last executing test programs: 9.188205086s ago: executing program 4 (id=518): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000540), 0xfffffffffffffff5, 0x14000) 6.590405053s ago: executing program 0 (id=530): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x400100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB=',gro', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffea3) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) syz_fuse_handle_req(r3, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x78, 0x0, 0xfea, {0x0, 0x0, 0x0, {0x0, 0xe, 0x0, 0xfffffffffffffffc, 0x101, 0x0, 0x0, 0x0, 0x1ffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xbe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000008e40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000084c0)={0x18, 0x0, 0x69, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.36480417s ago: executing program 0 (id=533): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000001840000002000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)='key_or_keyring:\xd8Ou\xed\xd7\x92\x83\f\xb9\r\xa8N\v\xeayK>\xe4r\xd3H\xf7\xda_\xaf\xb6K\xa0\xb6j\xb0Pc\xfd\x04\xf0\xc1\xf2\xc5\xf6\xe7~:X\xbb65\xa0\xa8\xe7\x01\x15\xe9<8+\xcf\xadF~\xc3o\x04\xf6<6-A\x9a1\xa3le\xafuU\x96?\xee-\x89Oq\x131j\x8f\xa4\x982\t\xe8\xb4\xea\xe1\x84Fk\xa4\x86~&Q\xda\xf6\x04\x1b\f\x90+\xff\xcf\x05u&>/]o\x9e\x91S\x85Nq:\xbc\x16>M\xd2_r\xeenTf\xde\x98\xb5\xe9<\x8f;\t\xf9=\x91\x14\x95\x97\xcdmG%\xed\t\xa7N\xb4\x85@\xe9\xeb,\"\xd1R\xcb\x03\xc0\xbe\xe2\x14\xe3\x84\xf3\xa2>Z\xa6\xc4\xfb2\xd2\xaa\x89\x12\xc3)m\xc5j\xaf\xe5n|\xfcD\xfc\xb5R\x1d\x87\xcfW5\xc7!\\\x11\x88\xa5\a\x0f\xcf\xa2q\x8eC') syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x65, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x1, 0x8, 0x0, 0x1000, {[@generic={0x13, 0x11, "08c09758c52aa04f25dfa643780596"}]}}}}}}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x26) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b00558ddbba9b37786fd808252372a31e4939884f0a", 0x33}, {&(0x7f00000004c0)="8986", 0x2}], 0x2}, 0x200440d0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0xc4e2}}]}, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.267672602s ago: executing program 2 (id=534): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x801) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c00000b2baca5000c0000000200000002000000000000000000"], 0x0, 0x26, 0x0, 0x2, 0xfffffffe}, 0x28) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r2, &(0x7f00000000c0)=0x58, 0xa) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) mknod$loop(0x0, 0x6000, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8000f28, 0x4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0x8) syz_open_dev$vim2m(&(0x7f0000000300), 0x400000000000003, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x44001, 0x0) r8 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) 5.813113074s ago: executing program 0 (id=535): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (fail_nth: 2) 5.788396579s ago: executing program 1 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000380)="82ffffffff", 0x53, 0x3b00, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pread64(r1, &(0x7f00000004c0), 0x8, 0x4000) socket$l2tp6(0xa, 0x2, 0x73) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff02000000000000000000000000000108000a0000000000060002000100000014001f0009"], 0x5c}, 0x1, 0x620b}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x5}, 0x8) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) fdatasync(r4) 5.677859173s ago: executing program 1 (id=537): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x105201) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(r0, &(0x7f0000000180)='M', 0x1) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5.624892981s ago: executing program 0 (id=538): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_emit_vhci(0x0, 0xf) fallocate(0xffffffffffffffff, 0x6, 0xcc7, 0x8ffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, 0x0, 0x4048150) syz_usb_disconnect(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) syz_usb_connect$rtl8150(0x0, 0x2e, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f00000000c0)=0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x21, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASK]}, 0x6c}}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000100)=0x4, 0x4) sendfile(r0, r6, &(0x7f0000000080)=0x5, 0xffff) 5.038814905s ago: executing program 1 (id=539): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff}, 0x94) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)={{0x12, 0x1, 0x250, 0xee, 0x4c, 0xbe, 0x10, 0x8ca, 0x111, 0x2fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x10, 0x3, "", [{{0x9, 0x4, 0x37, 0x8, 0x0, 0x96, 0x9b, 0xa7, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000300000007e2ff910f000005000000000900000003000000b050000008000000050000000010000009000000000000004d10ffff0e00000001000000050000000700000003000000050000000f00000000000001000000005c004100100000000000001004000000002e00"], &(0x7f0000000440)=""/102, 0x7f, 0x66, 0x1}, 0x28) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2503feffffff000000001600000014000180a27fa62670d2fc7c7a39ad0628b8000004000000010002004e23ac1e01010000000000000000000002000a004e21fffffff3fe8800000000000000000000000000011800000000000680000003002d6bd7c7ee4bffcc781f16735256a9effc8c2edaf6f8da9d0bf3ecae3f7817d5b8e43cb5650cd96b032a7a5fff1a02b9b3700fc7e7f031b72066703af28bc612593085263f9678ebbda92d080f3144894d224a035f6f9ef6a36d747944234d26b6a6e11a21c6090fbcec98f2f6dcd97b1d4ab86ce307d5af44d4e0a056834600000005000000010009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x163, 0x3ff, 0x621f, 0x8200, 0xffffffffffffffff, 0xb, '\x00', 0x0, r1, 0x5, 0x2, 0x4, 0x8, @value=r3}, 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r5}}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x4000) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r8 = openat(0xffffffffffffff9c, 0x0, 0x802, 0x0) write(r8, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./gadget/ep1in-bulk\x00', &(0x7f0000000240), 0x4000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$FE_READ_SIGNAL_STRENGTH(r9, 0x80026f47, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 5.00058883s ago: executing program 4 (id=540): read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xc, 0x70, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xc6c}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0xf3b8, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x3, 0x1c, 0xce}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x2b, 0x99}}}}}}}]}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 4.352574359s ago: executing program 3 (id=542): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb951"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x21) r5 = dup(r4) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x81) r6 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='source', 0x0, r2) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r7, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0) close_range(r7, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 4.244025413s ago: executing program 3 (id=543): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x400100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB=',gro', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffea3) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) syz_fuse_handle_req(r3, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x78, 0x0, 0xfea, {0x0, 0x0, 0x0, {0x0, 0xe, 0x0, 0xfffffffffffffffc, 0x101, 0x0, 0x0, 0x0, 0x1ffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xbe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000008e40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000084c0)={0x18, 0x0, 0x69, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.040585255s ago: executing program 3 (id=544): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000fcdbdf250c00000008000300", @ANYRES32=r1, @ANYBLOB="0a000600080211000001000008001de572c48a1319dac17bfaab89f5cf02e0277f7a80"], 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 3.220891066s ago: executing program 2 (id=545): syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) clock_settime(0x1ed5d7403, &(0x7f0000000180)) (fail_nth: 2) 3.220573104s ago: executing program 3 (id=546): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) socket(0x11, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010100, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x800000000000, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.907753245s ago: executing program 4 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000380)="82ffffffff", 0x53, 0x3b00, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pread64(r1, &(0x7f00000004c0), 0x8, 0x4000) socket$l2tp6(0xa, 0x2, 0x73) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000ff02000000000000000000000000000108000a0000000000060002000100000014001f0009"], 0x5c}, 0x1, 0x620b}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x5}, 0x8) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) fdatasync(r4) 2.63240647s ago: executing program 4 (id=548): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0xfff, 0x46, &(0x7f0000000040)=""/70}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000100)=[@nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x8, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x39, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x41000, 0x2666}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0xeee98003, 0x7817}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2400, 0x200, 0xfff, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x34}}, @wr_crn={0x67, 0x20, {0x4, 0x4}}, @cpuid={0x64, 0x18, {0x6, 0x2}}, @nested_load_code={0x12e, 0x76, {0x1, "b9800000c00f3235000100000f30c442492f38c4a22998d848b82f8ca52c000000000f23c80f21f8350400c0000f23f8b907080000b8cb000000ba000000000f30400f189900180000c4c13b5a190f300fc7acbf09000000c4417c297273"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x3, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x6, 0x4}}, @wr_drn={0x68, 0x20, {0x5, 0xffffffffffffffff}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x69, 0x299, 0x1000, 0x8}}, @in_dx={0x69, 0x20, {0x44b2, 0x2}}, @rdmsr={0x66, 0x18}, @set_irq_handler={0xc8, 0x20, {0xeb, 0x1}}, @in_dx={0x69, 0x20, {0x78c5}}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd0000, 0x9266}}, @nested_load_syzos={0x136, 0x139, {0x3, 0xff, [@nested_amd_set_intercept={0x181, 0x30, {0x3, 0xb, 0x4, 0x1}}, @nested_load_syzos={0x136, 0x20, {0x1, 0x8}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x5d, {"6736660f3adfb900000000c666460f388257c60f01df48b807000000000000000f23d80f21f835800000100f23f8460f01cb0f78250b0000002e6766460f38cfff480fc7690c41cc0fc77300"}}, @code={0xa, 0x44, {"0f01cb0f07c4e32d49b48e3a0000000366410f3825b30d0000006543dde9f3f2470f01f8660f383e5a00d2e9360f01f4670f07"}}]}}, @wr_drn={0x68, 0x20, {0x1, 0x7fff}}, @in_dx={0x69, 0x20, {0x80be, 0x5}}], 0x527}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000680)="663e360f08b80f0412df0f23d80f21f835800000100f23f8660f38823cda0fc76ee90f01c50f1c0966baf80cb849ec0387ef66bafc0cecc4e37d09af00900000d366b83b010f00d0eae47b00003400", 0x4f}], 0x1, 0x14, &(0x7f0000000740)=[@cr4={0x1, 0x110002}, @vmwrite={0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1}], 0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000007c0)={{r0}, 0x2, &(0x7f0000000780)=[0x100000001, 0x4], 0xffffffffffffff70, 0x2}) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000840)) fsopen(&(0x7f0000000880)='esdfs\x00', 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000dc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000900)={0x468, 0x3f4, 0x20, 0x70bd2c, 0x25dfdbfd, {0x6, 0x0, 0x29, [0x5, 0x6, 0x5, 0x1, 0x9a62, 0x3, 0x2, 0x8000000, 0x4, 0x1d05, 0x2, 0x80000000, 0x8, 0xe7a, 0xf0, 0x7, 0x8001, 0x200, 0x7, 0x80000000, 0x7, 0x9a8, 0x7, 0xfffffff7, 0x2, 0xd40000, 0x5, 0x8, 0x8, 0xa, 0xff, 0xc000000, 0xef7e, 0x1da0, 0x2, 0x687, 0xff, 0x3, 0x7, 0x100, 0x1, 0x9, 0x9, 0x8, 0x3, 0x30f, 0x3, 0x6, 0x2, 0x40, 0x8, 0xe, 0x5, 0x0, 0x0, 0xfffffff8, 0x80, 0x3ff, 0x8c, 0x5, 0x4, 0x8, 0x59f, 0xb], [0x3, 0x6, 0x5, 0xd, 0x0, 0xc, 0x5d6, 0x7, 0x8, 0x8, 0x5, 0x9, 0x33bf, 0x6, 0xffffff16, 0x40, 0x16, 0x4, 0x2, 0x2d7, 0xf, 0x5d47, 0xffffffff, 0x0, 0x1f8, 0x1, 0x37, 0xffffffb2, 0x1, 0xffff, 0x0, 0x401, 0x3, 0x1, 0x0, 0x9, 0xf, 0x4, 0x4, 0x9, 0x1f, 0xff, 0xfffeffff, 0x6, 0x2, 0xfffff5ed, 0x6, 0x0, 0x2, 0xfffffffa, 0x2b1e, 0xfffff800, 0x1000, 0x10, 0x800, 0xf59d, 0x3, 0x40, 0x9, 0x8001, 0x8001, 0x4000, 0x4, 0x5000000], [0x10000, 0x3, 0x2, 0x1, 0x5, 0x0, 0x8, 0x1, 0x6, 0x3, 0x9, 0x7, 0x2, 0x7ff, 0x3, 0x7, 0x0, 0x5, 0x2, 0x6, 0x800, 0x400, 0xa, 0xf, 0x80000001, 0x10000, 0x6000, 0x2, 0x6, 0x2, 0x8001, 0x4, 0x1, 0xfff, 0x72a, 0x5, 0x0, 0x7f, 0x1, 0x6000, 0xd88e, 0x3, 0x9, 0x3, 0x8795fbd, 0x10001, 0x80, 0x6, 0xfffffffa, 0x10001, 0x19c1, 0x2, 0x0, 0x80, 0xffffffff, 0x1, 0x5, 0x7512194d, 0xc, 0x401, 0x8, 0x401, 0x4, 0x4], [0x0, 0x1000, 0x6, 0x8, 0x5, 0x2, 0x53, 0x0, 0x9, 0x2, 0x6, 0xc8d, 0x9, 0xff, 0x6, 0x6, 0x8, 0x538, 0x0, 0x8, 0x5, 0xd, 0x10, 0x2, 0x8, 0x4c2, 0xdb8, 0x4, 0xffffffff, 0x400, 0x4, 0x1, 0x6, 0xf, 0x7, 0x6, 0x7, 0x40, 0x2, 0x9, 0x4, 0xad, 0x1, 0xffff7fff, 0xf57a, 0x4, 0x2, 0x3, 0xd, 0x0, 0x2, 0x4, 0x8c28, 0x4, 0x2, 0xa2a3, 0x7fff, 0xfffffff7, 0x1, 0x0, 0x0, 0xc6, 0x8, 0x8], 0x46, ['\x00', '/dev/vhost-vsock\x00', '/dev/vhost-vsock\x00', ':{\x00', 'esdfs\x00', '/dev/vhost-vsock\x00', 'esdfs\x00', '\x00', '{\x00']}, ["", "", "", ""]}, 0x468}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050840) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000e00)) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000e80)=0x7) r4 = syz_open_dev$usbfs(&(0x7f0000000ec0), 0xfffffffffffffffd, 0x2000) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x8010, r4, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r5) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSIG(r6, 0x40045436, 0xb) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000f80)={{&(0x7f0000feb000/0x4000)=nil, 0x4000}, 0x1}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000fc0), &(0x7f0000001000)=0x4) ioctl$RTC_UIE_ON(r7, 0x7003) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001040), 0x101040, 0x0) socket(0x8, 0x0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85512, &(0x7f0000001080)={{0xa, 0x2, 0x4, 0x40, 'syz1\x00', 0x4}, 0x0, [0x9, 0x358, 0x80, 0x6b2, 0x6f19, 0xffffffffffffff81, 0x3, 0x4, 0x1000, 0x1e, 0x80000001, 0x7ff, 0x75, 0x101, 0x8000000000000001, 0x6, 0x10000, 0x1, 0xe, 0x88, 0x3f, 0x0, 0x2, 0x4, 0x10000, 0xffffffffffffffff, 0x6, 0x6, 0x80000000, 0x8, 0x0, 0x7, 0xfffffffffffffff9, 0xfffffffffffffeff, 0x3, 0x3, 0x1, 0x2, 0x80, 0x8638, 0xbfb1, 0x2, 0x96c, 0xfffffffffffffffc, 0x68, 0x9, 0x3, 0x6, 0x1, 0x100000001, 0xffffffffffff8001, 0x4c7, 0x7, 0x1, 0x9, 0xb64, 0x8000000000000000, 0x8, 0x6, 0xc, 0xc, 0xfffffffffffffc01, 0x1, 0x9, 0x7fffffffffffffff, 0x3, 0xffffffffffffffff, 0x9, 0x1, 0x9, 0x81, 0x7f, 0x3, 0xf18, 0xa40d, 0x9, 0x7fff, 0x1, 0x8, 0x5, 0x1, 0x7fff, 0x768db8b, 0x5, 0x9, 0x9, 0x3, 0x9, 0xc, 0x1, 0xe228, 0xfffffffffffffff7, 0x4, 0xffffffffffffffff, 0x5, 0xf1ea, 0x200, 0x0, 0x5, 0x7, 0x9, 0x0, 0x80000001, 0x2, 0x5, 0x9, 0x7, 0x2, 0xe, 0x3, 0x2, 0xda, 0x6d, 0x4, 0x4, 0x4, 0x9, 0x8, 0x24, 0x9, 0x5, 0xc5a, 0x6, 0x3, 0xfffffffffffffffa, 0x4, 0x9]}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000001580)={0x0, 0x100}, &(0x7f00000015c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000001600)={r10, 0x2}, 0x8) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001640)="2597330277e809953f3746360b5e2b5982b54943b7893df0ca3094efd624e239753c62553c4f5081a7e979fabfe19a783d3465670551ab041706f326928d197a6ece8003da30725df0f83557d10531ecd8d1bf02b1901675fe2f767b3ef15153d0462595b4996b4c405e7c3f3cf3746a6bfea2c9ab8a4355d835534848e8f580ac886349fbf25174e3c935698ae4a938d357269b12b0836bad179ef4b949c12a54b5b4b023bc408e74e1b4205155dcffc4ebe7d1a201e0dc0b1d06a9155d03c3e4db1f6cd597b2fe3712b4a4ce4d99b7608c445fe8b809f40408775054b4c24dfb7970843a34c35d759ada66975dccf03bacbdb9477f6d0fe5faf0ca", 0xfc) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x480100}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x20, 0xfffffff8, @l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x40) 2.432612723s ago: executing program 4 (id=549): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x105201) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(r0, &(0x7f0000000180)='Mi', 0x2) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) bind$netlink(r6, 0x0, 0x0) 2.415762557s ago: executing program 2 (id=550): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000080)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) 1.737104963s ago: executing program 4 (id=551): write(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffff9]}, 0x8, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000280)={0xa9, 0x1, 0x100, 0x5, "7d5a599f21fd290d85b0d83051094c25f8d6a34a8b70a8cb8415d82458be9350e6bfc5e4fc33d879e60eb5186bfab58a684d663c027528c24c1f18cbb686900432251a50e85f44ecbc3c62fbe9d16228a869ada1daa610e3caf79af014d4074d8ddfc1d3aacbf8139012d61661f808b119072036091a5d5a81219470eb4662a2e7c31027604b7a15dfdaeeac5b598b8aa3"}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x2de, 0x4, 0x5, 0x0, 0x6, 0x0, [{0x0, 0x0, 0x6, '\x00', 0xc00}, {0x7f, 0x4, 0x6, '\x00', 0x7702}, {0x9, 0xddd4, 0x10001}, {0x1, 0xb, 0xe8, '\x00', 0x346}, {0x8, 0x7, 0x3, '\x00', 0x100}, {0xa1, 0x1b95, 0x8000000000000000, '\x00', 0x10b}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r2, 0x8000000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r4, 0x118, 0x2c, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f00000000c0)="01", 0xffffff1f}]) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r7, &(0x7f0000000700)='/dev/loop0,65', 0xd) 1.722847918s ago: executing program 0 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), 0x0, 0x0, 0x3) 1.605979271s ago: executing program 3 (id=553): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000500)={0x0, 0x5960, 0x8000, 0x3fffc, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000780)={0x1114, r6, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x54, 0x5b, "ba3add104a6f871164bdd24c08b4d53eb9497d3c82c718d1099f6f9bf2e501771fc10f40172b37c01a2c2660e3620123fb54bf2b05fc1b30c6fea810fae8ca9011ae225ebe43732403e2247413d9d461"}, @NL80211_ATTR_FRAME_MATCH={0x5b, 0x5b, "2e895621e7b30ce9c4a2df88f41fd4eeb97cfa10660e37034f1aec05cec9d2b68db5d9e5cc004229de7a62aa529721e46f49af51b0974c8fd8ff0e7f1adae0681ae22793f056483a96a7ad958afc2dad86b4d60798fd32"}, @NL80211_ATTR_FRAME_MATCH={0x33, 0x5b, "d5544e3cc4b540973927be09b4cbe8c3c76d6269f4fa353fc58242c5717a9809b76bfa3589b99a334ef87d2bbdfeca"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x34}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x1114}, 0x1, 0x0, 0x0, 0x20051}, 0x20008001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r9, &(0x7f0000000640)={0x1d, r10, 0x0, {}, 0x1}, 0x18) sendfile(r9, r8, 0x0, 0x1000000000000a) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x4, 0x8, 0x10, r1, 0x20000000) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="aa02b3d08e7f1e7bedd880518790c73788a1284eca25a235163b0a967d5f08b2078003dfbbfe730f7e54d7dc67cb5fdf01a7746decbb94a650b313e6b42e5061fd79d759dfe4448387e3321a09d99287"}) dup3(r11, r5, 0x80000) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000740)=[@request_death], 0x0, 0x0, 0x0}) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r13, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r14 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r14, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) lseek(r12, 0x851, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) bind$rds(r12, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x48a45, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.573870734s ago: executing program 2 (id=554): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x400100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000', @ANYRESDEC=0x0, @ANYBLOB=',gro', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffea3) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xffffffffc4010440, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) syz_fuse_handle_req(r3, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e48e435000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a99e6a60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d7a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b68d3810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x78, 0x0, 0xfea, {0x0, 0x0, 0x0, {0x0, 0xe, 0x0, 0xfffffffffffffffc, 0x101, 0x0, 0x0, 0x0, 0x1ffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xbe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000008e40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000084c0)={0x18, 0x0, 0x69, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.459141479s ago: executing program 0 (id=555): socket(0x10, 0x803, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44851}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x1040, 0x0, 0xfffffff8, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_emit_ethernet(0x334, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x81, 0x80, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x1f4, 0x0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}], 0x1) 1.421135611s ago: executing program 1 (id=556): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) syz_open_pts(r4, 0x40) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4c00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e26}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) (async) syz_open_pts(r4, 0x40) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4c00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e26}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) (async) 1.302583431s ago: executing program 2 (id=557): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) memfd_create(0x0, 0x3) socket$key(0xf, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000002000fddbdf251000000008000900398f00001800018014000200776c616e30000000000000000000000030ff227e86053dd0143de02d50b87fa76720d5fa77915f21bd89eaf5c9cfd7a9c1bc3af5da92ee067221d63a5b85f06aa6671d46fbf8482d0950fc5a3bc4d5d53819341d6b22eb5e4a3b3bbee3fcde4b85a18e64a93d38"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x8006) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) move_mount(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x64) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c3102) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x11000) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 1.17633833s ago: executing program 1 (id=558): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='secret\x00', &(0x7f0000000200)='AQB1234567890123456789012345678901234567890=\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setns(0xc9, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10102) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000500)='name\x00', &(0x7f0000000600)='admin\x00', 0x0) close(0x3) 1.108210087s ago: executing program 2 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005fc0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf", 0x14) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 64.135333ms ago: executing program 3 (id=560): setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000ea0200d5000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) syz_usb_connect(0x0, 0x61, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000bd3dd71106d040e0af761010203010902120001090200dc090439d30003000009"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1555555555555801}) fsopen(0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450004b000000000041190780000e8fcee7c000000000000bffc4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450004b000000000041190780000e8fcee7c000000000000bffc4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400010000000900020073797a32000000001400078008001240ff00000008001340000000000500050002000000050001000600000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000)=0xffffffc3, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_adjtime(0x17, &(0x7f0000000000)={0x8a37, 0x8, 0x61, 0x7, 0x4000000006, 0x71, 0x5, 0x5, 0x1, 0x6, 0xffffffffffffffff, 0x6, 0x7, 0x7f, 0x4de, 0x8, 0xc2f0, 0x2fb759a8, 0x4, 0x5, 0x0, 0x5, 0x4, 0x6, 0xfffffffffffffff8, 0x2}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40046f41, &(0x7f0000000180)={0xfffffffc, 0x0, 0x3f, 0x1, '\x00', 0x10003}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xab5, 0xc}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfffffffb}, {0x8, 0x0, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x3851b5fb0f9a07e0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 1 (id=561): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000003680)={0x7, &(0x7f00000003c0)=""/145, &(0x7f00000035c0)=[{0xfff, 0x36, 0x14, &(0x7f0000000480)=""/54}, {0x7, 0x54, 0x0, &(0x7f00000004c0)=""/84}, {0x3, 0x1, 0x1, &(0x7f0000000540)=""/1}, {0x5, 0x1000, 0x3, &(0x7f0000000580)=""/4096}, {0x5, 0x1000, 0x5, &(0x7f0000001580)=""/4096}, {0xe1, 0x1000, 0x0, &(0x7f0000002580)=""/4096}, {0xffff, 0x1f, 0x7, &(0x7f0000003580)=""/31}]}) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r2 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r2, 0x0, 0x20004f) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x0, r2}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x7703, 0x10}, 0xc) r4 = syz_open_dev$audion(&(0x7f0000000200), 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xc69, 0x9, 0x3, 0x2908, r3, 0xe, '\x00', 0x0, r4, 0x5, 0x3, 0x5, 0xd}, 0x50) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000240)={'multiq3\x00', [0x100, 0x4, 0x21, 0x2, 0x44, 0xf3, 0x7c, 0x4, 0x80008, 0x4, 0x2, 0x3, 0xe7, 0x1, 0x80006, 0xfe, 0x0, 0x3, 0x3, 0x8, 0xb740, 0xca9d, 0xdc, 0x20001e58, 0x8, 0xf39c, 0x8001, 0x1539b804, 0x5, 0x1, 0x2]}) kernel console output (not intermixed with test programs): hci0: command 0x0c1a tx timeout [ 134.307975][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 134.366210][ T30] audit: type=1400 audit(1785994464.978:397): avc: denied { write } for pid=6430 comm="syz.4.187" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 135.113950][ T30] audit: type=1400 audit(1785994464.978:398): avc: denied { open } for pid=6430 comm="syz.4.187" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 135.167288][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.285944][ T6439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.188'. [ 135.695591][ T804] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.185413][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 136.633897][ T6445] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 136.644547][ T6445] SELinux: failed to load policy [ 136.652173][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.728037][ T804] usb 1-1: New USB device found, idVendor=146d, idProduct=0721, bcdDevice=9c.25 [ 136.743595][ T6452] loop7: detected capacity change from 0 to 16384 [ 136.776939][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.845992][ T30] audit: type=1400 audit(1785994467.538:399): avc: denied { mounton } for pid=6451 comm="syz.3.192" path="/33/file0" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.882200][ T6455] netlink: 48 bytes leftover after parsing attributes in process `syz.2.193'. [ 136.908934][ T804] usb 1-1: Product: syz [ 136.936515][ T804] usb 1-1: Manufacturer: syz [ 136.943747][ T6461] netlink: 48 bytes leftover after parsing attributes in process `syz.2.193'. [ 136.960970][ T6455] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 136.983371][ T6455] bond3 (unregistering): Released all slaves [ 137.028448][ T30] audit: type=1400 audit(1785994467.598:400): avc: denied { read write } for pid=6450 comm="syz.4.194" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.061262][ T804] usb 1-1: SerialNumber: syz [ 137.092388][ T804] usb 1-1: config 0 descriptor?? [ 137.113482][ T6462] netlink: 'syz.1.195': attribute type 2 has an invalid length. [ 137.131249][ T804] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 137.152399][ T6462] netlink: 'syz.1.195': attribute type 11 has an invalid length. [ 137.182764][ T30] audit: type=1400 audit(1785994467.598:401): avc: denied { open } for pid=6450 comm="syz.4.194" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.218196][ T6462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.195'. [ 137.285547][ T6461] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 137.308591][ T30] audit: type=1400 audit(1785994467.728:402): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.347450][ T6461] bond3 (unregistering): Released all slaves [ 137.356037][ T6466] FAULT_INJECTION: forcing a failure. [ 137.356037][ T6466] name failslab, interval 1, probability 0, space 0, times 0 [ 137.370831][ T804] usb 1-1: USB disconnect, device number 4 [ 137.412629][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(full) [ 137.412646][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 137.412652][ T6466] Call Trace: [ 137.412656][ T6466] [ 137.412660][ T6466] dump_stack_lvl+0x100/0x190 [ 137.412679][ T6466] should_fail_ex.cold+0x5/0xa [ 137.412693][ T6466] should_failslab+0xc2/0x120 [ 137.412707][ T6466] __kmalloc_noprof+0xfc/0x820 [ 137.412721][ T6466] ? alloc_pipe_info+0x1ec/0x590 [ 137.412735][ T6466] alloc_pipe_info+0x1ec/0x590 [ 137.412748][ T6466] splice_direct_to_actor+0x78f/0xa30 [ 137.412762][ T6466] ? __pfx_direct_splice_actor+0x10/0x10 [ 137.412774][ T6466] ? inode_has_perm+0x16d/0x1d0 [ 137.412789][ T6466] ? __file_has_perm+0x336/0x460 [ 137.412804][ T6466] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 137.412817][ T6466] ? __pfx___file_has_perm+0x10/0x10 [ 137.412837][ T6466] do_splice_direct+0x174/0x240 [ 137.412850][ T6466] ? __pfx_do_splice_direct+0x10/0x10 [ 137.412863][ T6466] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 137.412876][ T6466] ? bpf_lsm_file_permission+0x9/0x10 [ 137.412892][ T6466] ? security_file_permission+0x76/0x210 [ 137.412904][ T6466] ? rw_verify_area+0xce/0x6d0 [ 137.412920][ T6466] do_sendfile+0xadc/0xe20 [ 137.412938][ T6466] ? __pfx_do_sendfile+0x10/0x10 [ 137.412952][ T6466] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.412968][ T6466] ? __fget_files+0x21f/0x3d0 [ 137.412982][ T6466] __x64_sys_sendfile64+0x1d8/0x220 [ 137.412994][ T6466] ? ksys_write+0x1ac/0x250 [ 137.413003][ T6466] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 137.413020][ T6466] do_syscall_64+0x115/0x870 [ 137.413032][ T6466] ? clear_bhb_loop+0x40/0x90 [ 137.413045][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.413056][ T6466] RIP: 0033:0x7f42b1b9e0d9 [ 137.413066][ T6466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.413076][ T6466] RSP: 002b:00007f42b2a09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 137.413087][ T6466] RAX: ffffffffffffffda RBX: 00007f42b1e25fa0 RCX: 00007f42b1b9e0d9 [ 137.413093][ T6466] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 137.413099][ T6466] RBP: 00007f42b2a09090 R08: 0000000000000000 R09: 0000000000000000 [ 137.413105][ T6466] R10: 0000000100000500 R11: 0000000000000246 R12: 0000000000000001 [ 137.413111][ T6466] R13: 00007f42b1e26038 R14: 00007f42b1e25fa0 R15: 00007ffd5feb7ae8 [ 137.413124][ T6466] [ 137.685872][ T30] audit: type=1400 audit(1785994467.728:403): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.707473][ T30] audit: type=1400 audit(1785994467.728:404): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.729091][ T30] audit: type=1400 audit(1785994467.728:405): avc: denied { read } for pid=5271 comm="dhcpcd" name="n30" dev="tmpfs" ino=2843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.766056][ T6469] 9p: Bad value for 'port' [ 139.907701][ T6486] fuse: Unknown parameter 'fd0x0000000000000009' [ 140.018554][ T6467] loop7: detected capacity change from 16384 to 0 [ 141.134977][ T6492] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 141.146250][ T6492] SELinux: failed to load policy [ 141.373313][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 141.373324][ T30] audit: type=1400 audit(1785994472.068:411): avc: denied { execute } for pid=6498 comm="syz.0.209" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.169021][ T30] audit: type=1400 audit(1785994474.868:412): avc: denied { mount } for pid=6512 comm="syz.4.214" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 144.193283][ T6513] FAULT_INJECTION: forcing a failure. [ 144.193283][ T6513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.206495][ T6513] CPU: 0 UID: 0 PID: 6513 Comm: syz.4.214 Not tainted syzkaller #0 PREEMPT(full) [ 144.206510][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 144.206516][ T6513] Call Trace: [ 144.206521][ T6513] [ 144.206525][ T6513] dump_stack_lvl+0x100/0x190 [ 144.206543][ T6513] should_fail_ex.cold+0x5/0xa [ 144.206558][ T6513] _copy_from_iter+0x1f4/0x1690 [ 144.206577][ T6513] ? __pfx__copy_from_iter+0x10/0x10 [ 144.206591][ T6513] ? trace_kmalloc+0xeb/0x110 [ 144.206605][ T6513] ? __kasan_kmalloc+0xaa/0xb0 [ 144.206618][ T6513] ? __kmalloc_noprof+0x343/0x820 [ 144.206631][ T6513] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 144.206650][ T6513] kernfs_fop_write_iter+0x186/0x5f0 [ 144.206666][ T6513] vfs_write+0x6ac/0x1050 [ 144.206683][ T6513] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 144.206698][ T6513] ? __pfx_vfs_write+0x10/0x10 [ 144.206723][ T6513] ksys_write+0x12a/0x250 [ 144.206732][ T6513] ? __pfx_ksys_write+0x10/0x10 [ 144.206746][ T6513] do_syscall_64+0x115/0x870 [ 144.206759][ T6513] ? clear_bhb_loop+0x40/0x90 [ 144.206772][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.206783][ T6513] RIP: 0033:0x7f6c00f9e0d9 [ 144.206793][ T6513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.206803][ T6513] RSP: 002b:00007f6c01dd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.206813][ T6513] RAX: ffffffffffffffda RBX: 00007f6c01225fa0 RCX: 00007f6c00f9e0d9 [ 144.206820][ T6513] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000c [ 144.206826][ T6513] RBP: 00007f6c01dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 144.206831][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.206837][ T6513] R13: 00007f6c01226038 R14: 00007f6c01225fa0 R15: 00007ffd9362b7f8 [ 144.206851][ T6513] [ 144.785542][ T30] audit: type=1400 audit(1785994474.888:413): avc: denied { append } for pid=6512 comm="syz.4.214" name="sg0" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.814056][ T6526] xt_hashlimit: size too large, truncated to 1048576 [ 146.286748][ T6535] binder: 6523:6535 ioctl c0306201 0 returned -14 [ 146.626410][ T30] audit: type=1400 audit(1785994475.248:414): avc: denied { setopt } for pid=6515 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.741003][ T6536] dlm: no local IP address has been set [ 146.844482][ T6538] fuse: Unknown parameter 'fd0x0000000000000009' [ 146.858492][ T30] audit: type=1400 audit(1785994477.298:415): avc: denied { create } for pid=6525 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.887704][ T6536] dlm: cannot start dlm midcomms -107 [ 146.996534][ T30] audit: type=1400 audit(1785994477.608:416): avc: denied { open } for pid=6541 comm="syz.1.218" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 147.219272][ T30] audit: type=1400 audit(1785994477.628:417): avc: denied { ioctl } for pid=6541 comm="syz.1.218" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 147.333576][ T6551] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 148.173201][ T6551] SELinux: failed to load policy [ 148.243926][ T30] audit: type=1400 audit(1785994477.628:418): avc: denied { mounton } for pid=6541 comm="syz.1.218" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 149.204640][ T30] audit: type=1400 audit(1785994477.688:419): avc: denied { setopt } for pid=6541 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.451827][ T6571] netlink: 48 bytes leftover after parsing attributes in process `syz.0.226'. [ 149.464953][ T6569] overlayfs: failed to resolve './bus': -2 [ 149.488184][ T6571] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 149.510216][ T6571] bond1 (unregistering): Released all slaves [ 149.523995][ T6576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.226'. [ 149.652571][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 149.686987][ T30] audit: type=1400 audit(1785994477.728:420): avc: denied { mounton } for pid=6541 comm="syz.1.218" path="/43/file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.459556][ T6578] netlink: 72 bytes leftover after parsing attributes in process `syz.4.228'. [ 150.475784][ T6576] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 150.499440][ T6576] bond1 (unregistering): Released all slaves [ 150.520439][ T30] audit: type=1400 audit(1785994481.198:421): avc: denied { create } for pid=6577 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 150.870678][ T6590] fuse: Unknown parameter 'fd0x0000000000000009' [ 151.036004][ T6598] netlink: 68 bytes leftover after parsing attributes in process `syz.4.232'. [ 151.062520][ T6596] FAULT_INJECTION: forcing a failure. [ 151.062520][ T6596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.100963][ T6596] CPU: 0 UID: 0 PID: 6596 Comm: syz.3.231 Not tainted syzkaller #0 PREEMPT(full) [ 151.100981][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.100988][ T6596] Call Trace: [ 151.100992][ T6596] [ 151.100996][ T6596] dump_stack_lvl+0x100/0x190 [ 151.101014][ T6596] should_fail_ex.cold+0x5/0xa [ 151.101028][ T6596] _copy_to_user+0x32/0xd0 [ 151.101045][ T6596] simple_read_from_buffer+0xcb/0x170 [ 151.101058][ T6596] proc_fail_nth_read+0x1af/0x230 [ 151.101075][ T6596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.101093][ T6596] ? rw_verify_area+0xce/0x6d0 [ 151.101107][ T6596] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.101123][ T6596] vfs_read+0x1e4/0xb40 [ 151.101146][ T6596] ? __pfx_vfs_read+0x10/0x10 [ 151.101162][ T6596] ? __fget_files+0x215/0x3d0 [ 151.101176][ T6596] ? __fget_files+0x21f/0x3d0 [ 151.101190][ T6596] ksys_read+0x12a/0x250 [ 151.101206][ T6596] ? __pfx_ksys_read+0x10/0x10 [ 151.101226][ T6596] do_syscall_64+0x115/0x870 [ 151.101239][ T6596] ? clear_bhb_loop+0x40/0x90 [ 151.101252][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.101263][ T6596] RIP: 0033:0x7f42b1b5e90e [ 151.101273][ T6596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.101283][ T6596] RSP: 002b:00007f42b29e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.101294][ T6596] RAX: ffffffffffffffda RBX: 00007f42b29e86c0 RCX: 00007f42b1b5e90e [ 151.101301][ T6596] RDX: 000000000000000f RSI: 00007f42b29e80a0 RDI: 0000000000000004 [ 151.101307][ T6596] RBP: 00007f42b29e8090 R08: 0000000000000000 R09: 0000000000000000 [ 151.101313][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.101319][ T6596] R13: 00007f42b1e26128 R14: 00007f42b1e26090 R15: 00007ffd5feb7ae8 [ 151.101332][ T6596] [ 151.352712][ T6601] syzkaller0: entered promiscuous mode [ 151.358231][ T6601] syzkaller0: entered allmulticast mode [ 151.410368][ T6603] netlink: 68 bytes leftover after parsing attributes in process `syz.2.233'. [ 151.698226][ T30] audit: type=1400 audit(1785994482.388:422): avc: denied { set_context_mgr } for pid=6607 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 151.723284][ T6608] binder: BINDER_SET_CONTEXT_MGR already set [ 151.762758][ T6608] binder: 6607:6608 ioctl 4018620d 200000004a80 returned -16 [ 151.792165][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 151.809698][ T6613] FAULT_INJECTION: forcing a failure. [ 151.809698][ T6613] name failslab, interval 1, probability 0, space 0, times 0 [ 151.832113][ T30] audit: type=1400 audit(1785994482.468:423): avc: denied { name_bind } for pid=6609 comm="syz.4.236" src=24096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 151.869819][ T6613] CPU: 0 UID: 0 PID: 6613 Comm: syz.0.235 Not tainted syzkaller #0 PREEMPT(full) [ 151.869835][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.869841][ T6613] Call Trace: [ 151.869845][ T6613] [ 151.869850][ T6613] dump_stack_lvl+0x100/0x190 [ 151.869867][ T6613] should_fail_ex.cold+0x5/0xa [ 151.869881][ T6613] should_failslab+0xc2/0x120 [ 151.869896][ T6613] __kmalloc_noprof+0xfc/0x820 [ 151.869909][ T6613] ? tomoyo_encode2+0xfb/0x3c0 [ 151.869923][ T6613] tomoyo_encode2+0xfb/0x3c0 [ 151.869935][ T6613] tomoyo_encode+0x29/0x50 [ 151.869945][ T6613] tomoyo_realpath_from_path+0x18c/0x690 [ 151.869959][ T6613] tomoyo_path_number_perm+0x23c/0x580 [ 151.869974][ T6613] ? tomoyo_path_number_perm+0x22e/0x580 [ 151.869991][ T6613] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.870019][ T6613] ? find_held_lock+0x2b/0x80 [ 151.870029][ T6613] ? __fget_files+0x215/0x3d0 [ 151.870040][ T6613] ? hook_file_ioctl_common+0x140/0x440 [ 151.870052][ T6613] ? __fget_files+0x215/0x3d0 [ 151.870065][ T6613] ? __fget_files+0x21f/0x3d0 [ 151.870078][ T6613] security_file_ioctl+0xd3/0x230 [ 151.870095][ T6613] __x64_sys_ioctl+0xb7/0x210 [ 151.870113][ T6613] do_syscall_64+0x115/0x870 [ 151.870126][ T6613] ? clear_bhb_loop+0x40/0x90 [ 151.870139][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.870150][ T6613] RIP: 0033:0x7f217ef9e0d9 [ 151.870161][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.870171][ T6613] RSP: 002b:00007f217fe9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.870182][ T6613] RAX: ffffffffffffffda RBX: 00007f217f226090 RCX: 00007f217ef9e0d9 [ 151.870189][ T6613] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 151.870195][ T6613] RBP: 00007f217fe9e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.870201][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.870212][ T6613] R13: 00007f217f226128 R14: 00007f217f226090 R15: 00007ffd6d9c71b8 [ 151.870225][ T6613] [ 151.870248][ T6613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.016752][ T6626] binder: 6620:6626 ioctl c0306201 0 returned -14 [ 153.429537][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.586960][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 153.593370][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.618419][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.649501][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.691098][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.727768][ T9] usb 1-1: config 0 descriptor?? [ 153.754233][ T6631] fuse: Invalid rootmode [ 153.759959][ T9] hub 1-1:0.0: USB hub found [ 153.935112][ T6635] overlayfs: failed to resolve './bus': -2 [ 154.163516][ T6623] random: crng reseeded on system resumption [ 154.169826][ T30] audit: type=1400 audit(1785994484.858:424): avc: denied { write } for pid=6622 comm="syz.0.240" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 154.194519][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 154.380658][ T30] audit: type=1400 audit(1785994485.078:425): avc: denied { ioctl } for pid=6622 comm="syz.0.240" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 154.433264][ T6603] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 154.597447][ T6644] bridge0: entered allmulticast mode [ 154.723399][ T6650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.246'. [ 154.751351][ T6650] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 154.760902][ T6650] bond1 (unregistering): Released all slaves [ 154.787125][ T6650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.246'. [ 154.814794][ T6650] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 154.826372][ T6650] bond1 (unregistering): Released all slaves [ 154.901247][ T30] audit: type=1400 audit(1785994485.598:426): avc: denied { read } for pid=6653 comm="syz.3.247" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 154.974762][ T30] audit: type=1400 audit(1785994485.628:427): avc: denied { open } for pid=6653 comm="syz.3.247" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.051304][ T30] audit: type=1400 audit(1785994485.628:428): avc: denied { ioctl } for pid=6653 comm="syz.3.247" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.152287][ T30] audit: type=1400 audit(1785994485.628:429): avc: denied { watch } for pid=6653 comm="syz.3.247" path="/46/bus/file1" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 155.247093][ T30] audit: type=1400 audit(1785994485.628:430): avc: denied { watch_sb watch_reads } for pid=6653 comm="syz.3.247" path="/46/bus/file1" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.404013][ T6662] input: syz0 as /devices/virtual/input/input8 [ 155.510489][ T30] audit: type=1400 audit(1785994486.208:431): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=2887 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.544932][ T6665] overlayfs: upper fs does not support file handles, falling back to index=off. [ 155.600057][ T6665] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 155.638930][ T6666] syzkaller0: entered promiscuous mode [ 155.675719][ T6666] syzkaller0: entered allmulticast mode [ 155.791313][ T6673] fuse: Invalid rootmode [ 157.288342][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 157.288354][ T30] audit: type=1400 audit(1785994487.988:434): avc: denied { map } for pid=6681 comm="syz.4.255" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 157.319740][ T6683] FAULT_INJECTION: forcing a failure. [ 157.319740][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 157.481453][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.4.255 Not tainted syzkaller #0 PREEMPT(full) [ 157.481470][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.481476][ T6683] Call Trace: [ 157.481480][ T6683] [ 157.481484][ T6683] dump_stack_lvl+0x100/0x190 [ 157.481504][ T6683] should_fail_ex.cold+0x5/0xa [ 157.481518][ T6683] should_failslab+0xc2/0x120 [ 157.481533][ T6683] __kmalloc_noprof+0xfc/0x820 [ 157.481546][ T6683] ? tomoyo_encode2+0xfb/0x3c0 [ 157.481560][ T6683] tomoyo_encode2+0xfb/0x3c0 [ 157.481572][ T6683] tomoyo_encode+0x29/0x50 [ 157.481582][ T6683] tomoyo_realpath_from_path+0x18c/0x690 [ 157.481596][ T6683] tomoyo_path_number_perm+0x23c/0x580 [ 157.481612][ T6683] ? tomoyo_path_number_perm+0x22e/0x580 [ 157.481632][ T6683] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.481661][ T6683] ? find_held_lock+0x2b/0x80 [ 157.481671][ T6683] ? __fget_files+0x215/0x3d0 [ 157.481682][ T6683] ? hook_file_ioctl_common+0x140/0x440 [ 157.481694][ T6683] ? __fget_files+0x215/0x3d0 [ 157.481707][ T6683] ? __fget_files+0x21f/0x3d0 [ 157.481720][ T6683] security_file_ioctl+0xd3/0x230 [ 157.481737][ T6683] __x64_sys_ioctl+0xb7/0x210 [ 157.481755][ T6683] do_syscall_64+0x115/0x870 [ 157.481767][ T6683] ? clear_bhb_loop+0x40/0x90 [ 157.481781][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.481792][ T6683] RIP: 0033:0x7f6c00f9e0d9 [ 157.481801][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.481811][ T6683] RSP: 002b:00007f6c01dd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.481823][ T6683] RAX: ffffffffffffffda RBX: 00007f6c01225fa0 RCX: 00007f6c00f9e0d9 [ 157.481830][ T6683] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 157.481836][ T6683] RBP: 00007f6c01dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 157.481842][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.481848][ T6683] R13: 00007f6c01226038 R14: 00007f6c01225fa0 R15: 00007ffd9362b7f8 [ 157.481861][ T6683] [ 157.481883][ T6683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.716758][ T6685] FAULT_INJECTION: forcing a failure. [ 157.716758][ T6685] name failslab, interval 1, probability 0, space 0, times 0 [ 157.736735][ T30] audit: type=1400 audit(1785994488.018:435): avc: denied { call } for pid=6681 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 157.766098][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz.2.256 Not tainted syzkaller #0 PREEMPT(full) [ 157.766116][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.766122][ T6685] Call Trace: [ 157.766126][ T6685] [ 157.766136][ T6685] dump_stack_lvl+0x100/0x190 [ 157.766154][ T6685] should_fail_ex.cold+0x5/0xa [ 157.766169][ T6685] should_failslab+0xc2/0x120 [ 157.766185][ T6685] __kmalloc_noprof+0xfc/0x820 [ 157.766199][ T6685] ? tomoyo_encode2+0xfb/0x3c0 [ 157.766212][ T6685] tomoyo_encode2+0xfb/0x3c0 [ 157.766225][ T6685] tomoyo_encode+0x29/0x50 [ 157.766235][ T6685] tomoyo_realpath_from_path+0x18c/0x690 [ 157.766250][ T6685] tomoyo_path_number_perm+0x23c/0x580 [ 157.766265][ T6685] ? tomoyo_path_number_perm+0x22e/0x580 [ 157.766281][ T6685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.766311][ T6685] ? find_held_lock+0x2b/0x80 [ 157.766321][ T6685] ? __fget_files+0x215/0x3d0 [ 157.766332][ T6685] ? hook_file_ioctl_common+0x140/0x440 [ 157.766344][ T6685] ? __fget_files+0x215/0x3d0 [ 157.766357][ T6685] ? __fget_files+0x21f/0x3d0 [ 157.766370][ T6685] security_file_ioctl+0xd3/0x230 [ 157.766389][ T6685] __x64_sys_ioctl+0xb7/0x210 [ 157.766406][ T6685] do_syscall_64+0x115/0x870 [ 157.766419][ T6685] ? clear_bhb_loop+0x40/0x90 [ 157.766433][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.766444][ T6685] RIP: 0033:0x7f359099e0d9 [ 157.766453][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.766464][ T6685] RSP: 002b:00007f35917f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.766475][ T6685] RAX: ffffffffffffffda RBX: 00007f3590c25fa0 RCX: 00007f359099e0d9 [ 157.766482][ T6685] RDX: 0000200000000040 RSI: 000000008010640b RDI: 0000000000000003 [ 157.766488][ T6685] RBP: 00007f35917f4090 R08: 0000000000000000 R09: 0000000000000000 [ 157.766494][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.766500][ T6685] R13: 00007f3590c26038 R14: 00007f3590c25fa0 R15: 00007ffd94d9d0f8 [ 157.766514][ T6685] [ 157.766542][ T6685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.989542][ T30] audit: type=1400 audit(1785994488.018:436): avc: denied { transfer } for pid=6681 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 158.206595][ T30] audit: type=1400 audit(1785994488.898:437): avc: denied { ioctl } for pid=6686 comm="syz.4.257" path="socket:[13416]" dev="sockfs" ino=13416 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.624246][ T6695] overlayfs: failed to resolve './bus': -2 [ 158.868088][ T804] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.029589][ T804] usb 3-1: Using ep0 maxpacket: 16 [ 159.047324][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.063565][ T804] usb 3-1: config 4 has an invalid interface number: 55 but max is 0 [ 159.073100][ T804] usb 3-1: config 4 has no interface number 0 [ 159.087580][ T804] usb 3-1: config 4 interface 55 has no altsetting 0 [ 159.121043][ T804] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 159.134534][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.150887][ T804] usb 3-1: Product: syz [ 159.159422][ T804] usb 3-1: Manufacturer: syz [ 159.169677][ T804] usb 3-1: SerialNumber: syz [ 159.298867][ T9] usbhid 1-1:0.0: can't add hid device: -32 [ 159.304926][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 159.392917][ T6696] netlink: 148 bytes leftover after parsing attributes in process `syz.2.260'. [ 159.416373][ T30] audit: type=1400 audit(1785994490.108:438): avc: denied { setopt } for pid=6692 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.469977][ T30] audit: type=1400 audit(1785994490.168:439): avc: denied { getopt } for pid=6692 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.578733][ T6698] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 159.614014][ T804] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 159.631191][ T804] gspca_mr97310a: reg write [21] error -22 [ 159.649288][ T804] mr97310a 3-1:4.55: probe with driver mr97310a failed with error -22 [ 159.719894][ T804] usb 3-1: USB disconnect, device number 4 [ 159.763392][ T6700] netlink: 'syz.1.262': attribute type 5 has an invalid length. [ 159.880453][ T6703] FAULT_INJECTION: forcing a failure. [ 159.880453][ T6703] name failslab, interval 1, probability 0, space 0, times 0 [ 159.894179][ T6703] CPU: 0 UID: 0 PID: 6703 Comm: syz.0.263 Not tainted syzkaller #0 PREEMPT(full) [ 159.894194][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 159.894201][ T6703] Call Trace: [ 159.894204][ T6703] [ 159.894209][ T6703] dump_stack_lvl+0x100/0x190 [ 159.894226][ T6703] should_fail_ex.cold+0x5/0xa [ 159.894240][ T6703] should_failslab+0xc2/0x120 [ 159.894254][ T6703] __kmalloc_noprof+0xfc/0x820 [ 159.894268][ T6703] ? tomoyo_encode2+0xfb/0x3c0 [ 159.894281][ T6703] tomoyo_encode2+0xfb/0x3c0 [ 159.894293][ T6703] tomoyo_encode+0x29/0x50 [ 159.894303][ T6703] tomoyo_realpath_from_path+0x18c/0x690 [ 159.894317][ T6703] tomoyo_path_number_perm+0x23c/0x580 [ 159.894332][ T6703] ? tomoyo_path_number_perm+0x22e/0x580 [ 159.894349][ T6703] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 159.894377][ T6703] ? find_held_lock+0x2b/0x80 [ 159.894387][ T6703] ? __fget_files+0x215/0x3d0 [ 159.894397][ T6703] ? hook_file_ioctl_common+0x140/0x440 [ 159.894409][ T6703] ? __fget_files+0x215/0x3d0 [ 159.894422][ T6703] ? __fget_files+0x21f/0x3d0 [ 159.894435][ T6703] security_file_ioctl+0xd3/0x230 [ 159.894453][ T6703] __x64_sys_ioctl+0xb7/0x210 [ 159.894469][ T6703] do_syscall_64+0x115/0x870 [ 159.894483][ T6703] ? clear_bhb_loop+0x40/0x90 [ 159.894496][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.894507][ T6703] RIP: 0033:0x7f217ef9e0d9 [ 159.894517][ T6703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.894527][ T6703] RSP: 002b:00007f217fe9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.894538][ T6703] RAX: ffffffffffffffda RBX: 00007f217f226090 RCX: 00007f217ef9e0d9 [ 159.894544][ T6703] RDX: 0000200000000180 RSI: 000000004040534e RDI: 0000000000000003 [ 159.894551][ T6703] RBP: 00007f217fe9e090 R08: 0000000000000000 R09: 0000000000000000 [ 159.894557][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.894563][ T6703] R13: 00007f217f226128 R14: 00007f217f226090 R15: 00007ffd6d9c71b8 [ 159.894577][ T6703] [ 159.894672][ T6703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.118185][ T9] usb 1-1: USB disconnect, device number 5 [ 160.209431][ T30] audit: type=1400 audit(1785994490.908:440): avc: denied { getopt } for pid=6706 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.243918][ T6709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.264'. [ 160.292094][ T30] audit: type=1400 audit(1785994490.928:441): avc: denied { associate } for pid=6706 comm="syz.3.261" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 160.408579][ T30] audit: type=1400 audit(1785994490.938:442): avc: denied { ioctl } for pid=6707 comm="syz.0.264" path="socket:[13492]" dev="sockfs" ino=13492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.468965][ T6715] Illegal XDP return value 4294967294 on prog (id 15) dev syz_tun, expect packet loss! [ 160.591522][ T804] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.616387][ T30] audit: type=1400 audit(1785994490.938:444): avc: denied { bind } for pid=6707 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.787871][ T804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.840598][ T804] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.753748][ T804] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 161.916218][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.083945][ T804] as10x_usb: device has been detected [ 162.120930][ T804] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 162.167019][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.183577][ T804] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 162.192790][ T5342] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.246223][ T804] as10x_usb: error during firmware upload part1 [ 162.273282][ T804] Registered device Abilis Systems DVB-Titan [ 162.377791][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.205592][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.215707][ T5342] usb 3-1: Using ep0 maxpacket: 32 [ 163.298184][ T5342] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 163.312144][ T6755] overlayfs: failed to resolve './bus': -2 [ 163.325367][ T5342] usb 3-1: config 0 has no interface number 0 [ 163.337907][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.355302][ T10] usb 4-1: USB disconnect, device number 8 [ 163.375746][ T5342] usb 3-1: config 0 interface 12 has no altsetting 0 [ 163.404553][ T6757] fuse: Unknown parameter '0x00000000000000040x0000000000000008' [ 163.421456][ T10] Unregistered device Abilis Systems DVB-Titan [ 163.421500][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.437923][ T10] as10x_usb: device has been disconnected [ 163.453851][ T5342] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 163.482123][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.498019][ T6742] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 163.533568][ T5342] usb 3-1: Product: syz [ 163.547402][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.560741][ T5342] usb 3-1: Manufacturer: syz [ 163.578983][ T5342] usb 3-1: SerialNumber: syz [ 163.607536][ T5342] usb 3-1: config 0 descriptor?? [ 163.734695][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 163.734707][ T30] audit: type=1400 audit(1786002942.425:450): avc: denied { read } for pid=6763 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.770219][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.906013][ T9] usb 5-1: USB disconnect, device number 7 [ 163.969284][ T30] audit: type=1400 audit(1786002942.465:451): avc: denied { write } for pid=6741 comm="syz.4.274" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 164.017212][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 164.064965][ T10] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 164.125698][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 164.137396][ T30] audit: type=1400 audit(1786002942.465:452): avc: denied { open } for pid=6741 comm="syz.4.274" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 164.184963][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.221579][ T10] usb 4-1: Product: syz [ 164.247787][ T10] usb 4-1: Manufacturer: syz [ 164.266426][ T10] usb 4-1: SerialNumber: syz [ 164.274535][ T30] audit: type=1400 audit(1786002942.465:453): avc: denied { read open } for pid=6763 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.313785][ T10] usb 4-1: config 0 descriptor?? [ 164.332480][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 164.351864][ T10] usb 4-1: setting power ON [ 164.367948][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 164.375558][ T30] audit: type=1400 audit(1786002942.465:454): avc: denied { getattr } for pid=6763 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.401427][ T5700] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.425426][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.468847][ T804] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.477780][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 164.504256][ T10] usb 4-1: media controller created [ 164.517712][ T30] audit: type=1400 audit(1786002942.705:455): avc: denied { write } for pid=6766 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.545641][ T6759] dvb-usb: bulk message failed: -22 (3/0) [ 164.568626][ T5700] usb 2-1: device descriptor read/64, error -71 [ 164.578703][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.592848][ T6759] cxusb: i2c wr: len=80 is too big! [ 164.592848][ T6759] [ 164.640669][ T30] audit: type=1400 audit(1786002943.055:456): avc: denied { write } for pid=6762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.665346][ T804] usb 1-1: Using ep0 maxpacket: 8 [ 164.684861][ T10] usb 4-1: selecting invalid altsetting 6 [ 164.698791][ T804] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 164.720367][ T10] usb 4-1: digital interface selection failed (-22) [ 164.745551][ T804] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 164.769519][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 164.792743][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.803320][ T30] audit: type=1400 audit(1786002943.055:457): avc: denied { add_name } for pid=6762 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.836877][ T5700] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.851916][ T10] usb 4-1: setting power OFF [ 164.857273][ T804] usb 1-1: Product: syz [ 164.863198][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 164.878372][ T804] usb 1-1: Manufacturer: syz [ 164.888675][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 164.903088][ T804] usb 1-1: SerialNumber: syz [ 164.925488][ T30] audit: type=1400 audit(1786002943.055:458): avc: denied { create } for pid=6762 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.952962][ T804] usb 1-1: config 0 descriptor?? [ 164.962118][ T10] (NULL device *): no alternate interface [ 164.981637][ T804] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 165.007592][ T5700] usb 2-1: device descriptor read/64, error -71 [ 165.036798][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 165.067548][ T804] usb 1-1: setting power ON [ 165.079483][ T30] audit: type=1400 audit(1786002943.055:459): avc: denied { write } for pid=6762 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3270 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 165.121316][ T804] dvb-usb: bulk message failed: -22 (2/0) [ 165.145586][ T5700] usb usb2-port1: attempt power cycle [ 165.161662][ T10] usb 4-1: USB disconnect, device number 9 [ 165.197712][ T6772] FAULT_INJECTION: forcing a failure. [ 165.197712][ T6772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.251435][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.288497][ T5342] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 165.299058][ T6772] CPU: 0 UID: 0 PID: 6772 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) [ 165.299075][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.299081][ T6772] Call Trace: [ 165.299086][ T6772] [ 165.299091][ T6772] dump_stack_lvl+0x100/0x190 [ 165.299109][ T6772] should_fail_ex.cold+0x5/0xa [ 165.299131][ T6772] _copy_from_user+0x2e/0xd0 [ 165.299147][ T6772] kstrtouint_from_user+0xd6/0x1d0 [ 165.299159][ T6772] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 165.299171][ T6772] ? __lock_acquire+0x49f/0x1a40 [ 165.299190][ T6772] proc_fail_nth_write+0x83/0x220 [ 165.299207][ T6772] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.299228][ T6772] vfs_write+0x2aa/0x1050 [ 165.299245][ T6772] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.299263][ T6772] ? __pfx_vfs_write+0x10/0x10 [ 165.299279][ T6772] ? __fget_files+0x215/0x3d0 [ 165.299293][ T6772] ? __fget_files+0x21f/0x3d0 [ 165.299307][ T6772] ksys_write+0x12a/0x250 [ 165.299317][ T6772] ? __pfx_ksys_write+0x10/0x10 [ 165.299330][ T6772] do_syscall_64+0x115/0x870 [ 165.299343][ T6772] ? clear_bhb_loop+0x40/0x90 [ 165.299356][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.299368][ T6772] RIP: 0033:0x7f217ef5e90e [ 165.299377][ T6772] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.299388][ T6772] RSP: 002b:00007f217febefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.299399][ T6772] RAX: ffffffffffffffda RBX: 00007f217febf6c0 RCX: 00007f217ef5e90e [ 165.299405][ T6772] RDX: 0000000000000001 RSI: 00007f217febf0a0 RDI: 0000000000000004 [ 165.299412][ T6772] RBP: 00007f217febf090 R08: 0000000000000000 R09: 0000000000000000 [ 165.299418][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.299424][ T6772] R13: 00007f217f226038 R14: 00007f217f225fa0 R15: 00007ffd6d9c71b8 [ 165.299437][ T6772] [ 165.532016][ T5342] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 165.539654][ T5342] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 165.547254][ T5342] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 165.571586][ T5342] usb 3-1: USB disconnect, device number 5 [ 165.582126][ T804] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 165.590726][ T804] usb 1-1: media controller created [ 165.603251][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.668877][ T804] usb 1-1: selecting invalid altsetting 6 [ 165.674613][ T804] usb 1-1: digital interface selection failed (-22) [ 165.683390][ T804] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 165.693069][ T804] usb 1-1: setting power OFF [ 165.697848][ T804] dvb-usb: bulk message failed: -22 (2/0) [ 165.706750][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 165.717541][ T5700] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 165.731425][ T804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 165.771328][ T804] (NULL device *): no alternate interface [ 165.781480][ T5700] usb 2-1: device descriptor read/8, error -71 [ 165.800392][ T804] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 165.816602][ T804] usb 1-1: USB disconnect, device number 6 [ 165.967823][ T6808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.976695][ T6808] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.983091][ T6808] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 165.991078][ T6808] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 166.046153][ T5700] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.082930][ T5700] usb 2-1: device descriptor read/8, error -71 [ 166.235507][ T5700] usb usb2-port1: unable to enumerate USB device [ 166.272263][ T6823] netlink: 56 bytes leftover after parsing attributes in process `syz.0.291'. [ 167.247102][ T6825] loop6: detected capacity change from 0 to 524287999 [ 167.465464][ T6823] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 167.546760][ T6842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.874502][ T6842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.923835][ T6842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.953548][ T6842] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.110080][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 168.321232][ T6866] bond0: entered promiscuous mode [ 169.254895][ T6866] bond_slave_0: entered promiscuous mode [ 169.293662][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 169.293672][ T30] audit: type=1400 audit(1786002947.986:483): avc: denied { create } for pid=6885 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.332856][ T6866] bond_slave_1: entered promiscuous mode [ 169.352402][ T6858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.387171][ T6866] batadv0: entered promiscuous mode [ 169.414435][ T6858] block device autoloading is deprecated and will be removed. [ 169.505466][ T30] audit: type=1400 audit(1786002948.196:484): avc: denied { ioctl } for pid=6885 comm="syz.0.305" path="socket:[14276]" dev="sockfs" ino=14276 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.627833][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.662885][ T30] audit: type=1400 audit(1786002948.236:485): avc: denied { write } for pid=6885 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.708860][ T6899] netlink: 48 bytes leftover after parsing attributes in process `syz.4.309'. [ 169.736530][ T6899] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 169.771144][ T6901] netlink: 48 bytes leftover after parsing attributes in process `syz.4.309'. [ 169.825890][ T6872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 169.869014][ T6872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.896077][ T6872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.909273][ T6899] bond2 (unregistering): Released all slaves [ 169.953406][ T6872] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 169.971573][ T6906] netlink: 56 bytes leftover after parsing attributes in process `syz.3.308'. [ 170.023330][ T6901] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 170.064807][ T6901] bond2 (unregistering): Released all slaves [ 170.825097][ T6906] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 170.835944][ T804] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.884867][ T6906] bond1 (unregistering): Released all slaves [ 171.002203][ T6915] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.014994][ T30] audit: type=1400 audit(1786002949.716:486): avc: denied { write } for pid=6916 comm="syz.3.313" name="subsystems" dev="configfs" ino=3423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 171.047362][ T6915] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.057581][ T804] usb 2-1: Using ep0 maxpacket: 8 [ 171.067545][ T6915] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.085706][ T804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.094561][ T6915] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.103965][ T804] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 171.145536][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.282605][ T804] usb 2-1: config 0 descriptor?? [ 173.143646][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 173.149740][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.155745][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.162773][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.351648][ T804] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 173.396350][ T5342] kernel read not supported for file /196/pagemap (pid: 5342 comm: kworker/0:3) [ 173.444000][ T804] usb 2-1: USB disconnect, device number 8 [ 173.459715][ T6939] netlink: 'syz.1.319': attribute type 10 has an invalid length. [ 173.524026][ T30] audit: type=1400 audit(1786002952.216:487): avc: denied { append } for pid=6937 comm="syz.1.319" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 173.556267][ T6939] netlink: 120 bytes leftover after parsing attributes in process `syz.1.319'. [ 173.698626][ T30] audit: type=1400 audit(1786002952.316:488): avc: denied { mount } for pid=6945 comm="syz.4.321" name="/" dev="ramfs" ino=14431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 173.760128][ T5342] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 174.745046][ T5342] usb 4-1: device descriptor read/64, error -71 [ 175.468804][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 175.532906][ T30] audit: type=1400 audit(1786002954.227:489): avc: denied { mount } for pid=6960 comm="syz.2.326" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 175.625476][ T5342] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 175.786076][ T5342] usb 4-1: device descriptor read/64, error -71 [ 175.925604][ T5342] usb usb4-port1: attempt power cycle [ 176.054940][ T5700] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 176.248093][ T5700] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 176.275221][ T5342] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.299158][ T5700] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.424743][ T5700] usb 3-1: config 0 has no interface number 0 [ 176.433209][ T5342] usb 4-1: device descriptor read/8, error -71 [ 177.334576][ T5700] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 177.348323][ T6968] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.440796][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.449932][ T6968] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.483526][ T6968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.498496][ T5700] usb 3-1: Product: syz [ 177.511733][ T5700] usb 3-1: Manufacturer: syz [ 177.516945][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.523211][ T6968] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 177.534807][ T5700] usb 3-1: SerialNumber: syz [ 177.565701][ T5700] usb 3-1: config 0 descriptor?? [ 177.598267][ T5700] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 177.677530][ T6981] fuse: Invalid rootmode [ 177.710581][ T30] audit: type=1400 audit(1786002956.407:490): avc: denied { write } for pid=6987 comm="syz.1.332" name="/" dev="configfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.872244][ T6990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.889380][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 177.901439][ T30] audit: type=1400 audit(1786002956.587:491): avc: denied { setopt } for pid=6994 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.928435][ T6990] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.939895][ T6998] bridge_slave_1: left allmulticast mode [ 178.587674][ T6990] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.597430][ T6998] bridge_slave_1: left promiscuous mode [ 178.604922][ T6990] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.615690][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.625690][ T5342] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 178.679042][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.703820][ T6998] bridge_slave_0: left allmulticast mode [ 178.734028][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.745536][ T6998] bridge_slave_0: left promiscuous mode [ 178.769521][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.797449][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 178.831179][ T7006] fuse: Invalid rootmode [ 178.837705][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.909216][ T804] usb 3-1: USB disconnect, device number 6 [ 178.915541][ T5342] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.968470][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.004325][ T5342] usb 4-1: config 0 descriptor?? [ 180.145581][ T4927] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.151632][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.248953][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.283917][ T30] audit: type=1400 audit(1786002958.977:492): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 180.333443][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.379056][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.525051][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.555952][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.739924][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 180.745965][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.801622][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.845342][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.879928][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.989318][ T7027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.995390][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 181.016318][ T7027] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.151524][ T5342] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 181.174802][ T7027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.222019][ T7027] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.406718][ T7035] netlink: 48 bytes leftover after parsing attributes in process `syz.0.344'. [ 181.438143][ T7035] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 181.473532][ T7035] bond1 (unregistering): Released all slaves [ 181.492274][ T7039] netlink: 48 bytes leftover after parsing attributes in process `syz.0.344'. [ 181.527453][ T5342] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 181.644244][ T804] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.684085][ T5342] usb 4-1: USB disconnect, device number 13 [ 181.752701][ T7039] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 181.846883][ T7039] bond1 (unregistering): Released all slaves [ 181.865376][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 181.902851][ T804] usb 5-1: config 0 has no interfaces? [ 181.940057][ T804] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 182.013805][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.054340][ T30] audit: type=1400 audit(1786002960.747:493): avc: denied { create } for pid=7031 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.075323][ T804] usb 5-1: config 0 descriptor?? [ 182.558026][ T7050] No such timeout policy "syz1" [ 182.562922][ T30] audit: type=1400 audit(1786002961.247:494): avc: denied { accept } for pid=7049 comm="syz.1.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.711353][ T7052] syzkaller0: entered promiscuous mode [ 182.766526][ T7052] syzkaller0: entered allmulticast mode [ 182.816711][ T7057] overlayfs: failed to resolve './bus': -2 [ 182.828788][ T5342] usb 5-1: USB disconnect, device number 8 [ 183.034119][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.041120][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.937157][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.943243][ T4927] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.002685][ T7063] FAULT_INJECTION: forcing a failure. [ 184.002685][ T7063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.116164][ T7063] CPU: 0 UID: 0 PID: 7063 Comm: syz.4.351 Not tainted syzkaller #0 PREEMPT(full) [ 184.116186][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 184.116192][ T7063] Call Trace: [ 184.116196][ T7063] [ 184.116200][ T7063] dump_stack_lvl+0x100/0x190 [ 184.116219][ T7063] should_fail_ex.cold+0x5/0xa [ 184.116233][ T7063] _copy_from_user+0x2e/0xd0 [ 184.116249][ T7063] sctp_getsockopt+0x780/0x7110 [ 184.116263][ T7063] ? find_held_lock+0x2b/0x80 [ 184.116273][ T7063] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 184.116286][ T7063] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 184.116300][ T7063] ? __pfx_sctp_getsockopt+0x10/0x10 [ 184.116311][ T7063] ? avc_has_perm_noaudit+0x145/0x3b0 [ 184.116325][ T7063] ? __lock_acquire+0x49f/0x1a40 [ 184.116339][ T7063] ? __pfx_avc_has_perm+0x10/0x10 [ 184.116357][ T7063] ? find_held_lock+0x2b/0x80 [ 184.116366][ T7063] ? __might_fault+0xc5/0x140 [ 184.116376][ T7063] ? __might_fault+0xc5/0x140 [ 184.116390][ T7063] ? _copy_from_user+0x59/0xd0 [ 184.116405][ T7063] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 184.116424][ T7063] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 184.116443][ T7063] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 184.116460][ T7063] do_sock_getsockopt+0x50a/0x6e0 [ 184.116477][ T7063] ? __lock_acquire+0x49f/0x1a40 [ 184.116491][ T7063] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 184.116508][ T7063] ? rcu_read_lock_any_held+0x6a/0xa0 [ 184.116522][ T7063] ? find_held_lock+0x2b/0x80 [ 184.116534][ T7063] ? __fget_files+0x21f/0x3d0 [ 184.116550][ T7063] __sys_getsockopt+0x148/0x260 [ 184.116567][ T7063] ? __x64_sys_getsockopt+0xbd/0x160 [ 184.116580][ T7063] __x64_sys_getsockopt+0xbd/0x160 [ 184.116593][ T7063] ? do_syscall_64+0x90/0x870 [ 184.116606][ T7063] ? lockdep_hardirqs_on+0x78/0x100 [ 184.116619][ T7063] do_syscall_64+0x115/0x870 [ 184.116631][ T7063] ? clear_bhb_loop+0x40/0x90 [ 184.116644][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.116655][ T7063] RIP: 0033:0x7f6c00f9e0d9 [ 184.116665][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.116675][ T7063] RSP: 002b:00007f6c01dd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 184.116686][ T7063] RAX: ffffffffffffffda RBX: 00007f6c01225fa0 RCX: 00007f6c00f9e0d9 [ 184.116693][ T7063] RDX: 0000000000000080 RSI: 0000000000000084 RDI: 0000000000000003 [ 184.116699][ T7063] RBP: 00007f6c01dd1090 R08: 0000200000000000 R09: 0000000000000000 [ 184.116705][ T7063] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 184.116711][ T7063] R13: 00007f6c01226038 R14: 00007f6c01225fa0 R15: 00007ffd9362b7f8 [ 184.116724][ T7063] [ 184.885970][ T7067] overlayfs: invalid origin (0000007900000000000000eaffffff000000000000000000000000a1ffffff000000000000000000000000eaffffff000000000000000000000000a1ffffff00) [ 185.043884][ T4927] Bluetooth: hci5: command 0x1003 tx timeout [ 185.051523][ T5610] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 185.306602][ T7076] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.322802][ T7076] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.368208][ T7076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.512765][ T7076] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.581454][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 185.747783][ T7096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.361'. [ 186.589199][ T30] audit: type=1400 audit(1786002964.458:495): avc: denied { connect } for pid=7094 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.674622][ T7107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.361'. [ 186.716443][ T7111] 9p: Bad value for 'port' [ 186.767863][ T7096] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 186.792933][ T7112] overlayfs: failed to resolve './bus': -2 [ 186.800465][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 186.812489][ T7096] bond1 (unregistering): Released all slaves [ 187.454604][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.474069][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.571818][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.776249][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.821606][ T7107] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 187.857433][ T7107] bond1 (unregistering): Released all slaves [ 188.083691][ T30] audit: type=1400 audit(1786002966.788:496): avc: denied { write } for pid=7121 comm="syz.3.368" name="nullb" dev="configfs" ino=3353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 188.325640][ T7126] FAULT_INJECTION: forcing a failure. [ 188.325640][ T7126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.371972][ T30] audit: type=1400 audit(1786002966.808:497): avc: denied { read } for pid=7121 comm="syz.3.368" name="zoned" dev="configfs" ino=15068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 188.500666][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT(full) [ 188.500688][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 188.500694][ T7126] Call Trace: [ 188.500698][ T7126] [ 188.500703][ T7126] dump_stack_lvl+0x100/0x190 [ 188.500721][ T7126] should_fail_ex.cold+0x5/0xa [ 188.500735][ T7126] _copy_from_user+0x2e/0xd0 [ 188.500752][ T7126] kstrtouint_from_user+0xd6/0x1d0 [ 188.500764][ T7126] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 188.500776][ T7126] ? __lock_acquire+0x49f/0x1a40 [ 188.500794][ T7126] proc_fail_nth_write+0x83/0x220 [ 188.500811][ T7126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.500832][ T7126] vfs_write+0x2aa/0x1050 [ 188.500849][ T7126] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.500867][ T7126] ? __pfx_vfs_write+0x10/0x10 [ 188.500883][ T7126] ? __fget_files+0x215/0x3d0 [ 188.500897][ T7126] ? __fget_files+0x21f/0x3d0 [ 188.500911][ T7126] ksys_write+0x12a/0x250 [ 188.500921][ T7126] ? __pfx_ksys_write+0x10/0x10 [ 188.500934][ T7126] do_syscall_64+0x115/0x870 [ 188.500947][ T7126] ? clear_bhb_loop+0x40/0x90 [ 188.500960][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.500971][ T7126] RIP: 0033:0x7f42b1b5e90e [ 188.500980][ T7126] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.500991][ T7126] RSP: 002b:00007f42b29e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.501001][ T7126] RAX: ffffffffffffffda RBX: 00007f42b29e86c0 RCX: 00007f42b1b5e90e [ 188.501008][ T7126] RDX: 0000000000000001 RSI: 00007f42b29e80a0 RDI: 0000000000000005 [ 188.501014][ T7126] RBP: 00007f42b29e8090 R08: 0000000000000000 R09: 0000000000000000 [ 188.501020][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.501026][ T7126] R13: 00007f42b1e26128 R14: 00007f42b1e26090 R15: 00007ffd5feb7ae8 [ 188.501040][ T7126] [ 188.710092][ T7122] null_blk: disk nullb1 created [ 188.733403][ T30] audit: type=1800 audit(1786002966.808:498): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.368" name="zoned" dev="configfs" ino=15068 res=0 errno=0 [ 188.754463][ T30] audit: type=1800 audit(1786002967.128:499): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.368" name="memory_backed" dev="configfs" ino=15095 res=0 errno=0 [ 188.776549][ T30] audit: type=1800 audit(1786002967.138:500): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.368" name="zone_nr_conv" dev="configfs" ino=15111 res=0 errno=0 [ 188.798508][ T30] audit: type=1800 audit(1786002967.138:501): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.368" name="power" dev="configfs" ino=15112 res=0 errno=0 [ 188.965407][ T7145] 9p: Bad value for 'port' [ 188.973512][ T7146] FAULT_INJECTION: forcing a failure. [ 188.973512][ T7146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.996328][ T7146] CPU: 0 UID: 0 PID: 7146 Comm: syz.0.377 Not tainted syzkaller #0 PREEMPT(full) [ 188.996343][ T7146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 188.996349][ T7146] Call Trace: [ 188.996353][ T7146] [ 188.996357][ T7146] dump_stack_lvl+0x100/0x190 [ 188.996375][ T7146] should_fail_ex.cold+0x5/0xa [ 188.996389][ T7146] _copy_from_user+0x2e/0xd0 [ 188.996404][ T7146] cache_do_downcall+0x47/0x130 [ 188.996421][ T7146] cache_write_procfs+0xfb/0x170 [ 188.996437][ T7146] ? __pfx_cache_write_procfs+0x10/0x10 [ 188.996453][ T7146] proc_reg_write+0x240/0x330 [ 188.996467][ T7146] vfs_write+0x2aa/0x1050 [ 188.996484][ T7146] ? __pfx_proc_reg_write+0x10/0x10 [ 188.996497][ T7146] ? __pfx_vfs_write+0x10/0x10 [ 188.996514][ T7146] ? __fget_files+0x215/0x3d0 [ 188.996528][ T7146] ? __fget_files+0x21f/0x3d0 [ 188.996542][ T7146] ksys_write+0x12a/0x250 [ 188.996552][ T7146] ? __pfx_ksys_write+0x10/0x10 [ 188.996565][ T7146] do_syscall_64+0x115/0x870 [ 188.996578][ T7146] ? clear_bhb_loop+0x40/0x90 [ 188.996592][ T7146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.996603][ T7146] RIP: 0033:0x7f217ef9e0d9 [ 188.996613][ T7146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.996623][ T7146] RSP: 002b:00007f217febf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.996634][ T7146] RAX: ffffffffffffffda RBX: 00007f217f225fa0 RCX: 00007f217ef9e0d9 [ 188.996640][ T7146] RDX: 0000000000000018 RSI: 0000200000000500 RDI: 0000000000000003 [ 188.996647][ T7146] RBP: 00007f217febf090 R08: 0000000000000000 R09: 0000000000000000 [ 188.996653][ T7146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.996659][ T7146] R13: 00007f217f226038 R14: 00007f217f225fa0 R15: 00007ffd6d9c71b8 [ 188.996672][ T7146] [ 190.178267][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.381286][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.398117][ T7168] overlayfs: failed to resolve './bus': -2 [ 192.507478][ T5715] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 192.591429][ T30] audit: type=1400 audit(1786002971.289:502): avc: denied { create } for pid=7173 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.637651][ T30] audit: type=1400 audit(1786002971.339:503): avc: denied { setopt } for pid=7173 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.695878][ T5715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.716297][ T5715] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.761243][ T5715] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 192.834939][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.927772][ T5715] as10x_usb: device has been detected [ 192.966904][ T5715] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 193.034773][ T5715] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 193.110854][ T5715] as10x_usb: error during firmware upload part1 [ 193.173569][ T5715] Registered device Abilis Systems DVB-Titan [ 193.186876][ T7189] 9p: Bad value for 'port' [ 193.841452][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.916023][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.872806][ T7191] SELinux: ebitmap: truncated map [ 194.878242][ T7191] SELinux: invalid class [ 194.900817][ T7191] SELinux: failed to load policy [ 195.203336][ T7205] netlink: 48 bytes leftover after parsing attributes in process `syz.4.393'. [ 195.439035][ T30] audit: type=1400 audit(1786002974.139:504): avc: denied { write } for pid=7209 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 195.463851][ T7205] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 195.673713][ T7205] bond2 (unregistering): Released all slaves [ 195.792901][ T7221] netlink: 156 bytes leftover after parsing attributes in process `syz.2.396'. [ 195.918824][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'. [ 196.722054][ T5715] usb 1-1: USB disconnect, device number 7 [ 196.789749][ T5715] Unregistered device Abilis Systems DVB-Titan [ 196.805422][ T5715] as10x_usb: device has been disconnected [ 196.926553][ T30] audit: type=1400 audit(1786002975.629:505): avc: denied { write } for pid=7228 comm="syz.4.398" name="functions" dev="configfs" ino=10516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.027826][ T30] audit: type=1400 audit(1786002975.719:506): avc: denied { write } for pid=7228 comm="syz.4.398" name="uncompressed" dev="configfs" ino=15644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.197387][ T30] audit: type=1400 audit(1786002975.719:507): avc: denied { write } for pid=7228 comm="syz.4.398" name="u" dev="configfs" ino=15655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.842283][ T7241] binder: 7237:7241 ioctl c0306201 0 returned -14 [ 198.714447][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 198.730335][ T7256] netlink: 48 bytes leftover after parsing attributes in process `syz.4.408'. [ 198.765130][ T30] audit: type=1400 audit(1786002977.459:508): avc: denied { read } for pid=7244 comm="syz.1.405" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 198.855257][ T7260] netlink: 48 bytes leftover after parsing attributes in process `syz.4.408'. [ 199.005822][ T30] audit: type=1400 audit(1786002977.459:509): avc: denied { open } for pid=7244 comm="syz.1.405" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 199.032707][ T7256] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 199.073204][ T7256] bond2 (unregistering): Released all slaves [ 199.131726][ T30] audit: type=1400 audit(1786002977.469:510): avc: denied { ioctl } for pid=7244 comm="syz.1.405" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 199.199116][ T7260] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 199.285162][ T30] audit: type=1400 audit(1786002977.989:511): avc: denied { read write } for pid=7268 comm="syz.1.411" name="set_event" dev="tracefs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 199.338008][ T7260] bond2 (unregistering): Released all slaves [ 199.401215][ T30] audit: type=1400 audit(1786002977.989:512): avc: denied { open } for pid=7268 comm="syz.1.411" path="/81/trace/set_event" dev="tracefs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 199.426118][ T7272] netlink: 48 bytes leftover after parsing attributes in process `syz.1.412'. [ 199.496460][ T7272] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 199.534696][ T7275] netlink: 48 bytes leftover after parsing attributes in process `syz.1.412'. [ 199.586282][ T7272] bond1 (unregistering): Released all slaves [ 199.866536][ T30] audit: type=1400 audit(1786002978.570:513): avc: denied { execute } for pid=7287 comm="syz.3.416" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 199.909546][ T7275] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 199.971607][ T7275] bond1 (unregistering): Released all slaves [ 200.065393][ T7291] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.108946][ T7291] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.146924][ T7291] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.184969][ T7291] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.185803][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 201.266670][ T5715] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 201.399897][ T7326] capability: warning: `syz.2.429' uses 32-bit capabilities (legacy support in use) [ 201.442018][ T804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.475961][ T5715] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 201.516506][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.538975][ T7327] mmap: syz.2.430 (7327): VmData 37593088 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 201.562153][ T30] audit: type=1400 audit(1786002980.240:514): avc: denied { listen } for pid=7327 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.591971][ T5715] usb 4-1: Product: syz [ 201.614044][ T5715] usb 4-1: Manufacturer: syz [ 201.626909][ T5715] usb 4-1: SerialNumber: syz [ 201.649427][ T5715] usb 4-1: config 0 descriptor?? [ 201.667419][ T30] audit: type=1400 audit(1786002980.330:515): avc: denied { name_bind } for pid=7329 comm="syz.1.431" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 201.689097][ T804] usb 1-1: Using ep0 maxpacket: 16 [ 201.715823][ T5715] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 201.733877][ T804] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.780386][ T804] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 201.838530][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.968139][ T804] usb 1-1: config 0 descriptor?? [ 202.140234][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.152109][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.159066][ T7310] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 202.168193][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.185603][ T7310] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 202.212270][ T804] usbhid 1-1:0.0: can't add hid device: -71 [ 202.233206][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.240931][ T7313] fuse: Unknown parameter '' [ 202.253782][ T804] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 202.266847][ T5715] gspca_stk1135: reg_w 0x0 err -71 [ 202.288926][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 202.309680][ T804] usb 1-1: USB disconnect, device number 8 [ 202.326736][ T5715] gspca_stk1135: Sensor write failed [ 202.346268][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 202.366398][ T30] audit: type=1400 audit(1786002981.070:516): avc: denied { sqpoll } for pid=7329 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 202.396082][ T5715] gspca_stk1135: Sensor write failed [ 202.413983][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 202.427088][ T5715] gspca_stk1135: Sensor read failed [ 202.438630][ T30] audit: type=1400 audit(1786002981.110:517): avc: denied { append } for pid=7329 comm="syz.1.431" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.472654][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 202.480209][ T7336] netlink: 'syz.1.431': attribute type 21 has an invalid length. [ 202.499894][ T5715] gspca_stk1135: Sensor read failed [ 202.510398][ T7336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.431'. [ 202.522746][ T5715] gspca_stk1135: Detected sensor type unknown (0x0) [ 202.538026][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 202.557932][ T5715] gspca_stk1135: Sensor read failed [ 202.576948][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 202.593228][ T5715] gspca_stk1135: Sensor read failed [ 202.616186][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 202.636672][ T5715] gspca_stk1135: Sensor write failed [ 202.660274][ T5715] gspca_stk1135: serial bus timeout: status=0x00 [ 202.761389][ T5715] gspca_stk1135: Sensor write failed [ 202.791245][ T5715] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 202.819992][ T7347] FAULT_INJECTION: forcing a failure. [ 202.819992][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 202.867156][ T5715] usb 4-1: USB disconnect, device number 14 [ 202.915242][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.4.434 Not tainted syzkaller #0 PREEMPT(full) [ 202.915259][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 202.915265][ T7347] Call Trace: [ 202.915269][ T7347] [ 202.915274][ T7347] dump_stack_lvl+0x100/0x190 [ 202.915291][ T7347] should_fail_ex.cold+0x5/0xa [ 202.915305][ T7347] should_failslab+0xc2/0x120 [ 202.915320][ T7347] __kmalloc_noprof+0xfc/0x820 [ 202.915332][ T7347] ? __pfx_dynamic_dname+0x10/0x10 [ 202.915348][ T7347] ? tomoyo_encode2+0xfb/0x3c0 [ 202.915362][ T7347] tomoyo_encode2+0xfb/0x3c0 [ 202.915374][ T7347] tomoyo_encode+0x29/0x50 [ 202.915384][ T7347] tomoyo_realpath_from_path+0x18c/0x690 [ 202.915398][ T7347] tomoyo_path_number_perm+0x23c/0x580 [ 202.915420][ T7347] ? tomoyo_path_number_perm+0x22e/0x580 [ 202.915437][ T7347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.915465][ T7347] ? find_held_lock+0x2b/0x80 [ 202.915475][ T7347] ? __fget_files+0x215/0x3d0 [ 202.915485][ T7347] ? hook_file_ioctl_common+0x140/0x440 [ 202.915502][ T7347] ? __fget_files+0x215/0x3d0 [ 202.915515][ T7347] ? __fget_files+0x21f/0x3d0 [ 202.915528][ T7347] security_file_ioctl+0xd3/0x230 [ 202.915548][ T7347] __x64_sys_ioctl+0xb7/0x210 [ 202.915564][ T7347] do_syscall_64+0x115/0x870 [ 202.915578][ T7347] ? clear_bhb_loop+0x40/0x90 [ 202.915591][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.915602][ T7347] RIP: 0033:0x7f6c00f9e0d9 [ 202.915612][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.915622][ T7347] RSP: 002b:00007f6c01dd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.915633][ T7347] RAX: ffffffffffffffda RBX: 00007f6c01225fa0 RCX: 00007f6c00f9e0d9 [ 202.915640][ T7347] RDX: 0000200000000040 RSI: 00000000000089f2 RDI: 0000000000000003 [ 202.915646][ T7347] RBP: 00007f6c01dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 202.915652][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.915658][ T7347] R13: 00007f6c01226038 R14: 00007f6c01225fa0 R15: 00007ffd9362b7f8 [ 202.915672][ T7347] [ 203.126742][ T7347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 203.338188][ T7354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.344241][ T7354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.361334][ T7354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.061621][ T30] audit: type=1400 audit(1786002982.110:518): avc: denied { read write } for pid=7359 comm="syz.4.442" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 204.110984][ T7354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.192997][ T30] audit: type=1400 audit(1786002982.110:519): avc: denied { open } for pid=7359 comm="syz.4.442" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 204.614606][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'. [ 204.829952][ T804] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 205.009042][ T30] audit: type=1400 audit(1786002983.710:520): avc: denied { append } for pid=7379 comm="syz.2.447" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.048895][ T804] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.063861][ T804] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.122001][ T804] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 205.163699][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.214615][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 205.232461][ T7382] overlayfs: failed to resolve './file1/file0': -2 [ 205.286557][ T804] as10x_usb: device has been detected [ 205.303618][ T804] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 205.340035][ T804] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 205.378295][ T10] usb 5-1: config index 0 descriptor too short (expected 45, got 28) [ 205.388165][ T10] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 205.413359][ T804] as10x_usb: error during firmware upload part1 [ 205.424114][ T30] audit: type=1400 audit(1786002984.130:521): avc: denied { execute } for pid=7379 comm="syz.2.447" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 205.459820][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 205.472850][ T5715] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.499168][ T804] Registered device Abilis Systems DVB-Titan [ 205.643921][ T5715] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 205.910950][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 206.153109][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.160154][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.166828][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.231255][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.352206][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.374817][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.393406][ T5715] usb 4-1: Product: syz [ 206.399092][ T10] usb 5-1: Product: syz [ 206.408726][ T5715] usb 4-1: Manufacturer: syz [ 206.417447][ T10] usb 5-1: Manufacturer: syz [ 206.432734][ T5715] usb 4-1: SerialNumber: syz [ 206.438983][ T10] usb 5-1: SerialNumber: syz [ 206.456927][ T5715] usb 4-1: config 0 descriptor?? [ 206.470890][ T10] rtl8150 5-1:1.0: couldn't find required endpoints [ 206.501928][ T804] usb 2-1: USB disconnect, device number 9 [ 206.509518][ T5715] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 206.549744][ T10] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 206.570830][ T804] Unregistered device Abilis Systems DVB-Titan [ 206.584242][ T804] as10x_usb: device has been disconnected [ 206.601814][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.666315][ T5715] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 206.752346][ T7370] netlink: 60 bytes leftover after parsing attributes in process `syz.4.444'. [ 206.765267][ T5715] usb 4-1: media controller created [ 206.784334][ T10] usb 5-1: USB disconnect, device number 9 [ 206.844349][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.932521][ T7388] syz.0.449 (7388): drop_caches: 2 [ 207.033974][ T5715] DVB: Unable to find symbol mt352_attach() [ 207.775488][ T5715] DVB: Unable to find symbol nxt6000_attach() [ 207.791609][ T5715] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 207.828409][ T5715] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 207.908700][ T5715] dvb-usb: schedule remote query interval to 1000 msecs. [ 207.968352][ T5715] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 208.014129][ T30] audit: type=1326 audit(1786002986.721:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 208.065262][ T5715] dvb-usb: bulk message failed: -22 (7/0) [ 208.116711][ T5715] dvb-usb: bulk message failed: -22 (7/0) [ 208.150058][ T5715] usb 4-1: USB disconnect, device number 15 [ 208.179717][ T30] audit: type=1326 audit(1786002986.721:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 208.284390][ T5715] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 208.320637][ T30] audit: type=1326 audit(1786002986.721:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 208.454394][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 208.465378][ T30] audit: type=1326 audit(1786002986.721:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 208.539807][ T7418] overlayfs: failed to resolve './file1/file0': -2 [ 208.661075][ T5715] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 208.678235][ T30] audit: type=1326 audit(1786002986.761:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 209.051571][ T5715] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 209.270903][ T804] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 209.896950][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.912082][ T30] audit: type=1326 audit(1786002986.761:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 209.985771][ T5715] usb 4-1: Product: syz [ 210.005841][ T5715] usb 4-1: Manufacturer: syz [ 210.027568][ T5715] usb 4-1: SerialNumber: syz [ 210.077325][ T5715] usb 4-1: config 0 descriptor?? [ 210.090094][ T30] audit: type=1326 audit(1786002986.761:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 210.132169][ T7432] netlink: 48 bytes leftover after parsing attributes in process `syz.2.463'. [ 210.141165][ T804] usb 1-1: Using ep0 maxpacket: 8 [ 210.171915][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.976698][ T7436] netlink: 48 bytes leftover after parsing attributes in process `syz.2.463'. [ 210.990909][ T804] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 211.023955][ T804] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 211.043596][ T5715] usb 4-1: Firmware version (0.0) predates our first public release. [ 211.086661][ T30] audit: type=1326 audit(1786002986.761:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 211.122138][ T5715] usb 4-1: Please update to version 0.2 or newer [ 211.158654][ T804] usb 1-1: config 4 has no interface number 0 [ 211.199306][ T804] usb 1-1: language id specifier not provided by device, defaulting to English [ 211.277578][ T804] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 211.304645][ T30] audit: type=1326 audit(1786002986.761:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 211.405688][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.440692][ T5715] usb 4-1: USB disconnect, device number 16 [ 211.508611][ T7449] overlayfs: failed to resolve './file1/file0': -2 [ 211.517523][ T804] usb 1-1: Product: syz [ 211.557540][ T804] usb 1-1: Manufacturer: syz [ 211.589922][ T804] usb 1-1: SerialNumber: syz [ 211.619978][ T30] audit: type=1326 audit(1786002986.761:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.3.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42b1b9e0d9 code=0x7ffc0000 [ 211.792796][ T804] uvcvideo 1-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 211.846399][ T804] uvcvideo 1-1:4.147: No valid video chain found. [ 211.917359][ T804] usb 1-1: USB disconnect, device number 9 [ 212.674046][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 212.887494][ T7469] netlink: 48 bytes leftover after parsing attributes in process `syz.1.477'. [ 212.935524][ T7469] netlink: 48 bytes leftover after parsing attributes in process `syz.1.477'. [ 215.915119][ T7488] netlink: 84 bytes leftover after parsing attributes in process `syz.0.485'. [ 216.101411][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 216.147299][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 216.147315][ T30] audit: type=1400 audit(1786002994.852:569): avc: denied { write } for pid=7491 comm="syz.3.476" name="header" dev="configfs" ino=15630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.221695][ T7492] Config c/1 of g1 needs at least one function. [ 216.266961][ T7492] udc usbip-vudc.0: failed to start g1: -22 [ 216.289755][ T7492] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 216.310866][ T30] audit: type=1400 audit(1786002994.852:570): avc: denied { write } for pid=7491 comm="syz.3.476" name="fs" dev="configfs" ino=15639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.339776][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 216.390942][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 216.400342][ T7492] UDC core: g1: couldn't find an available UDC or it's busy [ 216.421035][ T9] usb 3-1: config 4 has an invalid interface number: 55 but max is 0 [ 216.454679][ T9] usb 3-1: config 4 has no interface number 0 [ 216.463048][ T30] audit: type=1400 audit(1786002994.852:571): avc: denied { write } for pid=7491 comm="syz.3.476" name="fs" dev="configfs" ino=15639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.518805][ T9] usb 3-1: config 4 interface 55 has no altsetting 0 [ 216.574542][ T9] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 216.610109][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.624351][ T30] audit: type=1400 audit(1786002994.882:572): avc: denied { write } for pid=7491 comm="syz.3.476" name="fs" dev="configfs" ino=15650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.671609][ T9] usb 3-1: Product: syz [ 216.695149][ T9] usb 3-1: Manufacturer: syz [ 216.722156][ T9] usb 3-1: SerialNumber: syz [ 216.756202][ T30] audit: type=1400 audit(1786002994.882:573): avc: denied { write } for pid=7491 comm="syz.3.476" name="hs" dev="configfs" ino=15651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.860108][ T30] audit: type=1400 audit(1786002994.892:574): avc: denied { write } for pid=7491 comm="syz.3.476" name="c.1" dev="configfs" ino=10522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.007626][ T7486] netlink: 148 bytes leftover after parsing attributes in process `syz.2.484'. [ 218.033030][ T30] audit: type=1400 audit(1786002994.892:575): avc: denied { write } for pid=7491 comm="syz.3.476" name="c.1" dev="configfs" ino=10522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.052788][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 220.206591][ T9] gspca_mr97310a: reg write [21] error -22 [ 220.239066][ T9] mr97310a 3-1:4.55: probe with driver mr97310a failed with error -22 [ 220.248029][ T30] audit: type=1400 audit(1786002995.282:576): avc: denied { write } for pid=7495 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 220.923758][ T7517] FAULT_INJECTION: forcing a failure. [ 220.923758][ T7517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.011771][ T9] usb 3-1: USB disconnect, device number 7 [ 221.047967][ T7517] CPU: 0 UID: 0 PID: 7517 Comm: syz.2.493 Not tainted syzkaller #0 PREEMPT(full) [ 221.047983][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 221.047990][ T7517] Call Trace: [ 221.047994][ T7517] [ 221.047998][ T7517] dump_stack_lvl+0x100/0x190 [ 221.048016][ T7517] should_fail_ex.cold+0x5/0xa [ 221.048033][ T7517] strncpy_from_user+0x3b/0x2d0 [ 221.048050][ T7517] do_getname+0x78/0x390 [ 221.048066][ T7517] __x64_sys_name_to_handle_at+0x1af/0x2d0 [ 221.048084][ T7517] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 221.048104][ T7517] do_syscall_64+0x115/0x870 [ 221.048117][ T7517] ? clear_bhb_loop+0x40/0x90 [ 221.048130][ T7517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.048141][ T7517] RIP: 0033:0x7f359099e0d9 [ 221.048150][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.048161][ T7517] RSP: 002b:00007f35917f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 221.048172][ T7517] RAX: ffffffffffffffda RBX: 00007f3590c25fa0 RCX: 00007f359099e0d9 [ 221.048178][ T7517] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000004 [ 221.048185][ T7517] RBP: 00007f35917f4090 R08: 0000000000000000 R09: 0000000000000000 [ 221.048191][ T7517] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 221.048197][ T7517] R13: 00007f3590c26038 R14: 00007f3590c25fa0 R15: 00007ffd94d9d0f8 [ 221.048210][ T7517] [ 221.200976][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 221.349479][ T30] audit: type=1400 audit(1786002995.282:577): avc: denied { ioctl } for pid=7495 comm="syz.1.480" path="socket:[16504]" dev="sockfs" ino=16504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.487632][ T7529] netlink: 84 bytes leftover after parsing attributes in process `syz.0.496'. [ 221.718575][ T7538] fuse: Invalid rootmode [ 221.910055][ T804] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 221.975818][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 222.004872][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 222.069667][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 222.076530][ T804] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 222.104365][ T804] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.111106][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 222.138907][ T804] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 222.194203][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.229986][ T804] usb 1-1: config 0 descriptor?? [ 222.271282][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 222.286040][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 222.298815][ T9] usb 4-1: config 4 has an invalid interface number: 55 but max is 0 [ 222.320573][ T9] usb 4-1: config 4 has no interface number 0 [ 222.341882][ T9] usb 4-1: config 4 interface 55 has no altsetting 0 [ 222.366420][ T9] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 222.377926][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.404958][ T9] usb 4-1: Product: syz [ 222.420567][ T9] usb 4-1: Manufacturer: syz [ 222.436810][ T9] usb 4-1: SerialNumber: syz [ 222.489452][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 222.521178][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.505'. [ 222.545717][ T7555] netlink: 'syz.1.505': attribute type 9 has an invalid length. [ 222.610570][ T7555] overlayfs: overlapping lowerdir path [ 222.621267][ T7555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=7555 comm=syz.1.505 [ 222.634382][ T10] usb 5-1: device descriptor read/64, error -71 [ 222.661257][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.676685][ T7546] netlink: 148 bytes leftover after parsing attributes in process `syz.3.501'. [ 222.695715][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.751458][ T804] corsair-psu 0003:1B1C:1C09.0004: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 222.763885][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.794173][ T7558] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 222.830589][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.855962][ T7546] netlink: 148 bytes leftover after parsing attributes in process `syz.3.501'. [ 222.880491][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 222.888823][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.910485][ T9] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 222.944423][ T9] gspca_mr97310a: reg write [21] error -22 [ 222.957054][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.990836][ T9] mr97310a 4-1:4.55: probe with driver mr97310a failed with error -22 [ 223.013803][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.049900][ T10] usb 5-1: device descriptor read/64, error -71 [ 223.075727][ T9] usb 4-1: USB disconnect, device number 17 [ 223.091315][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.138863][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 223.153610][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.183382][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.209606][ T10] usb usb5-port1: attempt power cycle [ 223.290005][ T804] corsair-psu 0003:1B1C:1C09.0004: unable to initialize device (-71) [ 223.333671][ T804] corsair-psu 0003:1B1C:1C09.0004: probe with driver corsair-psu failed with error -71 [ 223.432918][ T804] usb 1-1: USB disconnect, device number 10 [ 223.487503][ T7572] netlink: 84 bytes leftover after parsing attributes in process `syz.0.508'. [ 223.579480][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 223.653220][ T10] usb 5-1: device descriptor read/8, error -71 [ 224.769144][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 224.919949][ T10] usb 5-1: device descriptor read/8, error -71 [ 225.014452][ T30] audit: type=1400 audit(1786003003.723:578): avc: denied { mounton } for pid=7590 comm="syz.3.516" path="/93/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 225.039671][ T7589] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 225.049557][ T7591] FAULT_INJECTION: forcing a failure. [ 225.049557][ T7591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.065018][ T10] usb usb5-port1: unable to enumerate USB device [ 225.078627][ T7591] CPU: 0 UID: 0 PID: 7591 Comm: syz.3.516 Not tainted syzkaller #0 PREEMPT(full) [ 225.078643][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 225.078650][ T7591] Call Trace: [ 225.078654][ T7591] [ 225.078659][ T7591] dump_stack_lvl+0x100/0x190 [ 225.078676][ T7591] should_fail_ex.cold+0x5/0xa [ 225.078691][ T7591] strncpy_from_user+0x3b/0x2d0 [ 225.078708][ T7591] do_getname+0x78/0x390 [ 225.078723][ T7591] vfs_open_tree+0x286/0xae0 [ 225.078737][ T7591] ? _raw_spin_unlock+0x28/0x50 [ 225.078749][ T7591] ? __pfx_vfs_open_tree+0x10/0x10 [ 225.078765][ T7591] __x64_sys_open_tree+0xa3/0x150 [ 225.078780][ T7591] do_syscall_64+0x115/0x870 [ 225.078794][ T7591] ? clear_bhb_loop+0x40/0x90 [ 225.078807][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.078818][ T7591] RIP: 0033:0x7f42b1b9e0d9 [ 225.078827][ T7591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.078840][ T7591] RSP: 002b:00007f42b2a09028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 225.078851][ T7591] RAX: ffffffffffffffda RBX: 00007f42b1e25fa0 RCX: 00007f42b1b9e0d9 [ 225.078858][ T7591] RDX: 0000000000081100 RSI: 0000200000003040 RDI: ffffffffffffff9c [ 225.078864][ T7591] RBP: 00007f42b2a09090 R08: 0000000000000000 R09: 0000000000000000 [ 225.078870][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.078876][ T7591] R13: 00007f42b1e26038 R14: 00007f42b1e25fa0 R15: 00007ffd5feb7ae8 [ 225.078890][ T7591] [ 225.337616][ T5342] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.360839][ T7597] netlink: 84 bytes leftover after parsing attributes in process `syz.3.519'. [ 225.413334][ T30] audit: type=1400 audit(1786003004.123:579): avc: denied { write } for pid=7598 comm="syz.3.520" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 225.489978][ T5342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.508904][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.538872][ T5700] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 225.692024][ T5700] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 225.788496][ T7600] netlink: 'syz.3.520': attribute type 2 has an invalid length. [ 225.798611][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 225.945862][ T5342] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.357734][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.368252][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 226.376619][ T10] usb 3-1: config 0 has no interface number 0 [ 226.384128][ T7600] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 226.400609][ T5342] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 226.410028][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 226.424123][ T5700] usb 5-1: Product: syz [ 226.438800][ T5700] usb 5-1: Manufacturer: syz [ 226.447223][ T5342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.465089][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 226.477818][ T5700] usb 5-1: SerialNumber: syz [ 226.521258][ T5342] as10x_usb: device has been detected [ 226.542942][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.564659][ T5342] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 226.597495][ T5715] libceph: connect (1)[c::]:6789 error -101 [ 226.606130][ T5715] libceph: mon0 (1)[c::]:6789 connect error [ 226.615587][ T7599] ceph: No mds server is up or the cluster is laggy [ 226.629098][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.661492][ T5342] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 226.696790][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 226.726121][ T5342] as10x_usb: error during firmware upload part1 [ 226.749728][ T5342] Registered device Abilis Systems DVB-Titan [ 226.756175][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.810765][ T10] usb 3-1: config 0 descriptor?? [ 226.838392][ T10] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 226.939339][ T5700] usblp 5-1:1.0: usblp2: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 227.111232][ T30] audit: type=1400 audit(1786003005.813:580): avc: denied { setopt } for pid=7592 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.219573][ T5342] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 227.322705][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 227.332585][ T7622] FAULT_INJECTION: forcing a failure. [ 227.332585][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 227.354720][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: syz.2.526 Not tainted syzkaller #0 PREEMPT(full) [ 227.354737][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 227.354743][ T7622] Call Trace: [ 227.354747][ T7622] [ 227.354752][ T7622] dump_stack_lvl+0x100/0x190 [ 227.354770][ T7622] should_fail_ex.cold+0x5/0xa [ 227.354784][ T7622] should_failslab+0xc2/0x120 [ 227.354798][ T7622] __kmalloc_cache_noprof+0x91/0x6c0 [ 227.354816][ T7622] ? alloc_pipe_info+0x10e/0x590 [ 227.354830][ T7622] alloc_pipe_info+0x10e/0x590 [ 227.354843][ T7622] splice_direct_to_actor+0x78f/0xa30 [ 227.354857][ T7622] ? __pfx_direct_splice_actor+0x10/0x10 [ 227.354869][ T7622] ? inode_has_perm+0x16d/0x1d0 [ 227.354884][ T7622] ? __file_has_perm+0x336/0x460 [ 227.354898][ T7622] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 227.354911][ T7622] ? __pfx___file_has_perm+0x10/0x10 [ 227.354929][ T7622] do_splice_direct+0x174/0x240 [ 227.354942][ T7622] ? __pfx_do_splice_direct+0x10/0x10 [ 227.354955][ T7622] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 227.354968][ T7622] ? bpf_lsm_file_permission+0x9/0x10 [ 227.354984][ T7622] ? security_file_permission+0x76/0x210 [ 227.354995][ T7622] ? rw_verify_area+0xce/0x6d0 [ 227.355012][ T7622] do_sendfile+0xadc/0xe20 [ 227.355033][ T7622] ? __pfx_do_sendfile+0x10/0x10 [ 227.355054][ T7622] __x64_sys_sendfile64+0x154/0x220 [ 227.355070][ T7622] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 227.355086][ T7622] do_syscall_64+0x115/0x870 [ 227.355100][ T7622] ? clear_bhb_loop+0x40/0x90 [ 227.355113][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.355124][ T7622] RIP: 0033:0x7f359099e0d9 [ 227.355134][ T7622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.355145][ T7622] RSP: 002b:00007f35917f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 227.355156][ T7622] RAX: ffffffffffffffda RBX: 00007f3590c25fa0 RCX: 00007f359099e0d9 [ 227.355167][ T7622] RDX: 0000200000000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 227.355173][ T7622] RBP: 00007f35917f4090 R08: 0000000000000000 R09: 0000000000000000 [ 227.355179][ T7622] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001 [ 227.355185][ T7622] R13: 00007f3590c26038 R14: 00007f3590c25fa0 R15: 00007ffd94d9d0f8 [ 227.355199][ T7622] [ 227.702116][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.710723][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.725108][ T5342] usb 4-1: too many configurations: 164, using maximum allowed: 8 [ 227.735095][ T30] audit: type=1400 audit(1786003006.383:581): avc: denied { write } for pid=7627 comm="syz.2.528" name="functions" dev="configfs" ino=10516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.757930][ T30] audit: type=1400 audit(1786003006.383:582): avc: denied { write } for pid=7627 comm="syz.2.528" name="target" dev="configfs" ino=1247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.780701][ T30] audit: type=1400 audit(1786003006.383:583): avc: denied { write } for pid=7627 comm="syz.2.528" name="usb_gadget" dev="configfs" ino=17013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.803956][ T30] audit: type=1400 audit(1786003006.383:584): avc: denied { write } for pid=7627 comm="syz.2.528" name="naa.1234567890abcdef" dev="configfs" ino=17015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 227.869773][ T10] usb 1-1: USB disconnect, device number 11 [ 227.952311][ T7637] fuse: Invalid rootmode [ 227.958123][ T10] Unregistered device Abilis Systems DVB-Titan [ 227.964961][ T10] as10x_usb: device has been disconnected [ 228.056672][ T5342] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 228.108654][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.146774][ T5342] usb 4-1: config 0 descriptor?? [ 228.217248][ T30] audit: type=1400 audit(1786003006.923:585): avc: denied { open } for pid=7645 comm="syz.2.534" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 228.573569][ T5342] usb 4-1: USB disconnect, device number 18 [ 228.738082][ T7653] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 228.762452][ T7653] audit: out of memory in audit_log_start [ 229.416458][ T5342] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 229.435563][ T5715] usb 5-1: USB disconnect, device number 14 [ 229.444276][ T5715] usblp2: removed [ 229.869016][ T5342] usb 4-1: Using ep0 maxpacket: 16 [ 229.875559][ T5342] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 229.887123][ T5342] usb 4-1: config 251 has no interface number 0 [ 229.906642][ T5342] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 229.927921][ T5342] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 229.953324][ T5342] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 229.996717][ T5342] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 230.047858][ T5342] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.089321][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.099868][ T5342] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.140999][ T5342] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.190245][ T5715] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 230.234959][ T5342] usb 4-1: config 251 interface 202 has no altsetting 0 [ 230.265868][ T5342] usb 4-1: string descriptor 0 read error: -71 [ 230.278807][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 230.290501][ T5342] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 230.304840][ T7671] fuse: Invalid rootmode [ 230.314852][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.331292][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.348489][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 230.359568][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 230.364922][ T10] usb 2-1: config 4 has an invalid interface number: 55 but max is 0 [ 230.378104][ T7665] FAULT_INJECTION: forcing a failure. [ 230.378104][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 230.399738][ T10] usb 2-1: config 4 has no interface number 0 [ 230.406099][ T5342] usb 4-1: can't set config #251, error -71 [ 230.435886][ T10] usb 2-1: config 4 interface 55 has no altsetting 0 [ 230.443354][ T5342] usb 4-1: USB disconnect, device number 19 [ 230.453101][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.4.540 Not tainted syzkaller #0 PREEMPT(full) [ 230.453116][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.453123][ T7665] Call Trace: [ 230.453127][ T7665] [ 230.453131][ T7665] dump_stack_lvl+0x100/0x190 [ 230.453148][ T7665] should_fail_ex.cold+0x5/0xa [ 230.453163][ T7665] should_failslab+0xc2/0x120 [ 230.453177][ T7665] __kmalloc_noprof+0xfc/0x820 [ 230.453190][ T7665] ? is_bpf_text_address+0x8a/0x1a0 [ 230.453205][ T7665] ? bpf_test_init.isra.0+0x88/0x100 [ 230.453226][ T7665] bpf_test_init.isra.0+0x88/0x100 [ 230.453244][ T7665] bpf_prog_test_run_skb+0x497/0x3540 [ 230.453259][ T7665] ? find_held_lock+0x2b/0x80 [ 230.453269][ T7665] ? __fget_files+0x121/0x3d0 [ 230.453284][ T7665] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 230.453297][ T7665] ? fput+0x79/0x100 [ 230.453310][ T7665] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 230.453327][ T7665] __sys_bpf+0x2a12/0x4e80 [ 230.453342][ T7665] ? __pfx___sys_bpf+0x10/0x10 [ 230.453353][ T7665] ? find_held_lock+0x2b/0x80 [ 230.453362][ T7665] ? get_pid_task+0xfc/0x250 [ 230.453371][ T7665] ? get_pid_task+0xfc/0x250 [ 230.453385][ T7665] ? find_held_lock+0x2b/0x80 [ 230.453397][ T7665] ? rcu_read_lock_any_held+0x6a/0xa0 [ 230.453408][ T7665] ? find_held_lock+0x2b/0x80 [ 230.453417][ T7665] ? ksys_write+0x190/0x250 [ 230.453425][ T7665] ? ksys_write+0x190/0x250 [ 230.453445][ T7665] ? fput+0x79/0x100 [ 230.453459][ T7665] ? __x64_sys_bpf+0xce/0x140 [ 230.453469][ T7665] __x64_sys_bpf+0xce/0x140 [ 230.453480][ T7665] ? do_syscall_64+0x90/0x870 [ 230.453495][ T7665] do_syscall_64+0x115/0x870 [ 230.453508][ T7665] ? clear_bhb_loop+0x40/0x90 [ 230.453520][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.453532][ T7665] RIP: 0033:0x7f6c00f9e0d9 [ 230.453541][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.453551][ T7665] RSP: 002b:00007f6c01dd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.453562][ T7665] RAX: ffffffffffffffda RBX: 00007f6c01225fa0 RCX: 00007f6c00f9e0d9 [ 230.453569][ T7665] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 230.453575][ T7665] RBP: 00007f6c01dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 230.453581][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.453587][ T7665] R13: 00007f6c01226038 R14: 00007f6c01225fa0 R15: 00007ffd9362b7f8 [ 230.453600][ T7665] [ 230.982166][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short [ 231.036785][ T5715] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 231.056758][ T5715] usb 5-1: can't read configurations, error -71 [ 231.069843][ T10] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=2f.cb [ 231.079490][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.087612][ T10] usb 2-1: Product: syz [ 231.091824][ T10] usb 2-1: Manufacturer: syz [ 231.096399][ T10] usb 2-1: SerialNumber: syz [ 231.107886][ T9] usb 1-1: config index 0 descriptor too short (expected 45, got 28) [ 231.118116][ T9] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 231.127546][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 231.149285][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 231.158567][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.172757][ T9] usb 1-1: Product: syz [ 231.184990][ T9] usb 1-1: Manufacturer: syz [ 231.227197][ T9] usb 1-1: SerialNumber: syz [ 231.279815][ T9] rtl8150 1-1:1.0: couldn't find required endpoints [ 231.291733][ T7676] FAULT_INJECTION: forcing a failure. [ 231.291733][ T7676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.311498][ T7664] netlink: 148 bytes leftover after parsing attributes in process `syz.1.539'. [ 231.320970][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 231.354774][ T7676] CPU: 0 UID: 0 PID: 7676 Comm: syz.2.545 Not tainted syzkaller #0 PREEMPT(full) [ 231.354790][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 231.354797][ T7676] Call Trace: [ 231.354801][ T7676] [ 231.354807][ T7676] dump_stack_lvl+0x100/0x190 [ 231.354825][ T7676] should_fail_ex.cold+0x5/0xa [ 231.354840][ T7676] _copy_to_user+0x32/0xd0 [ 231.354856][ T7676] simple_read_from_buffer+0xcb/0x170 [ 231.354869][ T7676] proc_fail_nth_read+0x1af/0x230 [ 231.354886][ T7676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.354904][ T7676] ? rw_verify_area+0xce/0x6d0 [ 231.354919][ T7676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.354935][ T7676] vfs_read+0x1e4/0xb40 [ 231.354953][ T7676] ? __pfx_vfs_read+0x10/0x10 [ 231.354969][ T7676] ? __fget_files+0x215/0x3d0 [ 231.354983][ T7676] ? __fget_files+0x21f/0x3d0 [ 231.354997][ T7676] ksys_read+0x12a/0x250 [ 231.355013][ T7676] ? __pfx_ksys_read+0x10/0x10 [ 231.355033][ T7676] do_syscall_64+0x115/0x870 [ 231.355046][ T7676] ? clear_bhb_loop+0x40/0x90 [ 231.355060][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.355071][ T7676] RIP: 0033:0x7f359095e90e [ 231.355080][ T7676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 231.355090][ T7676] RSP: 002b:00007f35917f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.355101][ T7676] RAX: ffffffffffffffda RBX: 00007f35917f46c0 RCX: 00007f359095e90e [ 231.355108][ T7676] RDX: 000000000000000f RSI: 00007f35917f40a0 RDI: 0000000000000004 [ 231.355114][ T7676] RBP: 00007f35917f4090 R08: 0000000000000000 R09: 0000000000000000 [ 231.355120][ T7676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.355126][ T7676] R13: 00007f3590c26038 R14: 00007f3590c25fa0 R15: 00007ffd94d9d0f8 [ 231.355140][ T7676] [ 231.593667][ T7660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.538'. [ 231.614177][ T9] usb 1-1: USB disconnect, device number 12 [ 231.722831][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 231.766562][ T7664] netlink: 148 bytes leftover after parsing attributes in process `syz.1.539'. [ 231.793531][ T7687] IPVS: Error connecting to the multicast addr [ 231.898690][ T30] audit: type=1400 audit(1786003010.603:586): avc: denied { nlmsg_write } for pid=7689 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 231.937429][ T30] audit: type=1400 audit(1786003010.603:587): avc: denied { create } for pid=7689 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 231.972464][ T10] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 231.987939][ T10] gspca_mr97310a: reg write [21] error -22 [ 232.023179][ T10] mr97310a 2-1:4.55: probe with driver mr97310a failed with error -22 [ 232.768820][ T10] usb 2-1: USB disconnect, device number 10 [ 232.834343][ T7699] jffs2: notice: (7699) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.950131][ T30] audit: type=1400 audit(1786003011.664:588): avc: denied { append } for pid=7700 comm="syz.3.553" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 233.013859][ T7705] fuse: Invalid rootmode [ 233.106756][ T30] audit: type=1400 audit(1786003011.744:589): avc: denied { write } for pid=7700 comm="syz.3.553" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.276271][ T7718] SELinux: ebitmap: truncated map [ 233.281552][ T7718] SELinux: invalid class [ 233.305124][ T7718] SELinux: failed to load policy [ 233.385342][ T7721] netlink: 'syz.1.558': attribute type 29 has an invalid length. [ 234.358492][ T7721] netlink: 'syz.1.558': attribute type 29 has an invalid length. [ 234.427297][ T30] audit: type=1400 audit(1786003013.134:590): avc: denied { map } for pid=7727 comm="syz.4.551" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 234.482517][ T7724] [ 234.484858][ T7724] ====================================================== [ 234.491932][ T7724] WARNING: possible circular locking dependency detected [ 234.498917][ T7724] syzkaller #0 Not tainted [ 234.503300][ T7724] ------------------------------------------------------ [ 234.510303][ T7724] syz.2.559/7724 is trying to acquire lock: [ 234.516177][ T7724] ffffffff901d0fe8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 234.525905][ T7724] [ 234.525905][ T7724] but task is already holding lock: [ 234.533241][ T7724] ffff88805597e280 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 234.542874][ T7724] [ 234.542874][ T7724] which lock already depends on the new lock. [ 234.542874][ T7724] [ 234.553251][ T7724] [ 234.553251][ T7724] the existing dependency chain (in reverse order) is: [ 234.562232][ T7724] [ 234.562232][ T7724] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 234.570888][ T7724] lock_acquire+0x1b9/0x370 [ 234.575898][ T7724] down_write+0x8b/0x1f0 [ 234.580654][ T7724] configfs_depend_item_unlocked+0xf3/0x6a0 [ 234.587054][ T7724] usbg_make_tpg+0x261/0x620 [ 234.592140][ T7724] target_fabric_make_tpg+0xab/0x8c0 [ 234.597924][ T7724] configfs_mkdir+0x51e/0xb70 [ 234.603103][ T7724] vfs_mkdir+0x361/0x850 [ 234.607840][ T7724] filename_mkdirat+0x48b/0x5e0 [ 234.613184][ T7724] __x64_sys_mkdir+0x6b/0x90 [ 234.618278][ T7724] do_syscall_64+0x115/0x870 [ 234.623361][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.629744][ T7724] [ 234.629744][ T7724] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 234.637364][ T7724] lock_acquire+0x1b9/0x370 [ 234.642368][ T7724] __mutex_lock+0x1a4/0x1bd0 [ 234.647449][ T7724] tcm_set_name+0x29/0xb0 [ 234.652273][ T7724] function_make+0x21c/0x3f0 [ 234.657367][ T7724] configfs_mkdir+0x51e/0xb70 [ 234.662560][ T7724] vfs_mkdir+0x361/0x850 [ 234.667301][ T7724] filename_mkdirat+0x48b/0x5e0 [ 234.672668][ T7724] __x64_sys_mkdir+0x6b/0x90 [ 234.677750][ T7724] do_syscall_64+0x115/0x870 [ 234.682833][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.689214][ T7724] [ 234.689214][ T7724] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 234.697441][ T7724] check_prev_add+0xeb/0xe60 [ 234.702526][ T7724] __lock_acquire+0x136c/0x1a40 [ 234.707876][ T7724] lock_acquire+0x1b9/0x370 [ 234.712869][ T7724] __mutex_lock+0x1a4/0x1bd0 [ 234.717951][ T7724] configfs_rmdir+0x5ae/0x950 [ 234.723120][ T7724] vfs_rmdir+0x328/0x8a0 [ 234.727854][ T7724] filename_rmdir+0x31a/0x5c0 [ 234.733020][ T7724] __x64_sys_rmdir+0x46/0x70 [ 234.738367][ T7724] do_syscall_64+0x115/0x870 [ 234.743453][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.749845][ T7724] [ 234.749845][ T7724] other info that might help us debug this: [ 234.749845][ T7724] [ 234.760038][ T7724] Chain exists of: [ 234.760038][ T7724] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#26 [ 234.760038][ T7724] [ 234.774689][ T7724] Possible unsafe locking scenario: [ 234.774689][ T7724] [ 234.782113][ T7724] CPU0 CPU1 [ 234.787444][ T7724] ---- ---- [ 234.792781][ T7724] lock(&sb->s_type->i_mutex_key#26); [ 234.798235][ T7724] lock(&opts->dep_lock); [ 234.805157][ T7724] lock(&sb->s_type->i_mutex_key#26); [ 234.813109][ T7724] lock(gadget_subsys.su_mutex); [ 234.818100][ T7724] [ 234.818100][ T7724] *** DEADLOCK *** [ 234.818100][ T7724] [ 234.826212][ T7724] 3 locks held by syz.2.559/7724: [ 234.831287][ T7724] #0: ffff88801e368450 (sb_writers#16){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 234.840651][ T7724] #1: ffff888057e61900 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 234.851924][ T7724] #2: ffff88805597e280 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 234.861979][ T7724] [ 234.861979][ T7724] stack backtrace: [ 234.867844][ T7724] CPU: 0 UID: 0 PID: 7724 Comm: syz.2.559 Not tainted syzkaller #0 PREEMPT(full) [ 234.867857][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 234.867864][ T7724] Call Trace: [ 234.867869][ T7724] [ 234.867874][ T7724] dump_stack_lvl+0x100/0x190 [ 234.867888][ T7724] print_circular_bug.cold+0x178/0x1c7 [ 234.867905][ T7724] check_noncircular+0x146/0x160 [ 234.867919][ T7724] check_prev_add+0xeb/0xe60 [ 234.867931][ T7724] ? __bfs+0x150/0x2a0 [ 234.867940][ T7724] __lock_acquire+0x136c/0x1a40 [ 234.867955][ T7724] lock_acquire+0x1b9/0x370 [ 234.867967][ T7724] ? configfs_rmdir+0x5ae/0x950 [ 234.867982][ T7724] ? __pfx___might_resched+0x10/0x10 [ 234.867994][ T7724] ? __lock_acquire+0x49f/0x1a40 [ 234.868007][ T7724] __mutex_lock+0x1a4/0x1bd0 [ 234.868021][ T7724] ? configfs_rmdir+0x5ae/0x950 [ 234.868034][ T7724] ? configfs_rmdir+0x5ae/0x950 [ 234.868048][ T7724] ? reacquire_held_locks+0xce/0x1e0 [ 234.868060][ T7724] ? __pfx___mutex_lock+0x10/0x10 [ 234.868073][ T7724] ? do_raw_spin_lock+0x128/0x260 [ 234.868088][ T7724] ? find_held_lock+0x2b/0x80 [ 234.868096][ T7724] ? fast_dput+0x2fe/0x6d0 [ 234.868111][ T7724] ? _raw_spin_unlock+0x28/0x50 [ 234.868121][ T7724] ? fast_dput+0x168/0x6d0 [ 234.868135][ T7724] ? configfs_rmdir+0x5ae/0x950 [ 234.868148][ T7724] configfs_rmdir+0x5ae/0x950 [ 234.868162][ T7724] ? __pfx_configfs_rmdir+0x10/0x10 [ 234.868176][ T7724] ? __pfx_down_write+0x10/0x10 [ 234.868191][ T7724] vfs_rmdir+0x328/0x8a0 [ 234.868211][ T7724] filename_rmdir+0x31a/0x5c0 [ 234.868223][ T7724] ? __pfx_filename_rmdir+0x10/0x10 [ 234.868237][ T7724] ? do_getname+0x191/0x390 [ 234.868250][ T7724] __x64_sys_rmdir+0x46/0x70 [ 234.868262][ T7724] do_syscall_64+0x115/0x870 [ 234.868274][ T7724] ? clear_bhb_loop+0x40/0x90 [ 234.868286][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.868297][ T7724] RIP: 0033:0x7f359099e0d9 [ 234.868306][ T7724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.868317][ T7724] RSP: 002b:00007f35917f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 234.868327][ T7724] RAX: ffffffffffffffda RBX: 00007f3590c25fa0 RCX: 00007f359099e0d9 [ 234.868334][ T7724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 234.868340][ T7724] RBP: 00007f3590a35024 R08: 0000000000000000 R09: 0000000000000000 [ 234.868346][ T7724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.868352][ T7724] R13: 00007f3590c26038 R14: 00007f3590c25fa0 R15: 00007ffd94d9d0f8 [ 234.868361][ T7724] [ 235.150367][ T7724] jffs2: notice: (7724) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 235.262454][ T7728] ftl_cs: FTL header not found. [ 235.274511][ T7728] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [65] [ 235.323578][ T30] audit: type=1400 audit(1786003013.134:591): avc: denied { create } for pid=7727 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 235.345103][ T30] audit: type=1400 audit(1786003013.174:592): avc: denied { bind } for pid=7727 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 235.364357][ T30] audit: type=1400 audit(1786003013.174:593): avc: denied { getopt } for pid=7727 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 235.383678][ T30] audit: type=1400 audit(1786003013.194:594): avc: denied { write } for pid=7722 comm="syz.2.559" name="functions" dev="configfs" ino=10516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.406518][ T30] audit: type=1400 audit(1786003013.194:595): avc: denied { write } for pid=7722 comm="syz.2.559" name="functions" dev="configfs" ino=10516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.431426][ T30] audit: type=1400 audit(1786003013.194:596): avc: denied { remove_name } for pid=7722 comm="syz.2.559" name="obex.usb1" dev="configfs" ino=17364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.455387][ T30] audit: type=1400 audit(1786003013.194:597): avc: denied { rmdir } for pid=7722 comm="syz.2.559" name="obex.usb1" dev="configfs" ino=17364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.487919][ T5715] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 235.637698][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 235.644387][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.654401][ T5715] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 235.662863][ T5715] usb 4-1: config 9 has no interface number 0 [ 235.669163][ T5715] usb 4-1: config 9 interface 57 has no altsetting 0 [ 235.677874][ T5715] usb 4-1: string descriptor 0 read error: -22 [ 235.684095][ T5715] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 235.693286][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.959247][ T5715] (null): keene_cmd_main failed (-71) [ 235.973993][ T5715] video4linux radio48: keene_cmd_main failed (-71) [ 235.988499][ T5715] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 236.009047][ T5715] usb 4-1: USB disconnect, device number 20