924.634998][T16490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.635017][T16490] RIP: 0033:0x7fc6ee78eec9 [ 924.635032][T16490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.635049][T16490] RSP: 002b:00007fc6ef69f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 924.635067][T16490] RAX: ffffffffffffffda RBX: 00007fc6ee9e6090 RCX: 00007fc6ee78eec9 [ 924.635079][T16490] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000006 [ 924.635090][T16490] RBP: 00007fc6ef69f090 R08: 0000000000000000 R09: 0000000000000000 [ 924.635101][T16490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.635111][T16490] R13: 00007fc6ee9e6128 R14: 00007fc6ee9e6090 R15: 00007ffc762a9178 [ 924.635135][T16490] [ 924.635545][T16490] ERROR: Out of memory at tomoyo_realpath_from_path. [ 924.855282][T16490] hub 9-0:1.0: USB hub found [ 924.862049][T16490] hub 9-0:1.0: 1 port detected [ 926.625691][ T5952] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 927.865740][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 927.877085][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.887437][ T5952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 927.897890][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 927.911664][ T5952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 927.944969][ T5952] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 927.957049][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.971089][ T5952] usb 2-1: Product: syz [ 927.976061][ T5952] usb 2-1: Manufacturer: syz [ 928.017379][ T5952] usb 2-1: SerialNumber: syz [ 928.042999][ T5952] usb 2-1: config 0 descriptor?? [ 928.236837][T16515] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 928.296769][ C1] usb 2-1: NFC: Urb failure (status -71) [ 928.302701][ T5952] usb 2-1: NFC: Unable to get FW version [ 928.315277][ T5952] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 928.923557][T12597] usb 2-1: USB disconnect, device number 48 [ 930.858082][T16557] hub 9-0:1.0: USB hub found [ 930.863708][T16557] hub 9-0:1.0: 1 port detected [ 931.008686][T16558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.146814][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.193317][T16540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 932.306408][T16570] FAULT_INJECTION: forcing a failure. [ 932.306408][T16570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.334790][T16570] CPU: 0 UID: 0 PID: 16570 Comm: syz.2.2621 Not tainted syzkaller #0 PREEMPT(full) [ 932.334814][T16570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 932.334824][T16570] Call Trace: [ 932.334830][T16570] [ 932.334836][T16570] dump_stack_lvl+0x16c/0x1f0 [ 932.334862][T16570] should_fail_ex+0x512/0x640 [ 932.334887][T16570] _copy_to_user+0x32/0xd0 [ 932.334913][T16570] simple_read_from_buffer+0xcb/0x170 [ 932.334933][T16570] proc_fail_nth_read+0x197/0x240 [ 932.334954][T16570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 932.334974][T16570] ? rw_verify_area+0xcf/0x6c0 [ 932.334999][T16570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 932.335019][T16570] vfs_read+0x1e1/0xcf0 [ 932.335039][T16570] ? __pfx___mutex_lock+0x10/0x10 [ 932.335062][T16570] ? __pfx_vfs_read+0x10/0x10 [ 932.335086][T16570] ? __fget_files+0x20e/0x3c0 [ 932.335112][T16570] ksys_read+0x12a/0x250 [ 932.335129][T16570] ? __pfx_ksys_read+0x10/0x10 [ 932.335154][T16570] do_syscall_64+0xcd/0x4e0 [ 932.335179][T16570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.335195][T16570] RIP: 0033:0x7fe1c218d8dc [ 932.335210][T16570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 932.335227][T16570] RSP: 002b:00007fe1c2f86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 932.335245][T16570] RAX: ffffffffffffffda RBX: 00007fe1c23e5fa0 RCX: 00007fe1c218d8dc [ 932.335256][T16570] RDX: 000000000000000f RSI: 00007fe1c2f860a0 RDI: 0000000000000003 [ 932.335266][T16570] RBP: 00007fe1c2f86090 R08: 0000000000000000 R09: 0000000000000000 [ 932.335276][T16570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.335286][T16570] R13: 00007fe1c23e6038 R14: 00007fe1c23e5fa0 R15: 00007fff1aa5afb8 [ 932.335311][T16570] [ 933.539015][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 933.539031][ T30] audit: type=1326 audit(1758557420.866:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 933.783356][T16592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.949532][ T30] audit: type=1326 audit(1758557420.866:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 934.048811][ T30] audit: type=1326 audit(1758557420.866:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 934.076603][ T30] audit: type=1326 audit(1758557420.906:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 934.107212][ T30] audit: type=1326 audit(1758557420.906:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 934.288158][ T30] audit: type=1326 audit(1758557420.906:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16586 comm="syz.1.2626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 935.493930][T16588] NILFS (loop3): device size too small [ 935.688780][ T5171] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 936.499358][T16611] vxcan1 speed is unknown, defaulting to 1000 [ 936.513991][T14804] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 936.673914][T14804] usb 5-1: Using ep0 maxpacket: 32 [ 936.697121][T14804] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 936.804131][T14804] usb 5-1: config 0 has no interface number 0 [ 936.818623][T14804] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 936.841042][T14804] usb 5-1: config 0 interface 196 has no altsetting 0 [ 936.861495][T14804] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 936.887275][T14804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.912839][T14804] usb 5-1: Product: syz [ 936.927885][T14804] usb 5-1: Manufacturer: syz [ 936.945821][T14804] usb 5-1: SerialNumber: syz [ 936.970839][T14804] usb 5-1: config 0 descriptor?? [ 936.996690][T16610] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 937.217678][T16626] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 937.568261][T14804] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 937.596521][T14804] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 937.771758][T14804] usb 5-1: USB disconnect, device number 55 [ 938.595463][ T30] audit: type=1400 audit(1758557425.846:2558): avc: denied { connect } for pid=16638 comm="syz.3.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 938.909291][T16651] NILFS (loop0): device size too small [ 938.974679][T16662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2643'. [ 939.871578][ T5171] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 939.963547][T16674] 9pnet_fd: Insufficient options for proto=fd [ 940.016173][T16673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.354214][T16681] netlink: 'syz.1.2649': attribute type 1 has an invalid length. [ 940.527358][T16681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 940.580528][T16685] vlan2: entered allmulticast mode [ 940.587026][T16685] batadv0: entered allmulticast mode [ 940.594309][T16685] bond1: (slave vlan2): Opening slave failed [ 940.685314][ T5952] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 940.877612][ T5952] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 940.891945][ T5952] usb 3-1: config 0 has no interface number 0 [ 940.906770][ T5952] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 940.918330][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.926769][ T5952] usb 3-1: Product: syz [ 940.945892][ T5952] usb 3-1: Manufacturer: syz [ 940.979387][ T5952] usb 3-1: SerialNumber: syz [ 940.985692][ T30] audit: type=1400 audit(1758557428.306:2559): avc: denied { create } for pid=16694 comm="syz.3.2652" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 941.008484][ T30] audit: type=1400 audit(1758557428.306:2560): avc: denied { mounton } for pid=16694 comm="syz.3.2652" path="/533/file0" dev="tmpfs" ino=2761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 941.042089][ T5952] usb 3-1: config 0 descriptor?? [ 941.043122][T16698] FAULT_INJECTION: forcing a failure. [ 941.043122][T16698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.154013][T16698] CPU: 1 UID: 0 PID: 16698 Comm: syz.3.2652 Not tainted syzkaller #0 PREEMPT(full) [ 941.154040][T16698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 941.154051][T16698] Call Trace: [ 941.154060][T16698] [ 941.154068][T16698] dump_stack_lvl+0x16c/0x1f0 [ 941.154095][T16698] should_fail_ex+0x512/0x640 [ 941.154113][T16698] strncpy_from_user+0x3b/0x2e0 [ 941.154128][T16698] getname_flags.part.0+0x8f/0x550 [ 941.154147][T16698] getname_flags+0x93/0xf0 [ 941.154159][T16698] do_sys_openat2+0xb8/0x1d0 [ 941.154175][T16698] ? __pfx_do_sys_openat2+0x10/0x10 [ 941.154192][T16698] ? __fget_files+0x20e/0x3c0 [ 941.154207][T16698] __x64_sys_openat+0x174/0x210 [ 941.154224][T16698] ? __pfx___x64_sys_openat+0x10/0x10 [ 941.154239][T16698] ? ksys_write+0x1ac/0x250 [ 941.154255][T16698] do_syscall_64+0xcd/0x4e0 [ 941.154271][T16698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.154283][T16698] RIP: 0033:0x7f7b46b8eec9 [ 941.154292][T16698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.154304][T16698] RSP: 002b:00007f7b479e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 941.154315][T16698] RAX: ffffffffffffffda RBX: 00007f7b46de6090 RCX: 00007f7b46b8eec9 [ 941.154322][T16698] RDX: 0000000000040042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 941.154329][T16698] RBP: 00007f7b479e7090 R08: 0000000000000000 R09: 0000000000000000 [ 941.154335][T16698] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 941.154342][T16698] R13: 00007f7b46de6128 R14: 00007f7b46de6090 R15: 00007fff79c1f228 [ 941.154356][T16698] [ 941.445025][ T5952] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 941.454101][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 941.464243][ T5952] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 941.474583][ T5952] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 941.482563][ T5952] usb 3-1: media controller created [ 941.495271][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 941.623924][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 941.630959][ T24] usb 5-1: config index 0 descriptor too short (expected 60715, got 43) [ 941.639695][ T24] usb 5-1: config 0 has an invalid interface number: 192 but max is 0 [ 941.648188][ T24] usb 5-1: config 0 has no interface number 0 [ 941.655393][ T24] usb 5-1: config 0 interface 192 has no altsetting 0 [ 941.665469][ T24] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0022, bcdDevice=f4.c6 [ 941.684980][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.693754][ T24] usb 5-1: Product: syz [ 941.702115][ T24] usb 5-1: Manufacturer: syz [ 941.713900][ T24] usb 5-1: SerialNumber: syz [ 941.761395][ T5952] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 941.838913][ T24] usb 5-1: config 0 descriptor?? [ 942.087682][ T24] kvaser_usb 5-1:0.192: error -EPROTO: Cannot get software info [ 942.138365][ T24] kvaser_usb 5-1:0.192: probe with driver kvaser_usb failed with error -71 [ 942.164010][ T92] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 942.191099][ T24] usb 5-1: USB disconnect, device number 56 [ 942.336573][ T92] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.363698][ T92] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 942.380295][T16711] 9pnet_fd: Insufficient options for proto=fd [ 942.393596][ T92] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 942.423708][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.464355][ T92] usb 4-1: config 0 descriptor?? [ 942.502264][ T92] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 942.520514][ T92] dvb-usb: bulk message failed: -22 (3/0) [ 942.535833][ T92] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 942.553016][ T92] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 942.561259][ T92] usb 4-1: media controller created [ 942.568822][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 942.598156][ T92] dvb-usb: bulk message failed: -22 (6/0) [ 942.604605][ T92] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 942.926113][ T30] audit: type=1400 audit(1758557430.256:2561): avc: denied { ioctl } for pid=16712 comm="syz.0.2659" path="socket:[63359]" dev="sockfs" ino=63359 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 944.089995][ T5952] usb 3-1: USB disconnect, device number 43 [ 944.094906][ T92] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input163 [ 944.264178][T16717] tipc: Enabling of bearer rejected, failed to enable media [ 944.467187][ T92] dvb-usb: schedule remote query interval to 150 msecs. [ 944.514337][ T92] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 944.565525][T16727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 944.686322][T14804] dvb-usb: bulk message failed: -22 (1/0) [ 944.933957][T14804] dvb-usb: error while querying for an remote control event. [ 944.952768][ T92] usb 4-1: USB disconnect, device number 48 [ 944.979579][T16719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2661'. [ 945.033042][ T92] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 945.894039][T15174] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 945.931807][T14804] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 946.094041][T14804] usb 3-1: Using ep0 maxpacket: 16 [ 946.100529][T14804] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 946.118675][T14804] usb 3-1: config 0 has no interface number 0 [ 946.133965][T14804] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 946.162670][T14804] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 946.194691][ T30] audit: type=1400 audit(1758557433.526:2562): avc: denied { ioctl } for pid=16737 comm="syz.2.2665" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 946.195698][T14804] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 946.238571][T14804] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 946.247155][T14804] usb 3-1: Product: syz [ 946.251312][T14804] usb 3-1: SerialNumber: syz [ 946.275474][T14804] usb 3-1: config 0 descriptor?? [ 946.293689][T14804] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 946.409341][T14804] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input164 [ 946.656596][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 946.678879][ T30] audit: type=1400 audit(1758557433.556:2563): avc: denied { create } for pid=16745 comm="syz.0.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 946.738214][ T30] audit: type=1400 audit(1758557433.556:2564): avc: denied { connect } for pid=16745 comm="syz.0.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 946.810825][ T30] audit: type=1400 audit(1758557433.606:2565): avc: denied { create } for pid=16754 comm="syz.4.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 946.863134][ C1] cm109_urb_ctl_callback: 357 callbacks suppressed [ 946.863148][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 946.876748][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 946.884069][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 946.891415][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 946.898527][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 946.905653][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 946.912793][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 946.919935][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 946.927016][ T912] usb 3-1: USB disconnect, device number 44 [ 946.927068][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 946.939871][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 946.957999][ T30] audit: type=1400 audit(1758557433.606:2566): avc: denied { setopt } for pid=16754 comm="syz.4.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 946.981314][ T30] audit: type=1400 audit(1758557433.696:2567): avc: denied { ioctl } for pid=16754 comm="syz.4.2671" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 947.006762][ T912] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 947.015272][ T30] audit: type=1400 audit(1758557433.996:2568): avc: denied { read } for pid=5206 comm="acpid" name="event4" dev="devtmpfs" ino=3792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 947.063995][ T30] audit: type=1400 audit(1758557433.996:2569): avc: denied { open } for pid=5206 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3792 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 947.113763][ T30] audit: type=1400 audit(1758557433.996:2570): avc: denied { ioctl } for pid=5206 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3792 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 947.163641][ T30] audit: type=1400 audit(1758557434.126:2571): avc: denied { read write } for pid=5845 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 948.631806][ T5952] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 948.863923][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 948.874932][ T5952] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 948.914136][ T5952] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.392122][ T5952] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.406903][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.416910][ T5952] usb 1-1: Product: syz [ 949.421088][ T5952] usb 1-1: Manufacturer: syz [ 949.446112][ T5952] usb 1-1: SerialNumber: syz [ 949.939526][ T5952] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 949.990515][ T912] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 950.454631][ T912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 950.466480][ T912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.643915][ T912] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 952.577719][ T912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 952.594506][ T912] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 952.661743][ T912] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 952.680959][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.689387][ T912] usb 4-1: Product: syz [ 952.715661][ T912] usb 4-1: config 0 descriptor?? [ 952.721082][ T912] usb 4-1: can't set config #0, error -71 [ 952.735264][ T912] usb 4-1: USB disconnect, device number 49 [ 952.831942][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 952.831957][ T30] audit: type=1400 audit(1758557440.156:2620): avc: denied { mounton } for pid=16772 comm="syz.0.2675" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 952.861954][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.865340][ T5952] usb 1-1: USB disconnect, device number 58 [ 952.928161][ T9781] udevd[9781]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.979792][ T30] audit: type=1400 audit(1758557440.156:2621): avc: denied { mount } for pid=16772 comm="syz.0.2675" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 953.026761][ T30] audit: type=1400 audit(1758557440.156:2622): avc: denied { ioctl } for pid=16772 comm="syz.0.2675" path="socket:[64556]" dev="sockfs" ino=64556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 953.062993][ T30] audit: type=1400 audit(1758557440.296:2623): avc: denied { read } for pid=16805 comm="syz.3.2683" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 953.138725][ T30] audit: type=1400 audit(1758557440.296:2624): avc: denied { open } for pid=16805 comm="syz.3.2683" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 953.203362][ T30] audit: type=1400 audit(1758557440.516:2625): avc: denied { create } for pid=16810 comm="syz.3.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 953.334053][ T30] audit: type=1400 audit(1758557440.666:2626): avc: denied { read write } for pid=16813 comm="syz.4.2685" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 953.456184][ T30] audit: type=1400 audit(1758557440.666:2627): avc: denied { open } for pid=16813 comm="syz.4.2685" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 953.517242][ T30] audit: type=1400 audit(1758557440.726:2628): avc: denied { mounton } for pid=16813 comm="syz.4.2685" path="/547/file0" dev="tmpfs" ino=2842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 953.631596][T16821] ./cgroup: Can't lookup blockdev [ 953.733786][ T30] audit: type=1400 audit(1758557440.726:2629): avc: denied { mount } for pid=16813 comm="syz.4.2685" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 954.346527][T14804] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 954.526802][T14804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 954.559781][T14804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.691969][T14804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 955.120176][T14804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 955.149576][T14804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 955.189999][T14804] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 955.213971][T14804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.271285][T14804] usb 5-1: Product: syz [ 955.284088][T14804] usb 5-1: Manufacturer: syz [ 955.293741][T14804] usb 5-1: SerialNumber: syz [ 955.307105][T14804] usb 5-1: config 0 descriptor?? [ 955.326819][T16828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 955.349629][ C0] usb 5-1: NFC: Urb failure (status -71) [ 955.374169][T14804] usb 5-1: NFC: Unable to get FW version [ 955.382285][T14804] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 955.832487][ T24] usb 5-1: USB disconnect, device number 57 [ 956.254879][T16852] sctp: [Deprecated]: syz.0.2694 (pid 16852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.254879][T16852] Use struct sctp_sack_info instead [ 957.905027][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 957.905052][ T30] audit: type=1400 audit(1758557445.166:2649): avc: denied { write } for pid=16855 comm="syz.1.2696" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 958.422523][ T30] audit: type=1400 audit(1758557445.746:2650): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 958.703529][ T30] audit: type=1400 audit(1758557446.006:2651): avc: denied { create } for pid=16867 comm="syz.2.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 959.464042][ T30] audit: type=1400 audit(1758557446.656:2652): avc: denied { create } for pid=16879 comm="syz.0.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 959.484720][ T5171] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 959.494353][ T30] audit: type=1400 audit(1758557446.656:2653): avc: denied { create } for pid=16879 comm="syz.0.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 959.828909][ T30] audit: type=1400 audit(1758557447.136:2654): avc: denied { create } for pid=16853 comm="syz.3.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 960.314061][ T30] audit: type=1400 audit(1758557447.576:2655): avc: denied { bind } for pid=16888 comm="syz.1.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 960.447925][ T30] audit: type=1400 audit(1758557447.576:2656): avc: denied { name_bind } for pid=16888 comm="syz.1.2701" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 960.473540][ T30] audit: type=1400 audit(1758557447.576:2657): avc: denied { node_bind } for pid=16888 comm="syz.1.2701" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 961.103664][ T30] audit: type=1400 audit(1758557447.576:2658): avc: denied { connect } for pid=16888 comm="syz.1.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 961.884965][T16909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.896989][T16909] FAULT_INJECTION: forcing a failure. [ 961.896989][T16909] name failslab, interval 1, probability 0, space 0, times 0 [ 961.909680][T16909] CPU: 1 UID: 0 PID: 16909 Comm: syz.3.2709 Not tainted syzkaller #0 PREEMPT(full) [ 961.909706][T16909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 961.909717][T16909] Call Trace: [ 961.909724][T16909] [ 961.909731][T16909] dump_stack_lvl+0x16c/0x1f0 [ 961.909759][T16909] should_fail_ex+0x512/0x640 [ 961.909781][T16909] ? fs_reclaim_acquire+0xae/0x150 [ 961.909808][T16909] ? tomoyo_encode2+0x100/0x3e0 [ 961.909833][T16909] should_failslab+0xc2/0x120 [ 961.909854][T16909] __kmalloc_noprof+0xd2/0x510 [ 961.909873][T16909] ? tomoyo_encode2+0x6c/0x3e0 [ 961.909903][T16909] tomoyo_encode2+0x100/0x3e0 [ 961.909933][T16909] tomoyo_encode+0x29/0x50 [ 961.909958][T16909] tomoyo_realpath_from_path+0x18f/0x6e0 [ 961.909992][T16909] tomoyo_path_number_perm+0x245/0x580 [ 961.910013][T16909] ? tomoyo_path_number_perm+0x237/0x580 [ 961.910038][T16909] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 961.910062][T16909] ? find_held_lock+0x2b/0x80 [ 961.910107][T16909] ? rcu_is_watching+0x12/0xc0 [ 961.910129][T16909] ? irqentry_exit+0x3b/0x90 [ 961.910150][T16909] ? hook_file_ioctl_common+0x145/0x410 [ 961.910169][T16909] ? lockdep_hardirqs_on+0x7c/0x110 [ 961.910202][T16909] security_file_ioctl+0x9b/0x240 [ 961.910229][T16909] __x64_sys_ioctl+0xb7/0x210 [ 961.910259][T16909] do_syscall_64+0xcd/0x4e0 [ 961.910283][T16909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.910302][T16909] RIP: 0033:0x7f7b46b8eec9 [ 961.910317][T16909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.910340][T16909] RSP: 002b:00007f7b479c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 961.910358][T16909] RAX: ffffffffffffffda RBX: 00007f7b46de6180 RCX: 00007f7b46b8eec9 [ 961.910369][T16909] RDX: 0000200000000100 RSI: 0000000000003b85 RDI: 0000000000000005 [ 961.910381][T16909] RBP: 00007f7b479c6090 R08: 0000000000000000 R09: 0000000000000000 [ 961.910392][T16909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.910402][T16909] R13: 00007f7b46de6218 R14: 00007f7b46de6180 R15: 00007fff79c1f228 [ 961.910428][T16909] [ 961.910499][T16909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 962.917437][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 962.917453][ T30] audit: type=1400 audit(1758557450.246:2678): avc: denied { ioctl } for pid=16914 comm="syz.4.2711" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64869 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 962.955653][ T92] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 962.986550][ T30] audit: type=1400 audit(1758557450.306:2679): avc: denied { write } for pid=16914 comm="syz.4.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 963.166872][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 963.333011][ T92] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.393987][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 963.406715][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 963.418472][ T92] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 963.524418][ T92] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.130756][ T92] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 964.195221][ T92] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 964.259461][ T92] usb 2-1: Manufacturer: syz [ 964.381022][ T92] usb 2-1: config 0 descriptor?? [ 964.504072][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 964.719918][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 964.749868][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.813702][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 964.840138][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 964.858014][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 964.870109][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 964.884136][ T92] rc_core: IR keymap rc-hauppauge not found [ 964.905229][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.913560][ T92] Registered IR keymap rc-empty [ 964.927821][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 964.944890][ T9] usb 5-1: Product: syz [ 964.956906][ T9] usb 5-1: Manufacturer: syz [ 965.003206][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.012585][ T9] usb 5-1: SerialNumber: syz [ 965.020728][ T9] usb 5-1: config 0 descriptor?? [ 965.026299][T16936] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 965.035662][ T92] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 965.048552][ C0] usb 5-1: NFC: Urb failure (status -71) [ 965.057869][ T9] usb 5-1: NFC: Unable to get FW version [ 965.065890][ T9] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 965.214112][ T92] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input166 [ 966.156763][ T30] audit: type=1400 audit(1758557453.476:2680): avc: denied { create } for pid=16915 comm="syz.1.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 966.240103][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.252687][ T30] audit: type=1400 audit(1758557453.476:2681): avc: denied { setopt } for pid=16915 comm="syz.1.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 966.280194][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.284990][T16962] netlink: 'syz.2.2723': attribute type 72 has an invalid length. [ 966.397679][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.405637][ T30] audit: type=1400 audit(1758557453.476:2682): avc: denied { write } for pid=16915 comm="syz.1.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 966.425781][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.432939][ T30] audit: type=1400 audit(1758557453.546:2683): avc: denied { mount } for pid=16952 comm="syz.0.2721" name="/" dev="autofs" ino=64353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 966.464040][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 967.428027][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 968.366108][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 968.384434][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 968.404021][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 968.462964][ T92] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 968.497340][ T92] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 968.570430][ T5952] usb 5-1: USB disconnect, device number 58 [ 968.844312][ T92] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 968.891477][T16978] NILFS (loop2): device size too small [ 968.994313][ T92] usb 2-1: USB disconnect, device number 49 [ 969.053972][ T5952] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 969.324266][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 969.334115][ T5952] usb 5-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 969.347046][ T5952] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 969.484335][ T5952] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 969.502501][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.524882][ T5952] usb 5-1: Product: syz [ 969.553535][ T5952] usb 5-1: Manufacturer: syz [ 969.561560][ T5952] usb 5-1: SerialNumber: syz [ 969.588132][ T5952] usb 5-1: config 0 descriptor?? [ 971.130918][ T30] audit: type=1400 audit(1758557458.456:2684): avc: denied { mounton } for pid=16991 comm="syz.2.2729" path="/550/file0" dev="tmpfs" ino=2863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 971.153725][ C1] vkms_vblank_simulate: vblank timer overrun [ 971.281164][ T30] audit: type=1400 audit(1758557458.596:2685): avc: denied { write } for pid=16993 comm="syz.2.2730" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 971.304806][ C1] vkms_vblank_simulate: vblank timer overrun [ 971.360668][ T30] audit: type=1400 audit(1758557458.596:2686): avc: denied { open } for pid=16993 comm="syz.2.2730" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 971.440855][ T30] audit: type=1400 audit(1758557458.606:2687): avc: denied { ioctl } for pid=16993 comm="syz.2.2730" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 971.617808][ T30] audit: type=1400 audit(1758557458.646:2688): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 971.637783][ C1] vkms_vblank_simulate: vblank timer overrun [ 972.252822][ T5912] usb 5-1: USB disconnect, device number 59 [ 972.437378][ T30] audit: type=1400 audit(1758557459.766:2689): avc: denied { create } for pid=17008 comm="syz.4.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 972.474843][T17012] FAULT_INJECTION: forcing a failure. [ 972.474843][T17012] name failslab, interval 1, probability 0, space 0, times 0 [ 972.526502][T17012] CPU: 0 UID: 0 PID: 17012 Comm: syz.0.2735 Not tainted syzkaller #0 PREEMPT(full) [ 972.526533][T17012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 972.526543][T17012] Call Trace: [ 972.526549][T17012] [ 972.526557][T17012] dump_stack_lvl+0x16c/0x1f0 [ 972.526584][T17012] should_fail_ex+0x512/0x640 [ 972.526606][T17012] ? fs_reclaim_acquire+0xae/0x150 [ 972.526631][T17012] ? tomoyo_encode2+0x100/0x3e0 [ 972.526656][T17012] should_failslab+0xc2/0x120 [ 972.526677][T17012] __kmalloc_noprof+0xd2/0x510 [ 972.526694][T17012] ? d_absolute_path+0x136/0x1a0 [ 972.526724][T17012] tomoyo_encode2+0x100/0x3e0 [ 972.526753][T17012] tomoyo_encode+0x29/0x50 [ 972.526777][T17012] tomoyo_realpath_from_path+0x18f/0x6e0 [ 972.526807][T17012] tomoyo_path_number_perm+0x245/0x580 [ 972.526829][T17012] ? tomoyo_path_number_perm+0x237/0x580 [ 972.526854][T17012] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 972.526879][T17012] ? find_held_lock+0x2b/0x80 [ 972.526921][T17012] ? find_held_lock+0x2b/0x80 [ 972.526939][T17012] ? hook_file_ioctl_common+0x145/0x410 [ 972.526961][T17012] ? __fget_files+0x20e/0x3c0 [ 972.526984][T17012] security_file_ioctl+0x9b/0x240 [ 972.527009][T17012] __x64_sys_ioctl+0xb7/0x210 [ 972.527038][T17012] do_syscall_64+0xcd/0x4e0 [ 972.527064][T17012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.527080][T17012] RIP: 0033:0x7f34adf8eec9 [ 972.527094][T17012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.527111][T17012] RSP: 002b:00007f34aeddd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.527127][T17012] RAX: ffffffffffffffda RBX: 00007f34ae1e5fa0 RCX: 00007f34adf8eec9 [ 972.527139][T17012] RDX: 0000000000000000 RSI: 0000000000002271 RDI: 0000000000000003 [ 972.527150][T17012] RBP: 00007f34aeddd090 R08: 0000000000000000 R09: 0000000000000000 [ 972.527160][T17012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.527170][T17012] R13: 00007f34ae1e6038 R14: 00007f34ae1e5fa0 R15: 00007ffcd2fd7ae8 [ 972.527194][T17012] [ 972.527209][T17012] ERROR: Out of memory at tomoyo_realpath_from_path. [ 972.613436][ T30] audit: type=1400 audit(1758557459.856:2690): avc: denied { connect } for pid=17013 comm="syz.1.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 972.961288][T17019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2737'. [ 973.110111][ T30] audit: type=1400 audit(1758557460.316:2691): avc: denied { firmware_load } for pid=17013 comm="syz.1.2737" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 973.204671][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2737'. [ 973.265734][ T30] audit: type=1400 audit(1758557460.586:2692): avc: denied { ioctl } for pid=17023 comm="syz.4.2740" path="socket:[65000]" dev="sockfs" ino=65000 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 973.290939][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.309066][T17030] FAULT_INJECTION: forcing a failure. [ 973.309066][T17030] name failslab, interval 1, probability 0, space 0, times 0 [ 973.396508][T17030] CPU: 1 UID: 0 PID: 17030 Comm: syz.0.2738 Not tainted syzkaller #0 PREEMPT(full) [ 973.396533][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 973.396544][T17030] Call Trace: [ 973.396550][T17030] [ 973.396557][T17030] dump_stack_lvl+0x16c/0x1f0 [ 973.396582][T17030] should_fail_ex+0x512/0x640 [ 973.396604][T17030] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 973.396624][T17030] should_failslab+0xc2/0x120 [ 973.396645][T17030] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 973.396663][T17030] ? __alloc_skb+0x2b2/0x380 [ 973.396687][T17030] __alloc_skb+0x2b2/0x380 [ 973.396706][T17030] ? __pfx___alloc_skb+0x10/0x10 [ 973.396727][T17030] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 973.396755][T17030] netlink_alloc_large_skb+0x69/0x130 [ 973.396780][T17030] netlink_sendmsg+0x6a1/0xdd0 [ 973.396807][T17030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.396839][T17030] ____sys_sendmsg+0xa95/0xc70 [ 973.396865][T17030] ? copy_msghdr_from_user+0x10a/0x160 [ 973.396886][T17030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 973.396922][T17030] ___sys_sendmsg+0x134/0x1d0 [ 973.396944][T17030] ? __pfx____sys_sendmsg+0x10/0x10 [ 973.396994][T17030] __sys_sendmsg+0x16d/0x220 [ 973.397015][T17030] ? __pfx___sys_sendmsg+0x10/0x10 [ 973.397052][T17030] do_syscall_64+0xcd/0x4e0 [ 973.397077][T17030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.397095][T17030] RIP: 0033:0x7f34adf8eec9 [ 973.397109][T17030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.397125][T17030] RSP: 002b:00007f34aeddd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.397142][T17030] RAX: ffffffffffffffda RBX: 00007f34ae1e5fa0 RCX: 00007f34adf8eec9 [ 973.397155][T17030] RDX: 0000000006000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 973.397166][T17030] RBP: 00007f34aeddd090 R08: 0000000000000000 R09: 0000000000000000 [ 973.397176][T17030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.397187][T17030] R13: 00007f34ae1e6038 R14: 00007f34ae1e5fa0 R15: 00007ffcd2fd7ae8 [ 973.397211][T17030] [ 973.610495][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.733700][ T30] audit: type=1400 audit(1758557461.056:2693): avc: denied { create } for pid=17032 comm="syz.1.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 974.153889][ T5952] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 974.715535][ T5952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 974.731958][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.744048][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 974.763965][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 974.773725][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 974.785929][ T5952] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 974.795153][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.804244][ T5952] usb 5-1: Product: syz [ 974.820371][ T5952] usb 5-1: Manufacturer: syz [ 974.874905][ T5952] usb 5-1: SerialNumber: syz [ 974.934617][ T5952] usb 5-1: config 0 descriptor?? [ 974.981101][T17037] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 975.035367][ C1] usb 5-1: NFC: Urb failure (status -71) [ 975.081717][ T5952] usb 5-1: NFC: Unable to get FW version [ 975.094205][ T5952] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 975.211665][ T5952] usb 5-1: USB disconnect, device number 60 [ 975.564175][ T5912] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 975.735965][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 975.765911][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.791686][ T5912] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 975.810728][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 975.825068][T17063] FAULT_INJECTION: forcing a failure. [ 975.825068][T17063] name failslab, interval 1, probability 0, space 0, times 0 [ 975.840740][ T5912] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 975.851282][T17063] CPU: 0 UID: 0 PID: 17063 Comm: syz.4.2751 Not tainted syzkaller #0 PREEMPT(full) [ 975.851307][T17063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 975.851317][T17063] Call Trace: [ 975.851324][T17063] [ 975.851331][T17063] dump_stack_lvl+0x16c/0x1f0 [ 975.851364][T17063] should_fail_ex+0x512/0x640 [ 975.851387][T17063] ? fs_reclaim_acquire+0xae/0x150 [ 975.851412][T17063] ? tomoyo_encode2+0x100/0x3e0 [ 975.851438][T17063] should_failslab+0xc2/0x120 [ 975.851460][T17063] __kmalloc_noprof+0xd2/0x510 [ 975.851482][T17063] tomoyo_encode2+0x100/0x3e0 [ 975.851510][T17063] tomoyo_encode+0x29/0x50 [ 975.851536][T17063] tomoyo_realpath_from_path+0x18f/0x6e0 [ 975.851565][T17063] ? tomoyo_profile+0x47/0x60 [ 975.851586][T17063] tomoyo_path_number_perm+0x245/0x580 [ 975.851608][T17063] ? tomoyo_path_number_perm+0x237/0x580 [ 975.851633][T17063] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 975.851659][T17063] ? find_held_lock+0x2b/0x80 [ 975.851704][T17063] ? find_held_lock+0x2b/0x80 [ 975.851725][T17063] ? hook_file_ioctl_common+0x145/0x410 [ 975.851750][T17063] ? __fget_files+0x20e/0x3c0 [ 975.851775][T17063] security_file_ioctl+0x9b/0x240 [ 975.851802][T17063] __x64_sys_ioctl+0xb7/0x210 [ 975.851833][T17063] do_syscall_64+0xcd/0x4e0 [ 975.851860][T17063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.851879][T17063] RIP: 0033:0x7f8c25d8eec9 [ 975.851894][T17063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.851911][T17063] RSP: 002b:00007f8c26c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 975.851928][T17063] RAX: ffffffffffffffda RBX: 00007f8c25fe5fa0 RCX: 00007f8c25d8eec9 [ 975.851939][T17063] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004 [ 975.851949][T17063] RBP: 00007f8c26c76090 R08: 0000000000000000 R09: 0000000000000000 [ 975.851958][T17063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.851968][T17063] R13: 00007f8c25fe6038 R14: 00007f8c25fe5fa0 R15: 00007ffd3001aa98 [ 975.851994][T17063] [ 975.852072][T17063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 976.067360][ T5912] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 976.076675][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.085364][ T5912] usb 4-1: Product: syz [ 976.089730][ T5912] usb 4-1: Manufacturer: syz [ 976.100549][ T5912] usb 4-1: SerialNumber: syz [ 976.114230][ T5912] usb 4-1: config 0 descriptor?? [ 976.122366][T17050] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 976.135738][ C0] usb 4-1: NFC: Urb failure (status -71) [ 976.141530][ T5912] usb 4-1: NFC: Unable to get FW version [ 976.161502][ T5912] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 976.221445][T17054] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 976.249238][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 976.249253][ T30] audit: type=1400 audit(1758557463.576:2700): avc: denied { sys_module } for pid=17068 comm="syz.4.2753" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 976.325424][ T30] audit: type=1400 audit(1758557463.606:2701): avc: denied { write } for pid=17068 comm="syz.4.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 976.526499][ T30] audit: type=1400 audit(1758557463.836:2702): avc: denied { create } for pid=17061 comm="syz.2.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 976.884398][ T5952] usb 4-1: USB disconnect, device number 50 [ 977.004989][ T30] audit: type=1400 audit(1758557463.996:2703): avc: denied { write } for pid=17061 comm="syz.2.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 977.037911][T17079] NILFS (loop1): device size too small [ 977.605410][ T30] audit: type=1400 audit(1758557464.926:2704): avc: denied { read write } for pid=17081 comm="syz.3.2756" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 977.637143][ T30] audit: type=1400 audit(1758557464.966:2705): avc: denied { open } for pid=17081 comm="syz.3.2756" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 977.685143][ T9] hid_parser_main: 1 callbacks suppressed [ 977.685156][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 977.726258][ T30] audit: type=1400 audit(1758557465.026:2706): avc: denied { read write } for pid=17081 comm="syz.3.2756" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 977.759115][ T30] audit: type=1400 audit(1758557465.026:2707): avc: denied { open } for pid=17081 comm="syz.3.2756" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 977.788405][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.792003][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 977.807299][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 977.838681][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 977.891434][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 978.142790][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 978.160825][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 978.202245][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 978.229679][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 978.286997][ T9] hid-generic 0005:0006:0006.0024: unknown main item tag 0x0 [ 978.493040][ T9] hid-generic 0005:0006:0006.0024: hidraw0: BLUETOOTH HID v84.0d Device [syz0] on syz0 [ 978.583891][ T30] audit: type=1400 audit(1758557465.896:2708): avc: denied { connect } for pid=17091 comm="syz.0.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 978.603620][ C1] vkms_vblank_simulate: vblank timer overrun [ 978.723660][T17090] fido_id[17090]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 978.870511][ T30] audit: type=1400 audit(1758557466.196:2709): avc: denied { read append } for pid=17100 comm="syz.2.2759" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 982.249848][T17141] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 982.535169][T17143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2767'. [ 982.536107][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 982.536121][ T30] audit: type=1400 audit(1758557469.856:2724): avc: denied { create } for pid=17136 comm="syz.4.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 982.565054][ T30] audit: type=1400 audit(1758557469.866:2725): avc: denied { write } for pid=17136 comm="syz.4.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 983.103916][ T30] audit: type=1400 audit(1758557470.426:2726): avc: denied { append } for pid=17145 comm="syz.0.2765" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 983.275772][T17154] NILFS (loop3): device size too small [ 984.611339][T17166] syz.0.2765 (17166): drop_caches: 2 [ 984.634459][ T5221] Dev loop6: unable to read RDB block 1 [ 984.640099][ T5221] loop6: unable to read partition table [ 984.654060][ T5221] loop6: partition table beyond EOD, truncated [ 985.074187][ T5912] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 985.104950][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2775'. [ 985.246278][ T5912] usb 2-1: unable to get BOS descriptor or descriptor too short [ 985.255086][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.265754][ T5912] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 985.316795][ T30] audit: type=1326 audit(1758557472.606:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.3.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b46b8eec9 code=0x7ffc0000 [ 985.340247][ C1] vkms_vblank_simulate: vblank timer overrun [ 985.351397][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 985.387339][ T5912] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 985.413070][ T5912] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 985.422947][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.432095][ T5912] usb 2-1: Product: syz [ 985.472839][ T30] audit: type=1326 audit(1758557472.606:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.3.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b46b8eec9 code=0x7ffc0000 [ 985.580009][ T30] audit: type=1326 audit(1758557472.606:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.3.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f7b46b8eec9 code=0x7ffc0000 [ 985.603495][ C1] vkms_vblank_simulate: vblank timer overrun [ 985.612116][ T5912] usb 2-1: Manufacturer: syz [ 985.667301][ T5912] usb 2-1: SerialNumber: syz [ 985.717082][ T5912] usb 2-1: config 0 descriptor?? [ 985.757396][T17175] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 985.797073][ T30] audit: type=1326 audit(1758557472.606:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.3.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b46b8eec9 code=0x7ffc0000 [ 985.837293][ C0] usb 2-1: NFC: Urb failure (status -71) [ 985.843242][ T5912] usb 2-1: NFC: Unable to get FW version [ 985.854369][ T5912] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 985.909337][ T30] audit: type=1326 audit(1758557472.606:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.3.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b46b8eec9 code=0x7ffc0000 [ 986.137111][ T30] audit: type=1326 audit(1758557472.606:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.3.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b46b8eec9 code=0x7ffc0000 [ 986.182591][ T30] audit: type=1326 audit(1758557472.606:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17179 comm="syz.3.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7b46b8eec9 code=0x7ffc0000 [ 986.222789][ T92] usb 2-1: USB disconnect, device number 50 [ 986.531569][T17201] NILFS (loop2): device size too small [ 987.149264][T17208] NILFS (loop4): device size too small [ 988.132274][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 988.132295][ T30] audit: type=1400 audit(1758557475.456:2760): avc: denied { read } for pid=5516 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 988.159448][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.206674][T17229] mkiss: ax0: crc mode is auto. [ 988.278260][ T30] audit: type=1400 audit(1758557475.536:2761): avc: denied { search } for pid=5516 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.366742][T17236] FAULT_INJECTION: forcing a failure. [ 988.366742][T17236] name failslab, interval 1, probability 0, space 0, times 0 [ 988.376945][ T30] audit: type=1400 audit(1758557475.536:2762): avc: denied { search } for pid=5516 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.404627][T17236] CPU: 1 UID: 0 PID: 17236 Comm: syz.2.2788 Not tainted syzkaller #0 PREEMPT(full) [ 988.404652][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 988.404662][T17236] Call Trace: [ 988.404667][T17236] [ 988.404674][T17236] dump_stack_lvl+0x16c/0x1f0 [ 988.404701][T17236] should_fail_ex+0x512/0x640 [ 988.404724][T17236] ? fs_reclaim_acquire+0xae/0x150 [ 988.404748][T17236] ? tomoyo_encode2+0x100/0x3e0 [ 988.404772][T17236] should_failslab+0xc2/0x120 [ 988.404794][T17236] __kmalloc_noprof+0xd2/0x510 [ 988.404817][T17236] tomoyo_encode2+0x100/0x3e0 [ 988.404846][T17236] tomoyo_encode+0x29/0x50 [ 988.404870][T17236] tomoyo_realpath_from_path+0x18f/0x6e0 [ 988.404898][T17236] ? tomoyo_profile+0x47/0x60 [ 988.404918][T17236] tomoyo_path_number_perm+0x245/0x580 [ 988.404939][T17236] ? tomoyo_path_number_perm+0x237/0x580 [ 988.404963][T17236] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 988.404987][T17236] ? find_held_lock+0x2b/0x80 [ 988.405030][T17236] ? find_held_lock+0x2b/0x80 [ 988.405051][T17236] ? hook_file_ioctl_common+0x145/0x410 [ 988.405074][T17236] ? __fget_files+0x20e/0x3c0 [ 988.405096][T17236] security_file_ioctl+0x9b/0x240 [ 988.405123][T17236] __x64_sys_ioctl+0xb7/0x210 [ 988.405151][T17236] do_syscall_64+0xcd/0x4e0 [ 988.405178][T17236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.405195][T17236] RIP: 0033:0x7fe1c218eec9 [ 988.405210][T17236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 988.405228][T17236] RSP: 002b:00007fe1c2f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.405246][T17236] RAX: ffffffffffffffda RBX: 00007fe1c23e6090 RCX: 00007fe1c218eec9 [ 988.405257][T17236] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 988.405268][T17236] RBP: 00007fe1c2f64090 R08: 0000000000000000 R09: 0000000000000000 [ 988.405280][T17236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.405297][T17236] R13: 00007fe1c23e6128 R14: 00007fe1c23e6090 R15: 00007fff1aa5afb8 [ 988.405322][T17236] [ 988.405775][T17236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 988.408840][T17234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2786'. [ 988.699481][ T30] audit: type=1400 audit(1758557475.536:2763): avc: denied { search } for pid=5516 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 988.750441][ T30] audit: type=1400 audit(1758557475.536:2764): avc: denied { read } for pid=5516 comm="dhcpcd" name="n117" dev="tmpfs" ino=11392 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 988.772402][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.894614][ T30] audit: type=1400 audit(1758557475.536:2765): avc: denied { open } for pid=5516 comm="dhcpcd" path="/run/udev/data/n117" dev="tmpfs" ino=11392 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 989.357012][ T30] audit: type=1400 audit(1758557475.536:2766): avc: denied { getattr } for pid=5516 comm="dhcpcd" path="/run/udev/data/n117" dev="tmpfs" ino=11392 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 989.382025][ T30] audit: type=1400 audit(1758557475.676:2767): avc: denied { accept } for pid=17226 comm="syz.1.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 989.402062][ T30] audit: type=1400 audit(1758557475.746:2768): avc: denied { setopt } for pid=17226 comm="syz.1.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 989.487342][ T30] audit: type=1400 audit(1758557476.346:2769): avc: denied { create } for pid=17239 comm="syz.3.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 989.506810][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.563958][ T5171] Bluetooth: hci4: command 0x0406 tx timeout [ 992.567838][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.758384][T17282] NILFS (loop1): device size too small [ 993.224081][ T92] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 993.354211][ T92] usb 4-1: device descriptor read/64, error -71 [ 993.593888][ T92] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 993.725173][ T92] usb 4-1: device descriptor read/64, error -71 [ 993.844209][ T92] usb usb4-port1: attempt power cycle [ 995.063901][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 995.063917][ T30] audit: type=1400 audit(1758557481.536:2779): avc: denied { setopt } for pid=17306 comm="syz.4.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 995.164096][T17316] 9pnet_virtio: no channels available for device 127.0.0.1 [ 995.266882][ T30] audit: type=1400 audit(1758557481.546:2780): avc: denied { write } for pid=17306 comm="syz.4.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 995.313206][ T30] audit: type=1400 audit(1758557481.546:2781): avc: denied { nlmsg_write } for pid=17306 comm="syz.4.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 995.318230][ T92] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 995.337489][ T30] audit: type=1400 audit(1758557481.686:2782): avc: denied { create } for pid=17308 comm="syz.0.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 995.367626][ T30] audit: type=1400 audit(1758557481.686:2783): avc: denied { ioctl } for pid=17308 comm="syz.0.2813" path="socket:[66254]" dev="sockfs" ino=66254 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 995.394254][ T30] audit: type=1400 audit(1758557481.686:2784): avc: denied { setopt } for pid=17308 comm="syz.0.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 995.665158][T17324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 996.058520][ T92] usb 4-1: device descriptor read/8, error -71 [ 996.193091][ T30] audit: type=1400 audit(1758557483.516:2785): avc: denied { write } for pid=17337 comm="syz.3.2819" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 996.448345][T17343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 996.474207][T17338] block nbd3: NBD_DISCONNECT [ 996.480248][T17338] block nbd3: Disconnected due to user request. [ 996.510870][T17338] block nbd3: shutting down sockets [ 996.663886][ T5952] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 996.780489][T17359] FAULT_INJECTION: forcing a failure. [ 996.780489][T17359] name failslab, interval 1, probability 0, space 0, times 0 [ 996.826289][ T5952] usb 5-1: config 15 has an invalid interface number: 192 but max is 0 [ 996.837048][ T5952] usb 5-1: config 15 has no interface number 0 [ 996.857658][T17359] CPU: 1 UID: 0 PID: 17359 Comm: syz.2.2824 Not tainted syzkaller #0 PREEMPT(full) [ 996.857683][T17359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 996.857691][T17359] Call Trace: [ 996.857696][T17359] [ 996.857701][T17359] dump_stack_lvl+0x16c/0x1f0 [ 996.857720][T17359] should_fail_ex+0x512/0x640 [ 996.857735][T17359] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 996.857749][T17359] should_failslab+0xc2/0x120 [ 996.857762][T17359] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 996.857774][T17359] ? __alloc_skb+0x2b2/0x380 [ 996.857790][T17359] __alloc_skb+0x2b2/0x380 [ 996.857802][T17359] ? __pfx___alloc_skb+0x10/0x10 [ 996.857816][T17359] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 996.857836][T17359] netlink_alloc_large_skb+0x69/0x130 [ 996.857860][T17359] netlink_sendmsg+0x6a1/0xdd0 [ 996.857887][T17359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.857910][T17359] ____sys_sendmsg+0xa95/0xc70 [ 996.857928][T17359] ? copy_msghdr_from_user+0x10a/0x160 [ 996.857942][T17359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.857966][T17359] ___sys_sendmsg+0x134/0x1d0 [ 996.857980][T17359] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.858020][T17359] __sys_sendmsg+0x16d/0x220 [ 996.858042][T17359] ? __pfx___sys_sendmsg+0x10/0x10 [ 996.858076][T17359] do_syscall_64+0xcd/0x4e0 [ 996.858092][T17359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.858104][T17359] RIP: 0033:0x7fe1c218eec9 [ 996.858114][T17359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.858125][T17359] RSP: 002b:00007fe1c2f86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.858136][T17359] RAX: ffffffffffffffda RBX: 00007fe1c23e5fa0 RCX: 00007fe1c218eec9 [ 996.858144][T17359] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 996.858150][T17359] RBP: 00007fe1c2f86090 R08: 0000000000000000 R09: 0000000000000000 [ 996.858157][T17359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.858164][T17359] R13: 00007fe1c23e6038 R14: 00007fe1c23e5fa0 R15: 00007fff1aa5afb8 [ 996.858178][T17359] [ 997.065860][ T5952] usb 5-1: config 15 interface 192 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 1024 [ 997.076082][ T5952] usb 5-1: config 15 interface 192 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 997.089126][ T5952] usb 5-1: config 15 interface 192 has no altsetting 0 [ 997.178038][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2825'. [ 997.270879][ T5952] usb 5-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=72.a7 [ 997.280124][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.293196][ T5952] usb 5-1: Product: syz [ 997.325786][ T5952] usb 5-1: Manufacturer: syz [ 997.367220][ T5952] usb 5-1: SerialNumber: syz [ 997.386258][T17344] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 997.449767][ T30] audit: type=1326 audit(1758557484.756:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 997.493455][ T30] audit: type=1326 audit(1758557484.756:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 997.591880][ T30] audit: type=1326 audit(1758557484.756:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17365 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 997.625711][ T5952] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.793964][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 997.902907][ T5952] usb 5-1: USB disconnect, device number 61 [ 997.961727][ T9781] udevd[9781]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:15.192/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 998.003125][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 998.040211][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.157607][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 998.208518][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 998.236015][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 998.282863][ T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 998.296365][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.453328][ T24] usb 2-1: Product: syz [ 998.487108][ T24] usb 2-1: Manufacturer: syz [ 998.517256][ T24] usb 2-1: SerialNumber: syz [ 998.556669][ T24] usb 2-1: config 0 descriptor?? [ 998.576862][T17372] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 998.596220][ C1] usb 2-1: NFC: Urb failure (status -71) [ 998.609992][ T24] usb 2-1: NFC: Unable to get FW version [ 998.630418][ T24] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90 [ 998.964609][T17397] NILFS (loop0): device size too small [ 999.089547][T17401] FAULT_INJECTION: forcing a failure. [ 999.089547][T17401] name failslab, interval 1, probability 0, space 0, times 0 [ 999.119282][ T5952] usb 2-1: USB disconnect, device number 51 [ 999.192465][T17401] CPU: 0 UID: 0 PID: 17401 Comm: syz.4.2828 Not tainted syzkaller #0 PREEMPT(full) [ 999.192491][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 999.192501][T17401] Call Trace: [ 999.192509][T17401] [ 999.192516][T17401] dump_stack_lvl+0x16c/0x1f0 [ 999.192547][T17401] should_fail_ex+0x512/0x640 [ 999.192569][T17401] ? __kmalloc_noprof+0xbf/0x510 [ 999.192588][T17401] ? io_cache_alloc_new+0x45/0xf0 [ 999.192608][T17401] should_failslab+0xc2/0x120 [ 999.192626][T17401] __kmalloc_noprof+0xd2/0x510 [ 999.192647][T17401] io_cache_alloc_new+0x45/0xf0 [ 999.192667][T17401] __io_prep_rw+0x21d/0x1090 [ 999.192683][T17401] ? __pfx___io_prep_rw+0x10/0x10 [ 999.192696][T17401] ? mark_held_locks+0x49/0x80 [ 999.192721][T17401] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 999.192753][T17401] io_prep_rw+0x24/0x220 [ 999.192768][T17401] io_prep_readv+0x20/0xa0 [ 999.192784][T17401] io_submit_sqes+0x853/0x25c0 [ 999.192814][T17401] __do_sys_io_uring_enter+0xd6a/0x1630 [ 999.192837][T17401] ? __fget_files+0x20e/0x3c0 [ 999.192855][T17401] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 999.192878][T17401] ? fput+0x9b/0xd0 [ 999.192901][T17401] ? ksys_write+0x1ac/0x250 [ 999.192918][T17401] ? __pfx_ksys_write+0x10/0x10 [ 999.192942][T17401] do_syscall_64+0xcd/0x4e0 [ 999.192966][T17401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.192984][T17401] RIP: 0033:0x7f8c25d8eec9 [ 999.192998][T17401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.193014][T17401] RSP: 002b:00007f8c26c55038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 999.193031][T17401] RAX: ffffffffffffffda RBX: 00007f8c25fe6090 RCX: 00007f8c25d8eec9 [ 999.193043][T17401] RDX: 0000000003000000 RSI: 00000000000047ba RDI: 0000000000000008 [ 999.193054][T17401] RBP: 00007f8c26c55090 R08: 0000000000000000 R09: 0000000000000000 [ 999.193064][T17401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.193074][T17401] R13: 00007f8c25fe6128 R14: 00007f8c25fe6090 R15: 00007ffd3001aa98 [ 999.193099][T17401] [ 999.514507][T17410] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2830'. [ 1000.663948][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1000.787033][T17447] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2839'. [ 1000.801861][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1000.801878][ T30] audit: type=1400 audit(1758557488.126:2827): avc: denied { create } for pid=17446 comm="syz.2.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1000.843428][ T30] audit: type=1400 audit(1758557488.166:2828): avc: denied { getopt } for pid=17446 comm="syz.2.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1001.157602][ T30] audit: type=1400 audit(1758557488.376:2829): avc: denied { bind } for pid=17448 comm="syz.3.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1001.401491][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.433508][ T30] audit: type=1400 audit(1758557488.486:2830): avc: denied { connect } for pid=17448 comm="syz.3.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1001.450168][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1001.494659][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1001.509050][ T30] audit: type=1400 audit(1758557488.596:2831): avc: denied { write } for pid=17448 comm="syz.3.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1001.511754][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1001.543075][ T24] usb 2-1: SerialNumber: syz [ 1001.547994][ T30] audit: type=1400 audit(1758557488.756:2832): avc: denied { getattr } for pid=17454 comm="syz.2.2840" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=67610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1001.655630][T17462] FAULT_INJECTION: forcing a failure. [ 1001.655630][T17462] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.669196][T17462] CPU: 1 UID: 0 PID: 17462 Comm: syz.4.2842 Not tainted syzkaller #0 PREEMPT(full) [ 1001.669220][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1001.669231][T17462] Call Trace: [ 1001.669237][T17462] [ 1001.669244][T17462] dump_stack_lvl+0x16c/0x1f0 [ 1001.669273][T17462] should_fail_ex+0x512/0x640 [ 1001.669299][T17462] ? fs_reclaim_acquire+0xae/0x150 [ 1001.669325][T17462] ? tomoyo_encode2+0x100/0x3e0 [ 1001.669350][T17462] should_failslab+0xc2/0x120 [ 1001.669372][T17462] __kmalloc_noprof+0xd2/0x510 [ 1001.669391][T17462] ? d_absolute_path+0x136/0x1a0 [ 1001.669421][T17462] tomoyo_encode2+0x100/0x3e0 [ 1001.669450][T17462] tomoyo_encode+0x29/0x50 [ 1001.669479][T17462] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1001.669513][T17462] tomoyo_path_number_perm+0x245/0x580 [ 1001.669534][T17462] ? tomoyo_path_number_perm+0x237/0x580 [ 1001.669558][T17462] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1001.669582][T17462] ? find_held_lock+0x2b/0x80 [ 1001.669628][T17462] ? find_held_lock+0x2b/0x80 [ 1001.669648][T17462] ? hook_file_ioctl_common+0x145/0x410 [ 1001.669673][T17462] ? __fget_files+0x20e/0x3c0 [ 1001.669698][T17462] security_file_ioctl+0x9b/0x240 [ 1001.669725][T17462] __x64_sys_ioctl+0xb7/0x210 [ 1001.669754][T17462] do_syscall_64+0xcd/0x4e0 [ 1001.669779][T17462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.669797][T17462] RIP: 0033:0x7f8c25d8eec9 [ 1001.669812][T17462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.669830][T17462] RSP: 002b:00007f8c26c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1001.669848][T17462] RAX: ffffffffffffffda RBX: 00007f8c25fe5fa0 RCX: 00007f8c25d8eec9 [ 1001.669860][T17462] RDX: 0000200000000080 RSI: 00000000c0205648 RDI: 0000000000000003 [ 1001.669871][T17462] RBP: 00007f8c26c76090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.669882][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.669893][T17462] R13: 00007f8c25fe6038 R14: 00007f8c25fe5fa0 R15: 00007ffd3001aa98 [ 1001.669919][T17462] [ 1001.669951][T17462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1001.889314][ T5952] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1001.899879][ T24] usb 2-1: 0:2 : does not exist [ 1001.904973][ T24] usb 2-1: unit 5 not found! [ 1001.921924][ T24] usb 2-1: USB disconnect, device number 52 [ 1001.943947][T12597] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1002.008853][ T8424] udevd[8424]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.074042][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 1002.080480][ T5952] usb 3-1: config index 0 descriptor too short (expected 60715, got 43) [ 1002.089220][ T5952] usb 3-1: config 0 has an invalid interface number: 192 but max is 0 [ 1002.097869][ T5952] usb 3-1: config 0 has no interface number 0 [ 1002.104559][ T5952] usb 3-1: config 0 interface 192 has no altsetting 0 [ 1002.150117][T12597] usb 1-1: Using ep0 maxpacket: 16 [ 1002.265360][T17469] syz_tun: entered allmulticast mode [ 1002.380997][ T5952] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0022, bcdDevice=f4.c6 [ 1002.461739][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.470524][ T5952] usb 3-1: Product: syz [ 1002.475090][ T5952] usb 3-1: Manufacturer: syz [ 1002.479812][T12597] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1002.488349][ T5952] usb 3-1: SerialNumber: syz [ 1002.492981][T12597] usb 1-1: config 0 has no interface number 0 [ 1002.499991][T12597] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1002.511639][ T5952] usb 3-1: config 0 descriptor?? [ 1002.516742][T12597] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1002.529294][T12597] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1002.538400][T12597] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1002.546608][T12597] usb 1-1: Product: syz [ 1002.550809][T12597] usb 1-1: SerialNumber: syz [ 1002.557442][T12597] usb 1-1: config 0 descriptor?? [ 1002.567116][T12597] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1002.594298][T17463] syz_tun: left allmulticast mode [ 1002.608690][T12597] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input168 [ 1002.741382][ T5952] kvaser_usb 3-1:0.192: error -EPROTO: Cannot get software info [ 1002.755701][ T5952] kvaser_usb 3-1:0.192: probe with driver kvaser_usb failed with error -71 [ 1002.783886][ T5952] usb 3-1: USB disconnect, device number 45 [ 1002.851916][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1002.863135][ T30] audit: type=1400 audit(1758557490.186:2833): avc: denied { create } for pid=17473 comm="syz.3.2846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1003.047792][T17478] FAULT_INJECTION: forcing a failure. [ 1003.047792][T17478] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.067718][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1003.073840][T17478] CPU: 0 UID: 0 PID: 17478 Comm: syz.4.2847 Not tainted syzkaller #0 PREEMPT(full) [ 1003.073862][T17478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1003.073871][T17478] Call Trace: [ 1003.073877][T17478] [ 1003.073883][T17478] dump_stack_lvl+0x16c/0x1f0 [ 1003.073908][T17478] should_fail_ex+0x512/0x640 [ 1003.073928][T17478] ? fs_reclaim_acquire+0xae/0x150 [ 1003.073952][T17478] ? tomoyo_encode2+0x100/0x3e0 [ 1003.073974][T17478] should_failslab+0xc2/0x120 [ 1003.073993][T17478] __kmalloc_noprof+0xd2/0x510 [ 1003.074015][T17478] tomoyo_encode2+0x100/0x3e0 [ 1003.074041][T17478] tomoyo_encode+0x29/0x50 [ 1003.074062][T17478] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1003.074087][T17478] ? tomoyo_profile+0x47/0x60 [ 1003.074105][T17478] tomoyo_path_number_perm+0x245/0x580 [ 1003.074124][T17478] ? tomoyo_path_number_perm+0x237/0x580 [ 1003.074145][T17478] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1003.074166][T17478] ? find_held_lock+0x2b/0x80 [ 1003.074206][T17478] ? find_held_lock+0x2b/0x80 [ 1003.074224][T17478] ? hook_file_ioctl_common+0x145/0x410 [ 1003.074246][T17478] ? __fget_files+0x20e/0x3c0 [ 1003.074268][T17478] security_file_ioctl+0x9b/0x240 [ 1003.074292][T17478] __x64_sys_ioctl+0xb7/0x210 [ 1003.074318][T17478] do_syscall_64+0xcd/0x4e0 [ 1003.074340][T17478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.074355][T17478] RIP: 0033:0x7f8c25d8eec9 [ 1003.074369][T17478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.074384][T17478] RSP: 002b:00007f8c26c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1003.074399][T17478] RAX: ffffffffffffffda RBX: 00007f8c25fe5fa0 RCX: 00007f8c25d8eec9 [ 1003.074410][T17478] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000004 [ 1003.074419][T17478] RBP: 00007f8c26c76090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.074429][T17478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.074438][T17478] R13: 00007f8c25fe6038 R14: 00007f8c25fe5fa0 R15: 00007ffd3001aa98 [ 1003.074460][T17478] [ 1003.074475][T17478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1003.074899][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1003.293746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.300590][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1003.307735][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1003.314869][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1003.321918][ T5952] usb 1-1: USB disconnect, device number 59 [ 1003.327898][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1003.327922][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1003.348409][ T5952] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1003.574949][ T92] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1003.586462][T17483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1003.744027][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 1003.800405][ T92] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1003.895382][ T92] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1003.947039][ T92] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.980915][ T92] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1004.003932][ T92] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1004.016995][ T92] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1004.029160][ T92] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1004.141757][ T92] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1004.162715][ T92] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1004.179525][ T92] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1004.552140][ T92] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1004.561813][ T92] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1004.594407][ T92] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1004.614917][ T92] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1004.615812][ T30] audit: type=1400 audit(1758557491.946:2834): avc: denied { write } for pid=17499 comm="syz.2.2854" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1004.650328][ T92] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1004.662781][T17500] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2854' sets config #-1 [ 1004.760049][ T92] usb 4-1: string descriptor 0 read error: -22 [ 1004.782425][ T92] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1004.791830][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.809536][ T92] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1005.328390][ T5952] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1005.407692][T12597] usb 4-1: USB disconnect, device number 55 [ 1005.495944][ T5952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1005.504670][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.514890][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1005.524643][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1005.534496][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1005.546668][ T5952] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1005.555861][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.564153][ T24] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1005.571836][ T5952] usb 5-1: Product: syz [ 1005.576288][ T5952] usb 5-1: Manufacturer: syz [ 1005.581264][ T5952] usb 5-1: SerialNumber: syz [ 1005.587800][ T5952] usb 5-1: config 0 descriptor?? [ 1005.593294][T17498] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1005.602592][ C1] usb 5-1: NFC: Urb failure (status -71) [ 1005.608486][ T5954] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1005.616697][ T5952] usb 5-1: NFC: Unable to get FW version [ 1005.622894][ T5952] pn533_usb 5-1:0.0: probe with driver pn533_usb failed with error -90 [ 1005.725403][ T24] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 1005.734567][ T24] usb 3-1: config 150 has no interface number 0 [ 1005.745561][ T24] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1005.752841][ T24] usb 3-1: config 150 interface 1 has no altsetting 0 [ 1005.762383][ T24] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1005.771689][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.779748][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 1005.785559][ T24] usb 3-1: Product: syz [ 1005.790717][ T24] usb 3-1: Manufacturer: syz [ 1005.795566][ T5954] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1005.804039][ T5954] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1005.812691][ T24] usb 3-1: SerialNumber: syz [ 1005.830456][ T5954] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1005.842205][ T30] audit: type=1326 audit(1758557493.156:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34adf8eec9 code=0x7ffc0000 [ 1005.844987][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1005.887811][ T92] usb 5-1: USB disconnect, device number 62 [ 1005.894128][ T30] audit: type=1326 audit(1758557493.156:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34adf8eec9 code=0x7ffc0000 [ 1005.913985][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1005.949941][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1006.001883][ T5954] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1006.017023][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.054129][ T30] audit: type=1326 audit(1758557493.156:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f34adf8eec9 code=0x7ffc0000 [ 1006.085936][ T5954] usb 2-1: config 0 descriptor?? [ 1006.136832][ T30] audit: type=1326 audit(1758557493.156:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34adf8eec9 code=0x7ffc0000 [ 1006.188830][ T30] audit: type=1326 audit(1758557493.156:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34adf8eec9 code=0x7ffc0000 [ 1006.235461][ T30] audit: type=1326 audit(1758557493.156:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34adf8eec9 code=0x7ffc0000 [ 1006.260331][ T30] audit: type=1326 audit(1758557493.156:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34adf8eec9 code=0x7ffc0000 [ 1006.285094][ T30] audit: type=1326 audit(1758557493.156:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f34adf8eec9 code=0x7ffc0000 [ 1006.439353][ T30] audit: type=1326 audit(1758557493.156:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34adf8eec9 code=0x7ffc0000 [ 1006.480602][ T30] audit: type=1326 audit(1758557493.156:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17505 comm="syz.0.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34adf8d710 code=0x7ffc0000 [ 1006.484796][T17504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.504266][ C0] vkms_vblank_simulate: vblank timer overrun [ 1006.677319][T17504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.844672][ T5954] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1006.977573][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2855'. [ 1007.629031][ T24] xr_serial 3-1:150.204: xr_serial converter detected [ 1007.702923][ T24] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1007.740128][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1007.927264][ T24] usb 3-1: USB disconnect, device number 46 [ 1008.070625][ T24] xr_serial 3-1:150.204: device disconnected [ 1008.408224][ T92] usb 2-1: USB disconnect, device number 53 [ 1008.466422][ T92] usblp0: removed [ 1008.849048][T17567] NILFS (loop0): device size too small [ 1008.886707][T17569] openvswitch: netlink: Flow key attr not present in new flow. [ 1009.423970][ T5954] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1009.604034][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 1009.619412][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.640762][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.706031][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1009.742524][ T5954] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1009.759291][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.775203][ T5954] usb 3-1: config 0 descriptor?? [ 1009.993904][ T92] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1010.154097][ T92] usb 2-1: device descriptor read/64, error -71 [ 1010.212758][ T5954] HID 045e:07da: Invalid code 65791 type 1 [ 1010.231443][ T5954] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0025/input/input169 [ 1010.294566][ T5954] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1010.455129][ T92] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1010.479343][ T5954] usb 3-1: USB disconnect, device number 47 [ 1010.695471][ T92] usb 2-1: device descriptor read/64, error -71 [ 1010.804427][ T92] usb usb2-port1: attempt power cycle [ 1011.163910][ T92] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1011.184342][ T92] usb 2-1: device descriptor read/8, error -71 [ 1011.289962][T17615] FAULT_INJECTION: forcing a failure. [ 1011.289962][T17615] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.302777][T17615] CPU: 1 UID: 0 PID: 17615 Comm: syz.4.2883 Not tainted syzkaller #0 PREEMPT(full) [ 1011.302801][T17615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1011.302812][T17615] Call Trace: [ 1011.302819][T17615] [ 1011.302826][T17615] dump_stack_lvl+0x16c/0x1f0 [ 1011.302853][T17615] should_fail_ex+0x512/0x640 [ 1011.302874][T17615] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1011.302896][T17615] should_failslab+0xc2/0x120 [ 1011.302915][T17615] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1011.302932][T17615] ? __alloc_skb+0x2b2/0x380 [ 1011.302955][T17615] __alloc_skb+0x2b2/0x380 [ 1011.302974][T17615] ? __pfx___alloc_skb+0x10/0x10 [ 1011.302996][T17615] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1011.303023][T17615] netlink_alloc_large_skb+0x69/0x130 [ 1011.303047][T17615] netlink_sendmsg+0x6a1/0xdd0 [ 1011.303074][T17615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.303107][T17615] ____sys_sendmsg+0xa95/0xc70 [ 1011.303135][T17615] ? copy_msghdr_from_user+0x10a/0x160 [ 1011.303156][T17615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1011.303194][T17615] ___sys_sendmsg+0x134/0x1d0 [ 1011.303217][T17615] ? __pfx____sys_sendmsg+0x10/0x10 [ 1011.303267][T17615] __sys_sendmsg+0x16d/0x220 [ 1011.303290][T17615] ? __pfx___sys_sendmsg+0x10/0x10 [ 1011.303319][T17615] ? fput+0x9b/0xd0 [ 1011.303345][T17615] do_syscall_64+0xcd/0x4e0 [ 1011.303369][T17615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.303388][T17615] RIP: 0033:0x7f8c25d8eec9 [ 1011.303402][T17615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.303418][T17615] RSP: 002b:00007f8c26c76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1011.303436][T17615] RAX: ffffffffffffffda RBX: 00007f8c25fe5fa0 RCX: 00007f8c25d8eec9 [ 1011.303446][T17615] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1011.303463][T17615] RBP: 00007f8c26c76090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.303473][T17615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.303483][T17615] R13: 00007f8c25fe6038 R14: 00007f8c25fe5fa0 R15: 00007ffd3001aa98 [ 1011.303506][T17615] [ 1011.577310][ T92] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1011.578499][T17618] FAULT_INJECTION: forcing a failure. [ 1011.578499][T17618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1011.601360][T17618] CPU: 0 UID: 0 PID: 17618 Comm: syz.4.2884 Not tainted syzkaller #0 PREEMPT(full) [ 1011.601388][T17618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1011.601398][T17618] Call Trace: [ 1011.601405][T17618] [ 1011.601413][T17618] dump_stack_lvl+0x16c/0x1f0 [ 1011.601440][T17618] should_fail_ex+0x512/0x640 [ 1011.601466][T17618] strncpy_from_user+0x3b/0x2e0 [ 1011.601490][T17618] getname_flags.part.0+0x8f/0x550 [ 1011.601520][T17618] getname_flags+0x93/0xf0 [ 1011.601539][T17618] do_sys_openat2+0xb8/0x1d0 [ 1011.601568][T17618] ? __pfx_do_sys_openat2+0x10/0x10 [ 1011.601595][T17618] ? __fget_files+0x20e/0x3c0 [ 1011.601620][T17618] __x64_sys_openat+0x174/0x210 [ 1011.601644][T17618] ? __pfx___x64_sys_openat+0x10/0x10 [ 1011.601668][T17618] ? ksys_write+0x1ac/0x250 [ 1011.601695][T17618] do_syscall_64+0xcd/0x4e0 [ 1011.601720][T17618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.601739][T17618] RIP: 0033:0x7f8c25d8d710 [ 1011.601754][T17618] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1011.601771][T17618] RSP: 002b:00007f8c26c75b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1011.601788][T17618] RAX: ffffffffffffffda RBX: 0000000000022081 RCX: 00007f8c25d8d710 [ 1011.601800][T17618] RDX: 0000000000022081 RSI: 00007f8c26c75c10 RDI: 00000000ffffff9c [ 1011.601812][T17618] RBP: 00007f8c26c75c10 R08: 0000000000000000 R09: 002367732f766564 [ 1011.601823][T17618] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1011.601834][T17618] R13: 00007f8c25fe6038 R14: 00007f8c25fe5fa0 R15: 00007ffd3001aa98 [ 1011.601860][T17618] [ 1011.782821][ T92] usb 2-1: device descriptor read/8, error -71 [ 1011.894078][ T92] usb usb2-port1: unable to enumerate USB device [ 1011.938373][T17625] NILFS (loop3): device size too small [ 1012.054179][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1012.207321][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1012.222829][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1012.234592][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1012.247794][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1012.258890][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.297814][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1012.349678][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.588745][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 1012.596994][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1012.744433][ T5912] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1012.770968][T17634] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2891'. [ 1012.798647][ T24] usb 5-1: USB disconnect, device number 63 [ 1012.808836][T17634] openvswitch: netlink: Flow key attr not present in new flow. [ 1012.923925][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 1012.932653][ T5912] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1012.941120][ T5912] usb 1-1: config 0 has no interface number 0 [ 1012.950303][ T5912] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1012.962999][ T5912] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1012.982128][ T5912] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1012.993140][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1013.002794][ T5912] usb 1-1: Product: syz [ 1013.007997][ T5912] usb 1-1: SerialNumber: syz [ 1013.015844][ T5912] usb 1-1: config 0 descriptor?? [ 1013.022632][ T5912] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1013.031212][ T5912] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input170 [ 1013.063922][ T5952] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1013.203861][ T5954] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1013.223846][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 1013.231532][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1013.243587][ T5952] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1013.253031][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.261824][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1013.281213][ T5952] usb 3-1: Product: syz [ 1013.285875][ T5952] usb 3-1: Manufacturer: syz [ 1013.290561][ T5952] usb 3-1: SerialNumber: syz [ 1013.353839][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 1013.365403][ T5952] usb 3-1: config 0 descriptor?? [ 1013.383130][ T5952] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1013.394237][ T5954] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1013.407870][ T5954] usb 2-1: config 0 has no interface number 0 [ 1013.419606][ T5952] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1013.426858][ T5954] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1013.445036][ T5954] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1013.455904][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1013.465433][ T5954] usb 2-1: Product: syz [ 1013.470089][ T5954] usb 2-1: SerialNumber: syz [ 1013.476959][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1013.477943][ T24] usb 1-1: USB disconnect, device number 60 [ 1013.483904][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1013.504891][ T5954] usb 2-1: config 0 descriptor?? [ 1013.519140][ T5954] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1013.529976][ T24] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1013.653146][T17634] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1013.817497][ T5952] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1014.008341][ T5952] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1014.234913][ T5952] em28xx 3-1:0.0: board has no eeprom [ 1014.733523][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1014.733541][ T30] audit: type=1400 audit(1758557501.966:2906): avc: denied { map } for pid=17654 comm="syz.2.2895" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1014.764212][ C1] vkms_vblank_simulate: vblank timer overrun [ 1014.776439][T17664] FAULT_INJECTION: forcing a failure. [ 1014.776439][T17664] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.790153][T17664] CPU: 1 UID: 0 PID: 17664 Comm: syz.0.2896 Not tainted syzkaller #0 PREEMPT(full) [ 1014.790179][T17664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1014.790191][T17664] Call Trace: [ 1014.790204][T17664] [ 1014.790212][T17664] dump_stack_lvl+0x16c/0x1f0 [ 1014.790240][T17664] should_fail_ex+0x512/0x640 [ 1014.790262][T17664] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1014.790287][T17664] should_failslab+0xc2/0x120 [ 1014.790308][T17664] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1014.790328][T17664] ? __alloc_skb+0x2b2/0x380 [ 1014.790358][T17664] __alloc_skb+0x2b2/0x380 [ 1014.790379][T17664] ? __pfx___alloc_skb+0x10/0x10 [ 1014.790403][T17664] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1014.790434][T17664] netlink_alloc_large_skb+0x69/0x130 [ 1014.790459][T17664] netlink_sendmsg+0x6a1/0xdd0 [ 1014.790486][T17664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.790520][T17664] ____sys_sendmsg+0xa95/0xc70 [ 1014.790547][T17664] ? copy_msghdr_from_user+0x10a/0x160 [ 1014.790570][T17664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1014.790608][T17664] ___sys_sendmsg+0x134/0x1d0 [ 1014.790632][T17664] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.790686][T17664] __sys_sendmsg+0x16d/0x220 [ 1014.790709][T17664] ? __pfx___sys_sendmsg+0x10/0x10 [ 1014.790748][T17664] do_syscall_64+0xcd/0x4e0 [ 1014.790775][T17664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.790793][T17664] RIP: 0033:0x7f34adf8eec9 [ 1014.790809][T17664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.790826][T17664] RSP: 002b:00007f34aeddd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.790844][T17664] RAX: ffffffffffffffda RBX: 00007f34ae1e5fa0 RCX: 00007f34adf8eec9 [ 1014.790856][T17664] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000005 [ 1014.790867][T17664] RBP: 00007f34aeddd090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.790878][T17664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.790888][T17664] R13: 00007f34ae1e6038 R14: 00007f34ae1e5fa0 R15: 00007ffcd2fd7ae8 [ 1014.790914][T17664] [ 1015.000470][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.114810][ T5952] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1015.122861][ T5952] em28xx 3-1:0.0: dvb set to bulk mode. [ 1015.130140][T12597] em28xx 3-1:0.0: Binding DVB extension [ 1015.143056][ T5952] usb 3-1: USB disconnect, device number 48 [ 1015.191893][T12597] em28xx 3-1:0.0: Registering input extension [ 1015.202656][ T5952] em28xx 3-1:0.0: Disconnecting em28xx [ 1015.210496][ T5952] em28xx 3-1:0.0: Closing input extension [ 1015.233273][ T5952] em28xx 3-1:0.0: Freeing device [ 1015.343591][T17674] IPVS: set_ctl: invalid protocol: 58 10.1.5.1:0 [ 1015.352628][T17674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.697434][ T30] audit: type=1400 audit(1758557503.016:2907): avc: denied { name_connect } for pid=17676 comm="syz.2.2900" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1015.972758][ T30] audit: type=1400 audit(1758557503.096:2908): avc: denied { listen } for pid=17676 comm="syz.2.2900" lport=35539 faddr=::ffff:172.20.255.187 fport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1015.996533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.046664][T12597] usb 2-1: USB disconnect, device number 58 [ 1016.132705][ T30] audit: type=1400 audit(1758557503.106:2909): avc: denied { shutdown } for pid=17676 comm="syz.2.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1016.500557][ T30] audit: type=1400 audit(1758557503.106:2910): avc: denied { ioctl } for pid=17676 comm="syz.2.2900" path="socket:[67230]" dev="sockfs" ino=67230 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1017.301587][ T30] audit: type=1400 audit(1758557503.596:2911): avc: denied { create } for pid=17689 comm="syz.3.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1017.430394][ T30] audit: type=1400 audit(1758557503.606:2912): avc: denied { setopt } for pid=17689 comm="syz.3.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1017.986768][T17715] FAULT_INJECTION: forcing a failure. [ 1017.986768][T17715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.000073][T17715] CPU: 0 UID: 0 PID: 17715 Comm: syz.3.2908 Not tainted syzkaller #0 PREEMPT(full) [ 1018.000097][T17715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1018.000106][T17715] Call Trace: [ 1018.000111][T17715] [ 1018.000115][T17715] dump_stack_lvl+0x16c/0x1f0 [ 1018.000134][T17715] should_fail_ex+0x512/0x640 [ 1018.000151][T17715] _copy_to_user+0x32/0xd0 [ 1018.000169][T17715] simple_read_from_buffer+0xcb/0x170 [ 1018.000182][T17715] proc_fail_nth_read+0x197/0x240 [ 1018.000196][T17715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.000210][T17715] ? rw_verify_area+0xcf/0x6c0 [ 1018.000227][T17715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.000240][T17715] vfs_read+0x1e1/0xcf0 [ 1018.000253][T17715] ? __pfx___mutex_lock+0x10/0x10 [ 1018.000269][T17715] ? __pfx_vfs_read+0x10/0x10 [ 1018.000284][T17715] ? __fget_files+0x20e/0x3c0 [ 1018.000301][T17715] ksys_read+0x12a/0x250 [ 1018.000312][T17715] ? __pfx_ksys_read+0x10/0x10 [ 1018.000327][T17715] do_syscall_64+0xcd/0x4e0 [ 1018.000343][T17715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.000355][T17715] RIP: 0033:0x7f7b46b8d8dc [ 1018.000364][T17715] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1018.000376][T17715] RSP: 002b:00007f7b479e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1018.000387][T17715] RAX: ffffffffffffffda RBX: 00007f7b46de6090 RCX: 00007f7b46b8d8dc [ 1018.000394][T17715] RDX: 000000000000000f RSI: 00007f7b479e70a0 RDI: 0000000000000005 [ 1018.000401][T17715] RBP: 00007f7b479e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.000408][T17715] R10: 00000000000000f8 R11: 0000000000000246 R12: 0000000000000001 [ 1018.000415][T17715] R13: 00007f7b46de6128 R14: 00007f7b46de6090 R15: 00007fff79c1f228 [ 1018.000429][T17715] [ 1018.370190][ T30] audit: type=1400 audit(1758557505.696:2913): avc: denied { create } for pid=17716 comm="syz.3.2911" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1019.454054][ T30] audit: type=1400 audit(1758557506.766:2914): avc: denied { create } for pid=17730 comm="syz.1.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1019.728198][T17735] overlay: ./file0 is not a directory [ 1019.762988][ T30] audit: type=1400 audit(1758557506.766:2915): avc: denied { bind } for pid=17730 comm="syz.1.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1019.797016][ T30] audit: type=1400 audit(1758557507.076:2916): avc: denied { read append } for pid=17716 comm="syz.3.2911" name="file0" dev="tmpfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1019.832165][ T30] audit: type=1400 audit(1758557507.076:2917): avc: denied { open } for pid=17716 comm="syz.3.2911" path="/586/file0" dev="tmpfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1020.212459][ T30] audit: type=1326 audit(1758557507.536:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17750 comm="syz.1.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 1020.338074][ T30] audit: type=1326 audit(1758557507.536:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17750 comm="syz.1.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 1020.392527][ T30] audit: type=1326 audit(1758557507.536:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17750 comm="syz.1.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 1020.488531][ T30] audit: type=1326 audit(1758557507.536:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17750 comm="syz.1.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 1020.587914][ T30] audit: type=1326 audit(1758557507.536:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17750 comm="syz.1.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 1020.743892][ T30] audit: type=1326 audit(1758557507.536:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17750 comm="syz.1.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 1020.767883][ T30] audit: type=1326 audit(1758557507.536:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17750 comm="syz.1.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 1021.128573][T17776] FAULT_INJECTION: forcing a failure. [ 1021.128573][T17776] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.202172][T17776] CPU: 0 UID: 0 PID: 17776 Comm: syz.3.2922 Not tainted syzkaller #0 PREEMPT(full) [ 1021.202200][T17776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1021.202210][T17776] Call Trace: [ 1021.202217][T17776] [ 1021.202225][T17776] dump_stack_lvl+0x16c/0x1f0 [ 1021.202253][T17776] should_fail_ex+0x512/0x640 [ 1021.202275][T17776] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1021.202300][T17776] should_failslab+0xc2/0x120 [ 1021.202320][T17776] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1021.202340][T17776] ? __alloc_skb+0x2b2/0x380 [ 1021.202365][T17776] __alloc_skb+0x2b2/0x380 [ 1021.202385][T17776] ? __pfx___alloc_skb+0x10/0x10 [ 1021.202408][T17776] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1021.202438][T17776] netlink_alloc_large_skb+0x69/0x130 [ 1021.202464][T17776] netlink_sendmsg+0x6a1/0xdd0 [ 1021.202491][T17776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1021.202524][T17776] ____sys_sendmsg+0xa95/0xc70 [ 1021.202553][T17776] ? copy_msghdr_from_user+0x10a/0x160 [ 1021.202575][T17776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1021.202614][T17776] ___sys_sendmsg+0x134/0x1d0 [ 1021.202638][T17776] ? __pfx____sys_sendmsg+0x10/0x10 [ 1021.202690][T17776] __sys_sendmsg+0x16d/0x220 [ 1021.202713][T17776] ? __pfx___sys_sendmsg+0x10/0x10 [ 1021.202752][T17776] do_syscall_64+0xcd/0x4e0 [ 1021.202779][T17776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.202798][T17776] RIP: 0033:0x7f7b46b8eec9 [ 1021.202814][T17776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.202831][T17776] RSP: 002b:00007f7b47a08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1021.202849][T17776] RAX: ffffffffffffffda RBX: 00007f7b46de5fa0 RCX: 00007f7b46b8eec9 [ 1021.202861][T17776] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 1021.202872][T17776] RBP: 00007f7b47a08090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.202883][T17776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.202894][T17776] R13: 00007f7b46de6038 R14: 00007f7b46de5fa0 R15: 00007fff79c1f228 [ 1021.202917][T17776] [ 1021.777702][T17788] : entered promiscuous mode [ 1023.430901][T17813] dummy0: entered promiscuous mode [ 1023.458561][T17813] bond_slave_0: entered promiscuous mode [ 1023.478762][T17813] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 1023.499432][T17813] hsr1: entered promiscuous mode [ 1023.506049][T17811] NILFS (loop1): device size too small [ 1024.809918][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 1024.809938][ T30] audit: type=1326 audit(1758557512.136:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17821 comm="syz.1.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 1024.953547][ T30] audit: type=1326 audit(1758557512.176:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17821 comm="syz.1.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ee78eec9 code=0x7ffc0000 [ 1025.614264][T17839] xt_l2tp: unknown flags: 51 [ 1026.263963][ T30] audit: type=1326 audit(1758557513.566:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 1026.313913][ T5952] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1026.337947][ T30] audit: type=1326 audit(1758557513.566:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 1026.424567][ T30] audit: type=1326 audit(1758557513.566:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 1026.455604][ T30] audit: type=1326 audit(1758557513.566:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 1026.561087][T17857] FAULT_INJECTION: forcing a failure. [ 1026.561087][T17857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.562698][T17857] [ 1026.562703][T17857] ====================================================== [ 1026.562708][T17857] WARNING: possible circular locking dependency detected [ 1026.562713][T17857] syzkaller #0 Not tainted [ 1026.562720][T17857] ------------------------------------------------------ [ 1026.562723][T17857] syz.0.2944/17857 is trying to acquire lock: [ 1026.562729][T17857] ffffffff8e4cebc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 1026.562759][T17857] [ 1026.562759][T17857] but task is already holding lock: [ 1026.562762][T17857] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1026.562787][T17857] [ 1026.562787][T17857] which lock already depends on the new lock. [ 1026.562787][T17857] [ 1026.562791][T17857] [ 1026.562791][T17857] the existing dependency chain (in reverse order) is: [ 1026.562795][T17857] [ 1026.562795][T17857] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1026.562808][T17857] _raw_spin_lock_nested+0x31/0x40 [ 1026.562820][T17857] raw_spin_rq_lock_nested+0x29/0x130 [ 1026.562832][T17857] task_rq_lock+0xcf/0x490 [ 1026.562844][T17857] cgroup_move_task+0x81/0x2a0 [ 1026.562858][T17857] css_set_move_task+0x288/0x5f0 [ 1026.562868][T17857] cgroup_post_fork+0x201/0x9e0 [ 1026.562881][T17857] copy_process+0x5cfa/0x7690 [ 1026.562895][T17857] kernel_clone+0xfc/0x930 [ 1026.562909][T17857] user_mode_thread+0xc7/0x110 [ 1026.562923][T17857] rest_init+0x23/0x2b0 [ 1026.562939][T17857] start_kernel+0x3ee/0x4d0 [ 1026.562951][T17857] x86_64_start_reservations+0x18/0x30 [ 1026.562964][T17857] x86_64_start_kernel+0x130/0x190 [ 1026.562976][T17857] common_startup_64+0x13e/0x148 [ 1026.562988][T17857] [ 1026.562988][T17857] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1026.563001][T17857] _raw_spin_lock_irqsave+0x3a/0x60 [ 1026.563012][T17857] try_to_wake_up+0xb7/0x1870 [ 1026.563024][T17857] autoremove_wake_function+0x16/0x150 [ 1026.563039][T17857] __wake_up_common+0x135/0x1f0 [ 1026.563055][T17857] __wake_up+0x31/0x60 [ 1026.563068][T17857] file_tty_write.constprop.0+0x603/0x9b0 [ 1026.563081][T17857] iter_file_splice_write+0xa21/0x12e0 [ 1026.563093][T17857] direct_splice_actor+0x192/0x6c0 [ 1026.563104][T17857] splice_direct_to_actor+0x342/0xa30 [ 1026.563114][T17857] do_splice_direct+0x174/0x240 [ 1026.563124][T17857] do_sendfile+0xb06/0xe50 [ 1026.563133][T17857] __x64_sys_sendfile64+0x1d8/0x220 [ 1026.563146][T17857] do_syscall_64+0xcd/0x4e0 [ 1026.563161][T17857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.563173][T17857] [ 1026.563173][T17857] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1026.563187][T17857] _raw_spin_lock_irqsave+0x3a/0x60 [ 1026.563198][T17857] __wake_up+0x1c/0x60 [ 1026.563211][T17857] tty_port_default_wakeup+0x2a/0x40 [ 1026.563225][T17857] serial8250_tx_chars+0x68e/0x860 [ 1026.563240][T17857] serial8250_handle_irq+0x761/0xcb0 [ 1026.563255][T17857] serial8250_default_handle_irq+0x9a/0x250 [ 1026.563271][T17857] serial8250_interrupt+0xf5/0x1b0 [ 1026.563287][T17857] __handle_irq_event_percpu+0x22c/0x7d0 [ 1026.563300][T17857] handle_irq_event+0xab/0x1e0 [ 1026.563312][T17857] handle_edge_irq+0x3ca/0x9e0 [ 1026.563324][T17857] __common_interrupt+0xcd/0x2f0 [ 1026.563338][T17857] common_interrupt+0xba/0xe0 [ 1026.563354][T17857] asm_common_interrupt+0x26/0x40 [ 1026.563364][T17857] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1026.563376][T17857] uart_write+0x2a4/0xb30 [ 1026.563388][T17857] n_tty_write+0x41c/0x11e0 [ 1026.563402][T17857] file_tty_write.constprop.0+0x504/0x9b0 [ 1026.563424][T17857] redirected_tty_write+0xd4/0x150 [ 1026.563436][T17857] vfs_write+0x7d3/0x11d0 [ 1026.563446][T17857] ksys_write+0x12a/0x250 [ 1026.563455][T17857] do_syscall_64+0xcd/0x4e0 [ 1026.563469][T17857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.563479][T17857] [ 1026.563479][T17857] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1026.563492][T17857] _raw_spin_lock_irqsave+0x3a/0x60 [ 1026.563503][T17857] serial8250_console_write+0x181/0x1890 [ 1026.563519][T17857] console_flush_all+0x801/0xc60 [ 1026.563531][T17857] console_unlock+0xd8/0x210 [ 1026.563542][T17857] vprintk_emit+0x418/0x6d0 [ 1026.563554][T17857] _printk+0xc7/0x100 [ 1026.563563][T17857] register_console+0xc2d/0x11b0 [ 1026.563575][T17857] univ8250_console_init+0x5f/0x90 [ 1026.563590][T17857] console_init+0x14f/0x680 [ 1026.563603][T17857] start_kernel+0x29f/0x4d0 [ 1026.563614][T17857] x86_64_start_reservations+0x18/0x30 [ 1026.563626][T17857] x86_64_start_kernel+0x130/0x190 [ 1026.563638][T17857] common_startup_64+0x13e/0x148 [ 1026.563649][T17857] [ 1026.563649][T17857] -> #0 (console_owner){-.-.}-{0:0}: [ 1026.563662][T17857] __lock_acquire+0x12a6/0x1ce0 [ 1026.563677][T17857] lock_acquire+0x179/0x350 [ 1026.563685][T17857] console_lock_spinning_enable+0xb0/0xd0 [ 1026.563697][T17857] console_flush_all+0x7aa/0xc60 [ 1026.563709][T17857] console_unlock+0xd8/0x210 [ 1026.563721][T17857] vprintk_emit+0x418/0x6d0 [ 1026.563733][T17857] _printk+0xc7/0x100 [ 1026.563741][T17857] should_fail_ex+0x4e7/0x640 [ 1026.563754][T17857] strncpy_from_user+0x3b/0x2e0 [ 1026.563766][T17857] strncpy_from_user_nofault+0x7f/0x180 [ 1026.563783][T17857] bpf_bprintf_prepare+0xe90/0x13f0 [ 1026.563805][T17857] bpf_trace_printk+0xda/0x190 [ 1026.563818][T17857] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1026.563827][T17857] bpf_trace_run2+0x236/0x590 [ 1026.563837][T17857] __bpf_trace_contention_begin+0xc9/0x110 [ 1026.563854][T17857] trace_contention_begin.constprop.0+0xde/0x160 [ 1026.563866][T17857] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1026.563879][T17857] do_raw_spin_lock+0x20e/0x2b0 [ 1026.563889][T17857] raw_spin_rq_lock_nested+0x7e/0x130 [ 1026.563901][T17857] __schedule+0x307/0x5de0 [ 1026.563912][T17857] preempt_schedule_common+0x44/0xc0 [ 1026.563924][T17857] preempt_schedule_thunk+0x16/0x30 [ 1026.563938][T17857] consume_obj_stock+0x2c2/0x380 [ 1026.563953][T17857] obj_cgroup_charge_account+0x26/0xa0 [ 1026.563964][T17857] __memcg_slab_post_alloc_hook+0x30c/0x960 [ 1026.563976][T17857] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 1026.563987][T17857] sock_alloc_inode+0x25/0x1c0 [ 1026.564002][T17857] alloc_inode+0x61/0x240 [ 1026.564017][T17857] sock_alloc+0x40/0x280 [ 1026.564029][T17857] do_accept+0xf7/0x530 [ 1026.564039][T17857] __sys_accept4+0x100/0x1c0 [ 1026.564048][T17857] __x64_sys_accept4+0x96/0x100 [ 1026.564058][T17857] do_syscall_64+0xcd/0x4e0 [ 1026.564071][T17857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.564080][T17857] [ 1026.564080][T17857] other info that might help us debug this: [ 1026.564080][T17857] [ 1026.564084][T17857] Chain exists of: [ 1026.564084][T17857] console_owner --> &p->pi_lock --> &rq->__lock [ 1026.564084][T17857] [ 1026.564099][T17857] Possible unsafe locking scenario: [ 1026.564099][T17857] [ 1026.564102][T17857] CPU0 CPU1 [ 1026.564105][T17857] ---- ---- [ 1026.564108][T17857] lock(&rq->__lock); [ 1026.564115][T17857] lock(&p->pi_lock); [ 1026.564122][T17857] lock(&rq->__lock); [ 1026.564129][T17857] lock(console_owner); [ 1026.564135][T17857] [ 1026.564135][T17857] *** DEADLOCK *** [ 1026.564135][T17857] [ 1026.564138][T17857] 4 locks held by syz.0.2944/17857: [ 1026.564144][T17857] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1026.564171][T17857] #1: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 1026.564195][T17857] #2: ffffffff8e5af000 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1026.564217][T17857] #3: ffffffff8e5af070 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1026.564242][T17857] [ 1026.564242][T17857] stack backtrace: [ 1026.564248][T17857] CPU: 0 UID: 0 PID: 17857 Comm: syz.0.2944 Not tainted syzkaller #0 PREEMPT(full) [ 1026.564260][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1026.564267][T17857] Call Trace: [ 1026.564271][T17857] [ 1026.564275][T17857] dump_stack_lvl+0x116/0x1f0 [ 1026.564290][T17857] print_circular_bug+0x275/0x350 [ 1026.564306][T17857] check_noncircular+0x14c/0x170 [ 1026.564325][T17857] __lock_acquire+0x12a6/0x1ce0 [ 1026.564344][T17857] lock_acquire+0x179/0x350 [ 1026.564353][T17857] ? console_lock_spinning_enable+0x9f/0xd0 [ 1026.564367][T17857] ? console_lock_spinning_enable+0x88/0xd0 [ 1026.564381][T17857] console_lock_spinning_enable+0xb0/0xd0 [ 1026.564393][T17857] ? console_lock_spinning_enable+0x9f/0xd0 [ 1026.564406][T17857] console_flush_all+0x7aa/0xc60 [ 1026.564425][T17857] ? __pfx_console_flush_all+0x10/0x10 [ 1026.564441][T17857] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1026.564457][T17857] console_unlock+0xd8/0x210 [ 1026.564469][T17857] ? __pfx_console_unlock+0x10/0x10 [ 1026.564482][T17857] ? do_raw_spin_unlock+0xa0/0x230 [ 1026.564494][T17857] ? _printk+0xc7/0x100 [ 1026.564503][T17857] ? __down_trylock_console_sem+0xb0/0x140 [ 1026.564514][T17857] vprintk_emit+0x418/0x6d0 [ 1026.564528][T17857] ? __pfx_vprintk_emit+0x10/0x10 [ 1026.564542][T17857] ? rcu_is_watching+0x12/0xc0 [ 1026.564556][T17857] _printk+0xc7/0x100 [ 1026.564565][T17857] ? __pfx__printk+0x10/0x10 [ 1026.564576][T17857] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1026.564590][T17857] ? __pfx____ratelimit+0x10/0x10 [ 1026.564605][T17857] should_fail_ex+0x4e7/0x640 [ 1026.564619][T17857] strncpy_from_user+0x3b/0x2e0 [ 1026.564631][T17857] ? update_irq_load_avg+0xb5/0xdd0 [ 1026.564647][T17857] strncpy_from_user_nofault+0x7f/0x180 [ 1026.564660][T17857] bpf_bprintf_prepare+0xe90/0x13f0 [ 1026.564678][T17857] ? unwind_get_return_address+0x59/0xa0 [ 1026.564691][T17857] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1026.564710][T17857] ? bpf_trace_run2+0x3e1/0x590 [ 1026.564721][T17857] bpf_trace_printk+0xda/0x190 [ 1026.564731][T17857] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1026.564742][T17857] ? bpf_trace_run2+0x3e1/0x590 [ 1026.564755][T17857] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1026.564763][T17857] bpf_trace_run2+0x236/0x590 [ 1026.564774][T17857] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1026.564785][T17857] ? search_extable+0x82/0xb0 [ 1026.564799][T17857] ? __pfx_search_extable+0x10/0x10 [ 1026.564813][T17857] ? __pfx_check_buffer+0x10/0x10 [ 1026.564830][T17857] __bpf_trace_contention_begin+0xc9/0x110 [ 1026.564848][T17857] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1026.564868][T17857] trace_contention_begin.constprop.0+0xde/0x160 [ 1026.564881][T17857] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1026.564896][T17857] ? __lock_acquire+0xb97/0x1ce0 [ 1026.564913][T17857] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1026.564930][T17857] do_raw_spin_lock+0x20e/0x2b0 [ 1026.564942][T17857] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1026.564954][T17857] ? rcu_qs+0x2b/0xe0 [ 1026.564966][T17857] ? rcu_note_context_switch+0x192/0x1e00 [ 1026.564981][T17857] raw_spin_rq_lock_nested+0x7e/0x130 [ 1026.564994][T17857] ? preempt_schedule_common+0x44/0xc0 [ 1026.565007][T17857] __schedule+0x307/0x5de0 [ 1026.565020][T17857] ? find_held_lock+0x2b/0x80 [ 1026.565033][T17857] ? xa_load+0x149/0x2c0 [ 1026.565049][T17857] ? __pfx___schedule+0x10/0x10 [ 1026.565063][T17857] ? lock_acquire+0x179/0x350 [ 1026.565072][T17857] ? preempt_schedule_thunk+0x16/0x30 [ 1026.565088][T17857] preempt_schedule_common+0x44/0xc0 [ 1026.565101][T17857] preempt_schedule_thunk+0x16/0x30 [ 1026.565117][T17857] consume_obj_stock+0x2c2/0x380 [ 1026.565134][T17857] obj_cgroup_charge_account+0x26/0xa0 [ 1026.565146][T17857] __memcg_slab_post_alloc_hook+0x30c/0x960 [ 1026.565161][T17857] ? kasan_save_track+0x14/0x30 [ 1026.565172][T17857] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 1026.565184][T17857] ? sock_alloc_inode+0x25/0x1c0 [ 1026.565200][T17857] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1026.565214][T17857] sock_alloc_inode+0x25/0x1c0 [ 1026.565229][T17857] alloc_inode+0x61/0x240 [ 1026.565244][T17857] sock_alloc+0x40/0x280 [ 1026.565258][T17857] do_accept+0xf7/0x530 [ 1026.565268][T17857] ? do_raw_spin_lock+0x12c/0x2b0 [ 1026.565280][T17857] ? __pfx_do_accept+0x10/0x10 [ 1026.565294][T17857] __sys_accept4+0x100/0x1c0 [ 1026.565305][T17857] ? __pfx___sys_accept4+0x10/0x10 [ 1026.565316][T17857] ? __pfx_ksys_write+0x10/0x10 [ 1026.565328][T17857] __x64_sys_accept4+0x96/0x100 [ 1026.565339][T17857] ? lockdep_hardirqs_on+0x7c/0x110 [ 1026.565352][T17857] do_syscall_64+0xcd/0x4e0 [ 1026.565367][T17857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.565378][T17857] RIP: 0033:0x7f34adf8eec9 [ 1026.565386][T17857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.565397][T17857] RSP: 002b:00007f34aedbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1026.565407][T17857] RAX: ffffffffffffffda RBX: 00007f34ae1e6090 RCX: 00007f34adf8eec9 [ 1026.565420][T17857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1026.565426][T17857] RBP: 00007f34aedbc090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.565433][T17857] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 1026.565439][T17857] R13: 00007f34ae1e6128 R14: 00007f34ae1e6090 R15: 00007ffcd2fd7ae8 [ 1026.565449][T17857] [ 1026.583450][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1026.587721][T17857] CPU: 0 UID: 0 PID: 17857 Comm: syz.0.2944 Not tainted syzkaller #0 PREEMPT(full) [ 1026.587743][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1026.587753][T17857] Call Trace: [ 1026.587758][T17857] [ 1026.587765][T17857] dump_stack_lvl+0x116/0x1f0 [ 1026.587788][T17857] should_fail_ex+0x512/0x640 [ 1026.587810][T17857] strncpy_from_user+0x3b/0x2e0 [ 1026.587826][T17857] ? update_irq_load_avg+0xb5/0xdd0 [ 1026.587851][T17857] strncpy_from_user_nofault+0x7f/0x180 [ 1026.587870][T17857] bpf_bprintf_prepare+0xe90/0x13f0 [ 1026.587895][T17857] ? unwind_get_return_address+0x59/0xa0 [ 1026.587913][T17857] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1026.587940][T17857] ? bpf_trace_run2+0x3e1/0x590 [ 1026.587955][T17857] bpf_trace_printk+0xda/0x190 [ 1026.587970][T17857] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1026.587986][T17857] ? bpf_trace_run2+0x3e1/0x590 [ 1026.588004][T17857] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1026.588017][T17857] bpf_trace_run2+0x236/0x590 [ 1026.588033][T17857] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1026.588049][T17857] ? search_extable+0x82/0xb0 [ 1026.588068][T17857] ? __pfx_search_extable+0x10/0x10 [ 1026.588087][T17857] ? __pfx_check_buffer+0x10/0x10 [ 1026.588120][T17857] __bpf_trace_contention_begin+0xc9/0x110 [ 1026.588145][T17857] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1026.588173][T17857] trace_contention_begin.constprop.0+0xde/0x160 [ 1026.588190][T17857] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1026.588212][T17857] ? __lock_acquire+0xb97/0x1ce0 [ 1026.588234][T17857] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1026.588259][T17857] do_raw_spin_lock+0x20e/0x2b0 [ 1026.588275][T17857] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1026.588291][T17857] ? rcu_qs+0x2b/0xe0 [ 1026.588309][T17857] ? rcu_note_context_switch+0x192/0x1e00 [ 1026.588329][T17857] raw_spin_rq_lock_nested+0x7e/0x130 [ 1026.588348][T17857] ? preempt_schedule_common+0x44/0xc0 [ 1026.588365][T17857] __schedule+0x307/0x5de0 [ 1026.588389][T17857] ? find_held_lock+0x2b/0x80 [ 1026.588407][T17857] ? xa_load+0x149/0x2c0 [ 1026.588434][T17857] ? __pfx___schedule+0x10/0x10 [ 1026.588454][T17857] ? lock_acquire+0x179/0x350 [ 1026.588467][T17857] ? preempt_schedule_thunk+0x16/0x30 [ 1026.588489][T17857] preempt_schedule_common+0x44/0xc0 [ 1026.588508][T17857] preempt_schedule_thunk+0x16/0x30 [ 1026.588530][T17857] consume_obj_stock+0x2c2/0x380 [ 1026.588554][T17857] obj_cgroup_charge_account+0x26/0xa0 [ 1026.588573][T17857] __memcg_slab_post_alloc_hook+0x30c/0x960 [ 1026.588593][T17857] ? kasan_save_track+0x14/0x30 [ 1026.588610][T17857] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 1026.588628][T17857] ? sock_alloc_inode+0x25/0x1c0 [ 1026.588650][T17857] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1026.588676][T17857] sock_alloc_inode+0x25/0x1c0 [ 1026.588696][T17857] alloc_inode+0x61/0x240 [ 1026.588717][T17857] sock_alloc+0x40/0x280 [ 1026.588737][T17857] do_accept+0xf7/0x530 [ 1026.588751][T17857] ? do_raw_spin_lock+0x12c/0x2b0 [ 1026.588767][T17857] ? __pfx_do_accept+0x10/0x10 [ 1026.588788][T17857] __sys_accept4+0x100/0x1c0 [ 1026.588803][T17857] ? __pfx___sys_accept4+0x10/0x10 [ 1026.588819][T17857] ? __pfx_ksys_write+0x10/0x10 [ 1026.588837][T17857] __x64_sys_accept4+0x96/0x100 [ 1026.588852][T17857] ? lockdep_hardirqs_on+0x7c/0x110 [ 1026.588870][T17857] do_syscall_64+0xcd/0x4e0 [ 1026.588890][T17857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.588905][T17857] RIP: 0033:0x7f34adf8eec9 [ 1026.588916][T17857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.588931][T17857] RSP: 002b:00007f34aedbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1026.588946][T17857] RAX: ffffffffffffffda RBX: 00007f34ae1e6090 RCX: 00007f34adf8eec9 [ 1026.588957][T17857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1026.588966][T17857] RBP: 00007f34aedbc090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.588976][T17857] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 1026.588985][T17857] R13: 00007f34ae1e6128 R14: 00007f34ae1e6090 R15: 00007ffcd2fd7ae8 [ 1026.589000][T17857] [ 1028.295742][ T30] audit: type=1326 audit(1758557513.566:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 1028.319384][ T30] audit: type=1326 audit(1758557513.566:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 1028.342981][ T30] audit: type=1326 audit(1758557513.566:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 1028.366593][ T30] audit: type=1326 audit(1758557513.566:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17845 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c218eec9 code=0x7ffc0000 [ 1028.574549][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.757421][ T5952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1028.793812][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1028.813703][ T5952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1028.845851][ T5952] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1028.876421][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.903806][ T5952] usb 2-1: Product: syz [ 1028.917568][ T5952] usb 2-1: Manufacturer: syz [ 1028.938525][ T5952] usb 2-1: SerialNumber: syz [ 1028.965744][ T5952] usb 2-1: config 0 descriptor?? [ 1028.984498][ T5952] usb 2-1: can't set config #0, error -71 [ 1029.013880][ T5952] usb 2-1: USB disconnect, device number 59