last executing test programs: 4m52.967833335s ago: executing program 2 (id=950): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000380)='binfmt_misc\x00', 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x21) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc0}, 0x12180) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, 0x0, &(0x7f0000000140)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x4, 0x8f0, 0x0, 0x0, 0x1000, 0x7f, r4, 0x0, 0x48}}}, &(0x7f00000001c0)=0x0) syz_ublk_setup_queues(r7, r8, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x42044, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2080, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa11, 0x0, 0x40000003, 0x3d2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd39e, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4m52.74080109s ago: executing program 2 (id=952): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502a700030000006500000000002b6ea041eacdc9226ebfeec567ca45dc270e27eff91d9ffe06ad58dbac2c6e142b40209fcb120fdff9bc9549b7ff82022786ac03c1709c66d805ef99d567fa"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x2400) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) 4m52.621711128s ago: executing program 2 (id=954): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000420001000000000000000000030100000f0000003f00010000112233445566778899aabb86dd2c00001c00002c00011100000101010102538758fe6cbdf0357065ae44132403b1fd60640100000000000000b20004000280040003"], 0x60}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x262826, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f00000003c0)=@ethtool_channels={0x3c, 0x18, 0x8, 0x6, 0x8001, 0x2, 0x10000, 0x6, 0x2}}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000080)=@arm64) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x87, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xcc39, 0x0, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="2021240000002421c263007599a06894e8000000000000000000000000ffffff53c34935d2332c2d6a00"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x33, 0x80003, 0x0) setns(0xc9, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x10f) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xec100, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x40047459, &(0x7f0000001200)) socket$inet(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4m50.481478771s ago: executing program 2 (id=961): mkdirat(0xffffffffffffff9c, 0x0, 0xbd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x109) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) write(r0, &(0x7f0000000280)="ff80", 0x2) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x70, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1a}}}}, [@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x40}, @device_b, @broadcast, @from_mac=@broadcast, {0xd, 0x84a}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x8, @default, 0x1416, @void, @void, @val={0x3, 0x1, 0x8c}, @val={0x4, 0x6, {0xbc, 0xff, 0x1, 0x101}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0x1, 0xeb, 0x8}}, @val={0x25, 0x3, {0x0, 0xb8, 0x4}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x9, 0x48}}, @void}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x20004084) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x5) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000000}, 0xc800) recvmmsg(r9, &(0x7f0000001140), 0x700, 0x2, 0x0) setns(r7, 0x24020000) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(r10, 0x0, 0x0) 4m50.217949654s ago: executing program 2 (id=962): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="002128080000d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m47.617553991s ago: executing program 2 (id=972): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502a700030000006500000000002b6ea041eacdc9226ebfeec567ca45dc270e27eff91d9ffe06ad58dbac2c6e142b40209fcb120fdff9bc9549b7ff82022786ac03c1709c66d805ef99d567fa"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x2400) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) 4m47.344886316s ago: executing program 32 (id=972): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502a700030000006500000000002b6ea041eacdc9226ebfeec567ca45dc270e27eff91d9ffe06ad58dbac2c6e142b40209fcb120fdff9bc9549b7ff82022786ac03c1709c66d805ef99d567fa"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x2400) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) 12.245591901s ago: executing program 5 (id=1817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r3 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='cramfs\x00', 0x4418, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000009, 0x406e171, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r5, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048014) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 11.311332053s ago: executing program 1 (id=1821): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) sendmmsg$inet(r0, &(0x7f0000001840)=[{{&(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000380)="f395604800267c64dde1eb2718c0ebf5050e41589df1781326838a038be32bde99e07584f02d644f4a8f3f1d40bf0badeb63b8e3a69cdb509b97836bb960f3f9ccba37b8e374d0684684f42b4a591bc1ab325121f887615b9ad9a980a03710c5faf6c525d536e6694985ae5f22b81c103342645ac87e3d63fb7ca1284682447aac2f1f", 0x83}, {&(0x7f0000000440)="b4e68257252148bce46846142386001c01a5afaedd9d170fc5b61bf9bff6dbe7f3c98bea5e3557ccbd6246bf4f9ac3bc4c736d334c98a50a82eaa63348f5debf6860145431d6fa1d8c08915aa5f467ec129a6e26df7030822d54a39a691f4685278d529134a48787c319e0e3906cdc133df137983322da084d892a61d9c5029a0200507cd6ab60f3d9b104d2b4545e7cc9f45765b4df2d2dbf640368b3a5c3fafd7721c8ccd79714bb39c922489c594d7d4b9dcea86967ea0554f3d48281147edc42ffd44f53ef81d727503a310a3706c2a52608486ba6dffb", 0xd9}, {&(0x7f0000000540)="008f9c20fa2cb123b738051a19ed645cd5d6efd59cfcde0f1a398fb8cf787682f2159110e6408ba55aa20ef2c1c3b3792fe64752722750bb209dc892ec41b7641031f104b279922386ba21c25374316dd06306ac69a6bbf69ffb8f9301e077bf7f8bcf7a8069d8e6b16c0c67bfe8a0", 0x6f}], 0x3, &(0x7f0000004f00)=[@ip_retopts={{0x40, 0x0, 0x7, {[@rr={0x7, 0x27, 0xb7, [@dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010100, @multicast2, @rand_addr=0x64010102, @broadcast, @private=0xa010100, @loopback]}, @rr={0x7, 0x7, 0xdd, [@remote]}, @noop, @noop]}}}, @ip_retopts={{0x130, 0x0, 0x7, {[@cipso={0x86, 0x63, 0xffffffffffffffff, [{0x0, 0xe, "5a862ed02eb9e74edf572c3f"}, {0x6, 0x10, "1b7da63d9671196d02a4f759e05e"}, {0x0, 0xd, "6113395c167228a7b239e7"}, {0x5, 0x11, "cd3ad9d6d5a602e61a42bd254f70db"}, {0x5, 0xf, "fedc04cabdb1823131b36a9f87"}, {0x1, 0x12, "035424e68b1d2d5bf99a66bbdb2e6699"}]}, @noop, @end, @rr={0x7, 0x7, 0x1b, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x27, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @broadcast, @multicast1, @local, @remote, @local]}, @rr={0x7, 0x17, 0xae, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @private=0xa010102, @multicast1]}, @generic={0xc8e83b69f736af08, 0xa, "a33523dc1a48090d"}, @timestamp_addr={0x44, 0x24, 0x68, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x2}]}, @cipso={0x86, 0x46, 0x3, [{0x0, 0x9, "08173a25a175ee"}, {0x7, 0xf, "b32aa804dc70d50377afc60d48"}, {0x1, 0x10, "46b25a76239ba48384b4db298368"}, {0x1, 0xd, "004b2588a18ced4b17af2e"}, {0x7, 0xb, "42a9c105d20df8b0ae"}]}, @noop]}}}], 0x170}}, {{&(0x7f0000000900)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000940)="e9d78e089d7106e1aefba7c2053bf15d8debf6d969e38c8b987e8c55e97c13be57d86ac2d516753b13819fc1b534879446ffee59905eb07a188eaf605627610195d9293dc9aff569191dbee0c1f4b08d4af204f90774982329b27e12700a74a9420b1fecaa40cd827b36e9f3c347a3e57b832319b716f1ab58f04e6921401c1deab1", 0x82}, {&(0x7f0000000a00)="47a50826c7998ff3b6d570dcfd136d329fdbc23374098ac219d5362d423b1bb9cb9ea7152be42953b4c2c09b181b9d61f57ad8fc7690b0727120370fc3c51043d5f26d1fc386cbc6955551f4fdc039a6a5c928f77367f1547c626abd938e1d162f0c4aeff7b20a879e9694728a2bf235bcf22aee61352797d5065236dd209eff8be5c9a9371e39499252aa2bb2f30cafdb0777fb1bfd4bba5f1b50aa55f3beba6e82ee9fd2daa3c81223c5f83ef293a58346e10ae1bc78988ada8a7a6041ac7edfce8be582f8d2a5771d5fdd99a4e6ee4ce1271d84bd45f2f154dc1f20f433e1cf1119385d", 0xe5}, {&(0x7f0000000b00)="974d91da3bbeedc58c06d1d69f1d7511f0a29d80e13ffe481eafa319ba72267733541f1fd73f927f185a0120e07f46d4db21cc5330958776b9a8931494c15cc56640c768b590a6124c7138942bde", 0x4e}, {&(0x7f0000000b80)="76766b3e4d3e797b3d84e5daf27629816a0f88f130ddcf03aa47df5efc1d046dde6623abcb4fe477d48bb8ef13fa0c6ae75231a7df8957b897ce885d54c7d0b8a6adcf982ba1e13d3ee852c6edf5dac27e0b2fa7b22415ae51f3116277b239af38c8f0dd0d6a2f4a808afcaff727ce22e97edc4cc195f0bab9a776405ec8efdfc2523b4c06ef4cf50d898acbe68f85903a89daeaa6e5446931da6a503cdecc96f906366ca24258f42d", 0xa9}, {&(0x7f0000000c40)="47c281e44ee2c815f95d166e5baa98c4b2bdaa6256a46944fe94043bc719537661d2a99984e89c6f3acf5df899c831c81ac84dd934e9f8491409427581741edfc1413b85686cbf58299cfb0eddd14693a631673a0f82d287a13be6e0cfed6f7e1fa157378ef1fa8f5805546a279674334313b6469f55c09c851525750cd00e78edf0d4daddba643619feeebf3a0700c179d613e1a115946dc29955f65fadf96d86a77c927842c6ea358d975b153a5fe3766067faf98ecff5b8f5f9071b70b7982e3d478f", 0xc4}, {&(0x7f0000000d40)="b117b30ff97377fe64a14ca3318da6126a69d8c4fd05a99f294ae666857435dc673e3bac3f20fceac0f37d648ce37166fb88a5702a32db11888a86701f4125b92a78521d606c29ab201001219d34f938bcd3b4cc995cfa7c72687bd0ce284fe35cd7a4184a1dd1fb0feff95d8424ff49de1bb9ae2b847e4a2a9ac0406a3912839d300355239c9ef8db24b4329062878db38c0b6b0d28152e1ac1f4c9b5cbe9be917466c7ecb1a68c8cf33192fad40fd3398ea124040d4050e65abb460b65be2c002f052e7f76", 0xc6}, {&(0x7f0000000e40)="bfc2cbf5a631eaf9be8fb896534e9cc11e3f3c54a909ca2414d5e6c62ef4d8d87e1951f309e4811329af09d4dffa155159a0e2d10a827fffd288f9a44ffbceb3b632ab26f624d89201fb2be3842b66115eadb68b84bf4ef2f4c1905ccb8e06f3f01b9e0d3243cd08082078ea2872c3d8b6cd40e3971318181f9e54c21e443e893ac335a9e83103c794a89c9dea68", 0x8e}, {&(0x7f0000000f00)="df240a1c1146fa51c46e8541d23bda3a575a9221639bea4c249a25d3a79de19e758a980dfeeaefc46022e006eece870867573a71707e26df88f783b3be63409ea69881722b9c87", 0x47}], 0x8, &(0x7f0000001000)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0xa6, 0x3, 0x9}, @rr={0x7, 0x1f, 0xc3, [@rand_addr=0x64010101, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @broadcast]}, @rr={0x7, 0x7, 0x86, [@multicast2]}, @noop, @end, @generic={0x82, 0xd, "e50473d9197d19316b542e"}, @end, @timestamp_prespec={0x44, 0xc, 0x69, 0x3, 0x3, [{@remote, 0x3ff}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x28, 0x0, 0x7, {[@cipso={0x86, 0x15, 0x3, [{0x0, 0xf, "41c043cd7aabe7703bdd3cd5c1"}]}]}}}], 0x70}}, {{&(0x7f00000011c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001200)="bf5f01130ce8bd21ef172c509ac6b8171e3b1769a32cf012cd8c79fb38445e95174eec713128028baabbef19162001c8c7aa97b3a437bc3b4535950d06d227e7675c402b66290dd025efb83d017b3d822771bb3b8913ab1c4c4053cb4f0a4377743326ec337e6e80b3bacb54198148860eb487460a1f24c638616b3d40e77210e6e4e29d79a7ec5fb7fad00c57b29f745b893ad8afdb1aefd2bcf066da5907bdf56b0189939e72a7495bae41e415a687263b7cfa2b27a677957000206f7162728d0236", 0xc3}, {&(0x7f0000001300)="5faf0f139507d3f99ee28c2ce6961e5e9fe69980228c1911e9f7a999faa0b11c42226fca62f22e9f159bd3cd8502255466cb5fdec0a53835aa637da8fc0f6e99b73a5ce20927dd2afb639667fde3b28172562eee011c14fae9981d0d0a9e720b842a833d0ba0dbc03ce148d5b22c0fd7c083fdd557762ab999c8808784788b118edc957a6352327f74b5ee6b792f8b03f424b3976dc547ec15fb4f677a27eb30a8", 0xa1}, {&(0x7f00000013c0)="4894d4c085f36b0a3f9abb2ec6a2e21945e0e9d320deefa796ca399098709db5f2d69d3b9c28c48557da184ff7cc44bb6eaa26d5ccd0e0b0b8933dc0c29c169ddbf67bd2560d3253dfbd2d1dabfb88a3b6a0d2d4d00b72aa275ce29db7fe18ae9d11acb929527b52fec46e594f76fe0841989d73752c08148220cf3c26d9580088f39a32b7592a7e776667337079f81fae7c6dd24125b0bc9afff21066177d8e5a70774ef71e925ea482", 0xaa}, {&(0x7f0000001480)="87025bace34dd58fb58655cf8d42b583df60a2e875b149853e54348463abeb921c8aafd70219d8a8a08ea6b4276ed01b8efea8bcc8b207f56f89b5bac6d5344c0d4bd30b69b470423315f07f85174825e33ce0e7088cff04343666d11e54db4275b28aa680d833559c42587b70c2bdb9705dd2335b00", 0x76}, {&(0x7f0000001500)="89865b3b01f5cbdda532c2f9a8c423048504b0be0425201dbbfdf96f256458f4429ceb41a7e8dc0edc69692a01be4acb40593f123b9c9e5fb654f7cf221b5bdebffaf0327b0763f05f83ecdef91ec90f375ef0776b5ab90671cf15994b3de7d1b642ec32fbe92bf9954967634da2f0acc42c080a05d9dbb9d4a7609292135967612cb7c5279987fc887daecae2dac08420c931912430be859a976280ddecb81be26cebeeebe19c1d60822e01869a402ed84ed53680ee0e02e7eca106a22e737b6e13a9d97cd59b7b6cbf4df5fe5c6a731786c4285f8d6ea9f055fbe994afd3d99a12d33206899f", 0xe7}, {&(0x7f0000001600)="fcfb02769821424105442ad805c6b3bd2a814014159d72f4858b488341b746", 0x1f}, {&(0x7f0000001640)="c3405c3a5fa75cbdc3d7714f0deeb924fd3deb86b1b6d580f3fa41023e8079fb35e1a242f94a8556c4", 0x29}, {&(0x7f0000001680)="7701a5525a891995478d958f3908c76326fec2df", 0x14}, {&(0x7f00000016c0)}], 0x9, &(0x7f00000017c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdc}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x80}}], 0x4, 0x10) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x101, 0x3}, {0x5, 0x1ff}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r1, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r5 = socket(0x2d, 0x2, 0x0) connect$netlink(r5, &(0x7f0000000140)=@unspec={0x2d}, 0xc) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf, 0xa}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 10.21537551s ago: executing program 1 (id=1823): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000240)) 9.881662141s ago: executing program 1 (id=1825): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setns(0xc9, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) prctl$PR_GET_NAME(0x10, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000002200)={0x449, 0x3, 0x7, 0x6, 0x0, 0x81}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x4, 0x2, "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"}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 9.050972995s ago: executing program 3 (id=1826): r0 = syz_ublk_setup_io_uring(0x4bee, &(0x7f0000000200)={0x0, 0x1a40, 0x2000, 0x1, 0x24d}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x1e, 0x110, r0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r3 = dup2(r2, r1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20071026, r4}, &(0x7f0000000100)={0x0, 0x5, 0xfffffffb, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) (async) ioctl$BLKRRPART(r3, 0x80044d0d, 0x0) 9.030342985s ago: executing program 5 (id=1827): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x6, @local}, 0x3a30e3a1b28be0b9, {0x2, 0x4e21, @multicast1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r4}, 0x38) setns(r2, 0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xc0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0xffffffff, 0x81, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x5, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000240)={0x3, "ad53f873bc20010181741d6045173710cdff69fd3a7c386033ba17a7a514c3d2", 0x2, 0x0, 0xffff, 0x4000, 0x4}) r7 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, &(0x7f00000001c0)=0x3) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000000c0)=0x2001) 8.879674023s ago: executing program 1 (id=1828): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000080)=ANY=[], 0x1001) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf913, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaa00000000000086dd6000000800200601fe8000000000003a00003641dfc3b500000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907800000802c5833c800000000700"], 0x0) 8.515975389s ago: executing program 3 (id=1830): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a000018010280140117"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000800000200012800b0001006272696467440000100002800c0022000104080000000000"], 0x40}}, 0x80) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000b00)={0x0, 0x42474752, 0x3, @stepwise={0x9, 0xff, 0x7, 0x1ff, 0x5, 0x9}}) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x2) close_range(r7, r8, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x2, @void}, 0x10) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r9, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r9, 0x1, 0x7, &(0x7f0000000340), 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r13, r11, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) 6.961812062s ago: executing program 1 (id=1832): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='100000', 0x6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000280)=""/7, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket(0xb, 0x4, 0x3) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80001) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f01"], 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 6.733780431s ago: executing program 5 (id=1833): r0 = syz_open_dev$usbfs(0x0, 0x206, 0x82) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r4}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 5.862602353s ago: executing program 5 (id=1834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000200001000000000e000000000a004008000000000000000014000200fc0200000000000097e6000000000001"], 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xc07e, 0xffffffffffffffff, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001500192340834b80040d8c560211820fffff5bab4e210000000058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeffe809004000fff5dd000000040002000800030004000000224e0000", 0x58}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) 4.582946116s ago: executing program 5 (id=1838): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='100000', 0x6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000280)=""/7, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket(0xb, 0x4, 0x3) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.310981916s ago: executing program 0 (id=1840): timer_create(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="0d0304000000fbdbdf25130000000c000980080002"], 0x174}, 0x1, 0x0, 0x0, 0x40004}, 0x20000800) 4.267688803s ago: executing program 0 (id=1841): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x1b, {0x3ff, 0x80000000, 0x1, 0xfffffb77, 0x400, 0xb}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc4) r3 = fanotify_init(0x200, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/258], 0x119) write$UHID_INPUT(r4, &(0x7f00000013c0)={0x8, {"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", 0x1000}}, 0x1006) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000000000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32, @ANYBLOB="010000000400000000000000000000000000200037050400000000002b000000f3"], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x4) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 4.144324542s ago: executing program 3 (id=1842): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xd, 0x5}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x218}]}}]}, 0x3c}}, 0x20004055) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x180940, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x4b) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, 0x0, &(0x7f00000000c0)) personality(0x5400004) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="2c0100001300015c80aa9c99964531eb1c6ba420493178395724c9e9e4df0944d389e291a96d56c426a34a22e265815a272f5c9ec8d84b1ba80fdfc431e0ee7f2293e3026be75ef6e7b943dbb6c9317e"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) io_setup(0x9, &(0x7f0000000340)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000040000000400000005000000000000000a596e880abb24c0c8ed2c5954f0e8fbed372d94d5d05819d1c5f5740571a27306073f3e2173a1c973f48f21cbf3e53e9f826d90522c206d2324ba1d507e4d7646bf7b843dc3a421c46394aeb406af39e47293e13a02d3ac2891250cd130baddb460", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x845a01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f00000000c0)={0xa, 0x28000000}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@bridge_getneigh={0x20, 0x1e, 0x105, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x8001, 0x3800}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e"], 0x44}}, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) write(r7, &(0x7f0000000280)='{*', 0x2) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0xb, 0xffffffffffffffff, 0x1}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001980)=""/4154, 0x103a}], 0x1}, 0x0) 4.067029326s ago: executing program 1 (id=1843): socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1034, {0x2000, 0x0, 0x15, 0x3776, 0x5}}) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) 4.00303256s ago: executing program 0 (id=1844): mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e586840000102030109022700"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) unshare(0x44040000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000100)=0x3) ioctl(0xffffffffffffffff, 0x389, &(0x7f0000000300)="76657468303a300000000000008000"/25) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x40000000}, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f00000024c0)=""/4122, 0x96f, 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) close(0x3) 3.87982987s ago: executing program 4 (id=1845): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x87, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xcc39, 0x0, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.449832188s ago: executing program 5 (id=1846): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000030000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) accept(r2, 0x0, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) statx(r0, &(0x7f0000000680)='.\x00', 0x1000, 0x400, &(0x7f0000002180)) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) 3.123925662s ago: executing program 3 (id=1847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r0 = socket$kcm(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x8084) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) 2.176399298s ago: executing program 3 (id=1848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) preadv(r0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') 1.423100302s ago: executing program 4 (id=1849): syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x1000, 0x2001, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@window={0x3, 0x3, 0xf}]}}}}}}}, 0x0) (fail_nth: 2) 1.21350892s ago: executing program 4 (id=1850): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x1b, {0x3ff, 0x80000000, 0x1, 0xfffffb77, 0x400, 0xb}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc4) r3 = fanotify_init(0x200, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/258], 0x119) write$UHID_INPUT(r4, &(0x7f00000013c0)={0x8, {"2ad048fbc8a20a894c5ab9d441cda84388216d485255e28e4cd5cd2009b77c8fe797901ed4fb41139410a1259dcc44e20f05ad75a037065cb65c9ab0ecc8bac020db74d896f8dc533c15402a132bc53c5a05befd2331fca049ae4109aaf386a1ecf1fa6e5a6c3e804f531d61bb484c9fe28892348e0dcb7484160865ddca4df48a91c94d515a5b503cd4077639e6ad5977ae6b1caeac6965184eba1256b9780b47e1cd38334e06ed989e9e6d864d46f78f0be306a33a1f5a216321902130f7f244a2ffad59013c25221920a3909e0f109f438d6e30083591850b82ccbdf900e22dc77c76611839cd0671d5ab51755db34b844159f8d6155bd08cf54b8bbf073d35148fdcda67bbb125b2d55e4aac2fde2caa2c3f5e984dd66b15791ea1ee426c461f25faaefe25582de2177adce50079f42ad54b5abb7b15e358980fd828b3cc973392cd0fe9ab2c2319829c1335bfa1339b5d01538acafeea2b875a74532c0f0be78b30ca5330e4363f343414a32bb357be1567a3ee1e8fe787b8b4db69a3548f25584fca65442a640ca8a24c3fbe98cb7e2ef50660df359516a5777cbb0e2bbf7e362a5224f405a473a7570f9d69ebede8700cb6d575a37837c7b0bf99830410ec74711e5fc8fb59693ec2bd2352f3ec9fbb697b420ebd7929ced190c42e98f628eb6582b7af3e53df13ba4a618ed337882efe1838aa6fd265059b03a999200a7d4eb9fab3fcf74087b1bba2b159ba0c001c773f3800664679e9cb21a82183f8dabadc57a013af816849e100f0c450f361cddf8d888ad1d30cace986fdbcc4dff867e77ddeb5e84739bd8c6b1f5c9f7d10146153960a45e79ab742bbfe2bea727c9625a35d141758a3ffc9281d96b5317930de86ade27dba04603eec9033134be7dce962e501b39f88ad5581204cb3593d9af987d1c1fa87ffbd946b07ffdf743f56c4eee2b41c4ad640b9a341f768317d7c5a5c4ec53db4e67c514a953e55dce857cb78f555c5f7959982f80b38668da321027fe9d34d1262cf1c8c0b17dc84b5ed0cc3d6934b92819f08b73d1da64662449a11ec1dc78c0df26974c36dd5b404c1614d1e26420e71d38be84aa1282bee83f2f4190e1d5b6118d2eb99a39d5c0bad75797b5d227f661d796930b9c1c68548ebe48c3299ba033506da01d2f21770d82ef8c6569043a9b7fe5ee4b10749215260bd923986743d85484b725c91b30cecefc90e482ff7bdf802eeebdd58949fbbf5bdf1337f2cd1c1a1b76a89ddd45774dedcab050f5fd17f3c23ed09273d213336a4ddfae40c3897857d34ece4e6eb0aaae232fee4140a9cd0ca2ba8337ad140a94fb9e19e47d230b50cd0500350bdae46ad8c33fc7ce91b90f576499614f14ffbb997853c4daf4a74ec9b5fc88be5f3ec68c314385abb051b5b4ba3e25bb2abf36da30c296138f91bc3c669dc247d8c96be05f2c23a34640206ddae5abe24107836c3c29e7ad52292246c4fb2159f5fa251bd1568879a24d5f53e8c8f3c187529b88839d74c4e38ae3d97c8b0e9b1eacba393cb8579cdbd806868d4097b466ef067a23629f64944bba8f704bc8498da4c14ba8a790e26f827f9a42c6891cf842c27ca748fa8e08819ab0f6ed5324f7b1396d1a0b4e876b2c1917bba7d3fa2360166677dd81c0cbb053ae0b2e920a508b0145ac6421dc9c402a4dad469f5fb4d5d41ec77e57fcb4c57cef6151baf11f6e40663d13942479b58d3a385827c809b35f39009ed00dd270721288a957ef0dbb2e0bb4a25c5fa05cb95394fb90526df7abe29bd9c38184f70235b2a1722b1779ad622bf57ffa2f19c5dbb2f9a5aa1d7e9e48443a6a8b786af9845338b4215f0896d8c89b93413581a9d5dd2dc5537a2df8b250a27ca56b6b0e00d1b1145292538004bd3cb59eb56efeb5a3e0f122d4bfbb8c05b58926b373243d53e880e3ca8bc0f8de5449ac9d42c05492030aa088acf6622d7e5db26f9e4c09d4289743f45fda885ecf4f5c65af24a64d0345b7b3a609fc86a5bb81d7c8dc3646ed2ed18d02ec7bcf8c181d30a19eaebe7fb0a7206c6434ee03b7fa3120f74006c8776e2eb176c8a1c6fa377ce3a43ab4eaaba6a07b3d53ae3fe0b04e852c35c815ad9f15e77e1f99f69bf80194af52a50c7b6b1277f90da9f565d5d808300811e36a410d1c1acbc0ed2a6d4e81a9ccb8ea5e9625bc754b7c107293058fe6caebe805708e785761880c090c3477b26e1db477c9111aa20f3c9d6697e8845b6fd255ec248240aa3a05d65e2d07111fb84f076c4f01d92dc0d74350352071ab65537638c9fc40a01aa83968cf76d3d0ff230fcad1eb4df7fd22c5f1abc5cf99954fb36d00aabdc8c7b8a5e7ffffcee224d2c7fa1e969fe86e15d38432d74988a1315bae54547def46b4de328769de5f5976ee9185c0938d0fee5ee0ac58eb211efa86c93e5bf1a80cdc7ef6178ca0bb3a169fd57fa0e13e1e119c54f2c91794ab18181f9367d9d8476efcb74bec57ace7ddac1fc0ff2c5df5ed2bc757a85542ba814706dbf623bda571dbd202160245ed5eb1331f26e12ae23a28d9df22cb711b1e73db7df47622b25f1034fc4892ba2f2303b01f33ddb158005819db7cb68a3b07659375744f1656b188fd16f4a1d7e05b62b84a1c2e234613c957d3240946d269c12273b8bf4b59b6474d7f5ef65d5e5f091046488a98e44512b4d12a60682427d72129ea7226b088b607272d7fa566c31516d72e9360197a255b436afdcfc3d5e71a8c722694959adb624991d60f3c82228e73141ff9f4fc3e04f5fa8e1ba34207c25c01818c6b64380b8def294fc311f52751eb5253c58b3a3155a5c8aa8f52bdd3d9df8b698cdd50f8baa1edbde1be5dcfd34961d65efd1a8e9f14b89de3c50c7d9cd3eba82d71f548f7f93704012a31fe37385a58aba929c603230d525ca5d61f51c09da9dcb9245056c2d6f63605ca2a7be921d9c0e24fc0737174c87244c092c5f6b1ed5b5e9c401b602c193f3782d0a5fd7d4cc04c175ec51f24b9f9c3b5b3c55636f9e4333e26a664ddc60fbcc85758203dfab76a28ea430f45c139466489aece9fec10f04e1ee958ecce75e89fa042348c71535dff4dffab88ef77ccaf399917d8dd65ffd85252648ab61ecb32362c659ff76be8fb1082cb4d4b52a2bafc8ac3b43aa22e54fd8bd9db7d3ea31ce9ad9a098ebf2155d3d14d78ce9f867ef5c20fa41a1c7b732a211497ed8d574cdc7a69b7e98f606183c0042a8eef3d5cb2244128a88b3d2fa1e87d641204c266824e2050fb868c629191e32a55fe87e3704a38d067251aaf4142a3ee4768ec7b45c0330eabbb690e27297e57820e4e155d8255c17938cda99bacdb2e6ca62e548191e254a7da7715e3e870a2d69a764e5ec6c9ab12be9c2e1964c7550208aaf6d4daa68129240d1d1d5961d5e8e48398464bce52e059d79f1532e5b964e43cf673bd8c8fe7fc690a198bafd317c5eb7c1524815ad332dc4b0642a183694ada84f955c73b2ee13f57ab766bbb5d1fdfedb5fedbb0e9adb3367a7f8918abaa6bb2f135055ca87fb4d33627ec320fa515d436c42fc0ba1765388d0150f2ef91a49d5624657fcd9441c6b6952ee46bb37471d94ea10e5d846ac2bb25a603571101cbdfd6444b1da4c93215ac768917541c94b293cfbcbc5fbe87e080cb22ed67f3af455bac8ca5f25f4bf4f70b5e7d9a26c055254bac9b891c51c8d9072c39306c1df896f43c2076534c48a055690221a29bf1558d9a7219dfb00ded2f74b3f0cc647597211256cbe862214c7229b1a7deca58a578505dd2586d73d030580beeaeae142f7da813d2a9981296b7ae3bb9a4dfcc7a6f79db3688b91589a7b9125f48bc220291de2b1f5a3b1025676b7d3d008e4a5f8cb12f522f55fe004421cb19e83745e62cd66853d6ad8979b54a41f20ee551bfc4f16d98bdd3cc8f04baa7e844b6167b40a1141806b328388a306abc30ee367e0d32d5bd6c94292b1fe4f326f5aa9e4ede987a468f8b557672e165f9cc0e46939a7eed4bf9c6bdef77f3c7ca60f6425c9d5e6beda592593e0999c263e6e971450fb6a91165897d199ef8ebc4e6f34abeed353bfbfaa021ccf3960b769d2e3239cfacb75d95f524b614677dd49834ea21b679210e8c6151f10775733be44cbebe678847616b29a4d52ab9929e23248a9ba4140bb6d08f96e227b2665a040c2069f0f6d0d17c3544fdc514545a1e3671becf0744524c7c91863c8e43889da772ebbdb48cb73d739fe78a79741833e568f0d0b5e53c7f3cbf6fe63d164ea22e8304391d204ff2fbd06f232a2e8ee872a2ee3fbcedd6a2d75f6c522c80936459eaa7d613d3f0631cf5d9bbf38b35313a43fda92c241515181a84e67cf4d314aba979ffc8462d7cf9fade9f1e9bd1bccd335be042ee921f2feeaa217798dd9ea7ba622d5765d11632a3aa20e92b77014d1dd6b4cd5aeae81c1eabfdfabc5046c031ebbd3ab9a6bea5d5d7d05ab71d426cf47674ed41709fbb91ab3f2bcb8a795ac8a9ee72c8ef866ce22d23f4ed66db29a85b4b1d7a96bd6020b0339853b96e7859c6383fad281899589e0e60e2c277fca314a6116d342dc4d5aa56d735f6f60f9bff49412114025a69b10ae07f1ffd133e940e048075196eb012013c2142d28c8ad1413e884da9e31cefc7e21bc4ecb65e00bc4cefc9d80592881d5ed3d36eb4fd02581ae3768fb8510715747bd94f866c8c75f1332e2b73326d3529308bc38b89d0bed88e437b13186eb6a186ed1a5a81c650682c1cdaf663b018d1009ab71e8d085d5ddbac75ebbef364c96fdd93b512fb13317f6c844e6b2dea9ba56c6537bb1b199a8ab77f11473e80f111a20ae51f108437714922142c48c94654732b88f08ee552294b375dab199ef6e62c70bbb765f85a507e71efaaebc6e668d4504c6ea811e43ed0203a79bfa91f6d4aaca937370b742b97c84a665c3419e77fe0aa2662c15d7f0329527aea01c4abde3bd03142686a4fad85644b71367e1c635cbbc1a62c4575ebaece43dacb93da54776d183ef54cf558cd30c534923e4c2fc10d204f078d2e6c0f1d03579c61b8e219d063cc199c6d3fe3214e8d9558fd1970c2722a3102b87091cb6abce6a94164613c7c6a86a404fd802a82fe9bdce0290b9d6ebad370a81f18ab5596da476ff91d59fcccb53b248e73c548011ff56cc4377e6cf90ee731d2898a18172165d0d6a6a92564474dafafdf89962dab85d4364da45f0ed8ca54fe332cf2bb67551811405ed4e0c1d3f4487b2607cc9137d474c42b1dd4cd6e2b66b11599dbd4e25d6a117e2323757ccf16fc3ed667ba557fa40ade94f471c52aea4d9e1246a6eb3729dce520ab5002de0ececafdba15dd5f2529048a2fb53149d61a67916f6613d4f79cf5070cb3a6ec334bcf7e77631f5d38dcc133507e92650df225cec3a584f0b41c6421c66064b15c20e4b75a2ed268aef1a5cfad0d3ab07f9a4ce2497e0468fa2cbf56702eb177c1df41dd7be917fc23f0fc0dcd990ee1aee09d1a4ae0b791dcef59ae1b07c34a8024ab3362f5be2acebe0a6c44d7a8b1a436d4dc5d759bceac5aa3fad2ea32155d55bbe75d4051f1a4623089e43cd5811ab2e7e85cdf2262ee80df7aaf6704e72fe4a6dd1b8c77ffdf2fcd57223ead706a242a296c9601156839e71621163ccabfa51c4384677a5ec291cc894cbe00344e28437d6768dc078a8919ef292be30e5d0e69d6db8d0b6e52b2dd64160d895e155c79e49cb0fbf9cfd0d06a727a15bfcbc5c5535855cee835440ba", 0x1000}}, 0x1006) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000000000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32, @ANYBLOB="010000000400000000000000000000000000200037050400000000002b000000f3"], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x4) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 1.013438816s ago: executing program 4 (id=1851): timer_create(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="0d0304000000fbdbdf25130000000c000980080002"], 0x174}, 0x1, 0x0, 0x0, 0x40004}, 0x20000800) 973.783745ms ago: executing program 4 (id=1852): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000240)) 881.239387ms ago: executing program 4 (id=1853): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103200000000000000002000000"], 0x69}, 0x1, 0x0, 0x0, 0x11}, 0x4840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c041) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000301010200000000000000f009c6023b8622344486918f0001000007"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="54000000020301020000000000000000050000050800044000000020080004400000000409000200000000020000000006000440ca2df3c109000200000000080000000008000340000000030800034000000009bd0010e4067550280d9bbea2a472847f7cf2cd0711db2b22a3fab65a43db6cf79f1aac03db5749778257d3fcbd7ef127088ea715c3cbf24d6aa094d8b6ae47ddc0faab91f18a8e390a3266b68b5227991731b0d4974253decb1cdfc8748d3a3a4385f1816b90e7b5e25d44610d438ce2bbac743cdc064d692fac4e4e78b2847ebd1a0374584dee67840dbebdcee4d27a4a803d34a0dc79565080a0822f8d7548d242770b7939a386ea0f4e2226899ba169119df3c27c4437dac6bd01e519ae163b90402b5938a04bb042ec5ab4b9d5d2c874e7ebebd8b7d848"], 0x54}, 0x1, 0x0, 0x0, 0x8000040}, 0xc804) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @multicast, 'bond_slave_1\x00'}}, 0x1e) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2000000014000106000000000000000023000000010000000500020000008000ea24bf86b3f1aa084b189045975b1d6dd5de2fe950ebd38c19c34b4e06c0399cb8f9f29811accd79751dcaa989147a6a7999ff227e70b64298974dc0476c45b6b81c12473e11f64c969d93e239409aafede111890b6322d75b6433a12c604f832358701a65b92ef3071f89d6ecd00818253c89b24056c3a80f179820dc8ed432064e56bf58f5e2de7a214ba0fb2b9c677bd979636ccb25a28838c6dd46e5f44175d31b8ca85fe0a32b"], 0x20}], 0x1}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r3, &(0x7f0000000300), 0x10) sendto$phonet(r3, &(0x7f0000000400)="01010000000000000000", 0xa, 0x0, &(0x7f0000000500)={0x23, 0x1}, 0x10) recvfrom$phonet(r3, &(0x7f0000000600)=""/242, 0xf2, 0x2000, 0x0, 0x0) 732.880252ms ago: executing program 0 (id=1854): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2d, @remote, 0x6}]}, &(0x7f00000007c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000140)=0x9a4, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 369.932908ms ago: executing program 0 (id=1855): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20040814}, 0x4090) 173.167841ms ago: executing program 0 (id=1856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000cae000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000006800010027bd7000fdffff7f00000000000000000c000200010000001500000024000c8008000200030000000600010000800000eaff0000dc0000000800030004000000060003000065"], 0x50}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f0000000140)={0x30000, 0x104000}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind(r8, &(0x7f00000004c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x80) bind$nfc_llcp(r8, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x5, 0x0, 0x6, "750538d1eec31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec27550d586e7d95f0669b740a5418d69d000", 0xffffffffffffd}, 0x60) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) sync_file_range(0xffffffffffffffff, 0xc, 0x2000000006, 0x6) geteuid() close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 3 (id=1857): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) kernel console output (not intermixed with test programs): B device number 68 using dummy_hcd [ 558.038297][ T5810] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.003A/input/input70 [ 558.202891][ T5692] usb 1-1: Using ep0 maxpacket: 32 [ 558.214386][ T5692] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 558.220227][ T5692] usb 1-1: config 123 interface 0 has no altsetting 0 [ 558.241807][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.241864][ T5692] usb 1-1: Product: syz [ 558.241901][ T5692] usb 1-1: Manufacturer: syz [ 558.241937][ T5692] usb 1-1: SerialNumber: syz [ 558.322576][T11571] lo speed is unknown, defaulting to 1000 [ 558.839609][ T5810] uclogic 0003:256C:006D.003A: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 558.847027][ T5810] usb 6-1: USB disconnect, device number 16 [ 558.956312][ T5798] usb 4-1: USB disconnect, device number 58 [ 559.014241][ T5798] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 559.014884][ T5798] oti6858 4-1:1.0: device disconnected [ 559.234758][T11587] fido_id[11587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 559.343381][ T5692] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 559.346076][ T5692] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 559.346302][ T5692] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 559.346328][ T5692] usb 1-1: media controller created [ 559.396111][ T5692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.357813][ T5692] set interface failed [ 560.357835][ T5692] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 560.357860][ T5692] error writing reg: 0xff, val: 0x00 [ 560.426823][ T5692] dvb_usb_mxl111sf 1-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 560.465176][ T5692] usb 1-1: USB disconnect, device number 68 [ 560.640379][T11600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.931725][ T31] audit: type=1400 audit(1790257570.455:557): avc: denied { bind } for pid=11608 comm="syz.1.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 560.931971][ T31] audit: type=1400 audit(1790257570.455:558): avc: denied { node_bind } for pid=11608 comm="syz.1.1532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 562.483017][ T5798] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 562.664563][ T5798] usb 6-1: Using ep0 maxpacket: 16 [ 562.665398][ T5798] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.680490][ T5798] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.680534][ T5798] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.680559][ T5798] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 562.680576][ T5798] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 562.681426][ T5798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 562.681447][ T5798] usb 6-1: SerialNumber: syz [ 562.685051][T11622] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 562.754329][ T5798] hub 6-1:1.0: bad descriptor, ignoring hub [ 562.754357][ T5798] hub 6-1:1.0: probe with driver hub failed with error -5 [ 562.755449][T11634] overlayfs: missing 'workdir' [ 562.759474][ T5798] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 563.740143][T11652] SELinux: Context system_u: is not valid (left unmapped). [ 563.785050][ T31] audit: type=1400 audit(1790257573.076:559): avc: denied { relabelto } for pid=11642 comm="syz.4.1530" name="313" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 563.803134][ T31] audit: type=1400 audit(1790257573.094:560): avc: denied { associate } for pid=11642 comm="syz.4.1530" name="313" dev="tmpfs" ino=1742 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 564.201559][ T31] audit: type=1400 audit(1790257573.463:561): avc: denied { write } for pid=5602 comm="syz-executor" name="313" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 564.201760][ T31] audit: type=1400 audit(1790257573.463:562): avc: denied { remove_name } for pid=5602 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 564.227241][ T31] audit: type=1400 audit(1790257573.463:563): avc: denied { write } for pid=5602 comm="syz-executor" name="313" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 564.227781][ T31] audit: type=1400 audit(1790257573.491:564): avc: denied { write } for pid=5602 comm="syz-executor" name="313" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 564.228181][ T31] audit: type=1400 audit(1790257573.491:565): avc: denied { write } for pid=5602 comm="syz-executor" name="313" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 564.235335][ T31] audit: type=1400 audit(1790257573.491:566): avc: denied { rmdir } for pid=5602 comm="syz-executor" name="313" dev="tmpfs" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:" [ 564.472178][T11670] jffs2: notice: (11670) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 565.287188][ T30] usb 6-1: USB disconnect, device number 17 [ 568.592890][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 568.592915][ T31] audit: type=1400 audit(1790257577.496:575): avc: denied { read } for pid=11704 comm="syz.4.1553" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 568.593067][ T31] audit: type=1400 audit(1790257577.505:576): avc: denied { open } for pid=11704 comm="syz.4.1553" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 569.193942][T11705] bond14: entered promiscuous mode [ 569.194401][T11705] 8021q: adding VLAN 0 to HW filter on device bond14 [ 569.319993][ T31] audit: type=1400 audit(1790257578.188:577): avc: denied { write } for pid=11693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.337631][T11707] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 569.337645][T11707] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 569.339741][T11707] bond14: (slave ipvlan2): Error -95 calling set_mac_address [ 569.510130][T11713] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 569.510148][T11713] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 569.510791][T11713] bond14: (slave ipvlan2): Error -95 calling set_mac_address [ 569.511832][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 569.778633][ T31] audit: type=1400 audit(1790257578.612:578): avc: denied { write } for pid=11723 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.861620][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 570.122264][ T31] audit: type=1400 audit(1790257578.935:579): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 570.159249][T11734] lo speed is unknown, defaulting to 1000 [ 570.204345][ T5692] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 570.388518][ T5692] usb 2-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 570.429585][ T5692] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 570.429677][ T5692] usb 2-1: can't read configurations, error -61 [ 570.579039][ T5692] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 570.983224][ T5692] usb 2-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 571.005286][ T5692] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 571.005321][ T5692] usb 2-1: can't read configurations, error -61 [ 571.011993][ T5692] usb usb2-port1: attempt power cycle [ 571.675907][T11737] lo speed is unknown, defaulting to 1000 [ 571.736382][ T5692] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 571.784842][ T5692] usb 2-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 571.801678][ T5692] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 571.801706][ T5692] usb 2-1: can't read configurations, error -61 [ 571.952190][ T5692] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 572.494090][ C1] net_ratelimit: 103 callbacks suppressed [ 572.916786][ T5692] usb 2-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 572.918997][ T5692] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 572.919015][ T5692] usb 2-1: can't read configurations, error -61 [ 572.919312][ T5692] usb usb2-port1: unable to enumerate USB device [ 572.969665][ T31] audit: type=1400 audit(1790257581.555:580): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 573.075270][ T31] audit: type=1400 audit(1790257581.657:581): avc: denied { ioctl } for pid=11759 comm="syz.4.1563" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 573.116007][T11761] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 573.595577][T11773] unsupported nlmsg_type 40 [ 574.941466][ T31] audit: type=1400 audit(1790257583.373:582): avc: denied { write } for pid=11780 comm="syz.0.1571" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 575.006562][T11782] tmpfs: Bad value for 'mpol' [ 575.278437][T11784] syzkaller0: entered promiscuous mode [ 575.278460][T11784] syzkaller0: entered allmulticast mode [ 575.329497][ T31] audit: type=1400 audit(1790257583.733:583): avc: denied { setopt } for pid=11783 comm="syz.4.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 575.525274][T11789] xt_NETMAP: bad MAP_IPS. [ 575.636148][ T31] audit: type=1400 audit(1790257584.010:584): avc: denied { ioctl } for pid=11790 comm="syz.1.1573" path="pid:[4026532786]" dev="nsfs" ino=4026532786 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 575.651053][ T31] audit: type=1400 audit(1790257584.028:585): avc: denied { read } for pid=11790 comm="syz.1.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.809500][T11799] jffs2: notice: (11799) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 575.866083][T11801] FAULT_INJECTION: forcing a failure. [ 575.866083][T11801] name failslab, interval 1, probability 0, space 0, times 0 [ 575.866117][T11801] CPU: 0 UID: 0 PID: 11801 Comm: syz.0.1574 Not tainted syzkaller #0 PREEMPT(full) [ 575.866139][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 575.866152][T11801] Call Trace: [ 575.866159][T11801] [ 575.866167][T11801] dump_stack_lvl+0x100/0x190 [ 575.866198][T11801] should_fail_ex.cold+0x5/0xa [ 575.866225][T11801] should_failslab+0xc2/0x120 [ 575.866249][T11801] kmem_cache_alloc_noprof+0x92/0x6a0 [ 575.866270][T11801] ? do_getname+0x35/0x390 [ 575.866301][T11801] do_getname+0x35/0x390 [ 575.866330][T11801] do_sys_openat2+0xc7/0x1e0 [ 575.866357][T11801] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.866383][T11801] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 575.866415][T11801] ? __fget_files+0x21f/0x3d0 [ 575.866443][T11801] __x64_sys_openat+0x12d/0x210 [ 575.866474][T11801] ? __pfx___x64_sys_openat+0x10/0x10 [ 575.866510][T11801] do_syscall_64+0x123/0x790 [ 575.866541][T11801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.866560][T11801] RIP: 0033:0x7f926819e159 [ 575.866577][T11801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.866594][T11801] RSP: 002b:00007f92690ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.866613][T11801] RAX: ffffffffffffffda RBX: 00007f9268426180 RCX: 00007f926819e159 [ 575.866626][T11801] RDX: 0000000000000042 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 575.866638][T11801] RBP: 00007f92690ce090 R08: 0000000000000000 R09: 0000000000000000 [ 575.866654][T11801] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 575.866666][T11801] R13: 00007f9268426218 R14: 00007f9268426180 R15: 00007ffcbaf0f5e8 [ 575.866692][T11801] [ 577.143296][T11809] netlink: 5180 bytes leftover after parsing attributes in process `syz.3.1575'. [ 577.452396][ T31] audit: type=1400 audit(1790257585.385:586): avc: denied { getopt } for pid=11807 comm="syz.3.1575" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 577.498108][ T1158] IPVS: starting estimator thread 0... [ 577.600769][T11812] IPVS: using max 43 ests per chain, 103200 per kthread [ 578.053762][ C0] net_ratelimit: 62 callbacks suppressed [ 578.379320][ T31] audit: type=1400 audit(1790257586.547:587): avc: denied { map } for pid=11813 comm="syz.5.1576" path="/proc/351/net/unix" dev="proc" ino=4026533878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 579.172503][T11829] FAULT_INJECTION: forcing a failure. [ 579.172503][T11829] name failslab, interval 1, probability 0, space 0, times 0 [ 579.172529][T11829] CPU: 0 UID: 0 PID: 11829 Comm: syz.0.1579 Not tainted syzkaller #0 PREEMPT(full) [ 579.172546][T11829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 579.172561][T11829] Call Trace: [ 579.172567][T11829] [ 579.172573][T11829] dump_stack_lvl+0x100/0x190 [ 579.172598][T11829] should_fail_ex.cold+0x5/0xa [ 579.172620][T11829] should_failslab+0xc2/0x120 [ 579.172639][T11829] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 579.172655][T11829] ? find_held_lock+0x2b/0x80 [ 579.172676][T11829] ? alloc_inode+0x183/0x250 [ 579.172694][T11829] alloc_inode+0x183/0x250 [ 579.172708][T11829] path_from_stashed+0x25b/0x760 [ 579.172733][T11829] pidfs_alloc_file+0xf8/0x290 [ 579.172753][T11829] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 579.172777][T11829] pidfd_prepare+0x107/0x1b0 [ 579.172796][T11829] __x64_sys_pidfd_open+0x105/0x1a0 [ 579.172818][T11829] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 579.172845][T11829] do_syscall_64+0x123/0x790 [ 579.172869][T11829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.172884][T11829] RIP: 0033:0x7f926819e159 [ 579.172896][T11829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.172911][T11829] RSP: 002b:00007f92690ef018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 579.172926][T11829] RAX: ffffffffffffffda RBX: 00007f9268426090 RCX: 00007f926819e159 [ 579.172936][T11829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003c9 [ 579.172945][T11829] RBP: 00007f92690ef090 R08: 0000000000000000 R09: 0000000000000000 [ 579.172954][T11829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.172962][T11829] R13: 00007f9268426128 R14: 00007f9268426090 R15: 00007ffcbaf0f5e8 [ 579.172982][T11829] [ 580.483914][ T31] audit: type=1400 audit(1790257588.494:588): avc: denied { mount } for pid=11832 comm="syz.0.1580" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 581.321980][T11809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.325823][T11809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.559062][T11838] overlayfs: failed to resolve './bus': -2 [ 581.927357][T11847] FAULT_INJECTION: forcing a failure. [ 581.927357][T11847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.927516][T11847] CPU: 0 UID: 0 PID: 11847 Comm: syz.5.1586 Not tainted syzkaller #0 PREEMPT(full) [ 581.927538][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 581.927549][T11847] Call Trace: [ 581.927555][T11847] [ 581.927563][T11847] dump_stack_lvl+0x100/0x190 [ 581.927596][T11847] should_fail_ex.cold+0x5/0xa [ 581.927625][T11847] _copy_from_user+0x2e/0xd0 [ 581.927648][T11847] copy_msghdr_from_user+0x9f/0x4c0 [ 581.927670][T11847] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 581.927694][T11847] ? hrtimer_reprogram+0x165/0x6c0 [ 581.927721][T11847] ? find_held_lock+0x2b/0x80 [ 581.927747][T11847] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 581.927774][T11847] ___sys_sendmsg+0x106/0x1e0 [ 581.927796][T11847] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.927816][T11847] ? rcu_is_watching+0x13/0xc0 [ 581.927850][T11847] ? find_held_lock+0x2b/0x80 [ 581.927892][T11847] __sys_sendmsg+0x160/0x210 [ 581.927918][T11847] ? __pfx___sys_sendmsg+0x10/0x10 [ 581.927956][T11847] do_syscall_64+0x123/0x790 [ 581.927988][T11847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.928006][T11847] RIP: 0033:0x7f011699e159 [ 581.928023][T11847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.928041][T11847] RSP: 002b:00007f01178d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.928060][T11847] RAX: ffffffffffffffda RBX: 00007f0116c26090 RCX: 00007f011699e159 [ 581.928073][T11847] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 581.928085][T11847] RBP: 00007f01178d0090 R08: 0000000000000000 R09: 0000000000000000 [ 581.928096][T11847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.928108][T11847] R13: 00007f0116c26128 R14: 00007f0116c26090 R15: 00007ffeb4d4e3f8 [ 581.928133][T11847] [ 583.173048][T11857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1590'. [ 583.191022][T11860] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1590'. [ 583.277909][ T5800] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 583.440977][ T5800] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 583.442178][ T5800] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 583.442202][ T5800] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.442226][ T5800] usb 6-1: config 0 interface 0 has no altsetting 0 [ 583.442273][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.445069][ T5800] usb 6-1: config 0 descriptor?? [ 583.446808][T11850] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 583.516023][ C1] net_ratelimit: 46 callbacks suppressed [ 583.592373][ T5694] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 583.754461][ T5694] usb 5-1: Using ep0 maxpacket: 32 [ 583.754478][ T5692] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 583.756226][ T5694] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 583.757241][ T5694] usb 5-1: config 123 interface 0 has no altsetting 0 [ 583.759246][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.759266][ T5694] usb 5-1: Product: syz [ 583.759279][ T5694] usb 5-1: Manufacturer: syz [ 583.759293][ T5694] usb 5-1: SerialNumber: syz [ 583.891944][ T5800] hid_parser_main: 18 callbacks suppressed [ 583.891963][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x2 [ 583.891990][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x6 [ 583.892049][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x0 [ 583.892073][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x0 [ 583.892096][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x0 [ 583.892117][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x0 [ 583.892137][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x0 [ 583.892157][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x0 [ 583.892177][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x0 [ 583.892197][ T5800] logitech 0003:046D:C50C.003B: unknown main item tag 0x0 [ 583.892241][ T5800] logitech 0003:046D:C50C.003B: item fetching failed at offset 23/36 [ 583.892778][ T5800] logitech 0003:046D:C50C.003B: parse failed [ 583.892856][ T5800] logitech 0003:046D:C50C.003B: probe with driver logitech failed with error -22 [ 583.917619][ T5692] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 0.00 [ 583.918787][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.007216][ T5692] mvusb_mdio 4-1:1.0: probe with driver mvusb_mdio failed with error -5 [ 584.129404][ T5810] usb 6-1: USB disconnect, device number 18 [ 584.219838][T11874] usb usb8: usbfs: process 11874 (syz.1.1594) did not claim interface 7 before use [ 584.270536][ T5694] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 584.273297][ T5694] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 584.276307][ T5694] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 584.276982][ T5694] usb 5-1: media controller created [ 584.312642][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.349218][ T5694] set interface failed [ 584.349258][ T5694] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 584.349266][ T5694] error writing reg: 0xff, val: 0x00 [ 584.427457][ T5694] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 584.437663][ T5694] usb 5-1: USB disconnect, device number 69 [ 586.402953][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 586.477065][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1600'. [ 586.488097][T11895] team0 (unregistering): Port device team_slave_0 removed [ 586.500279][T11895] team0 (unregistering): Port device team_slave_1 removed [ 586.515297][ T5692] usb 4-1: USB disconnect, device number 59 [ 586.663507][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1601'. [ 586.797903][T11903] netlink: 'syz.4.1597': attribute type 21 has an invalid length. [ 586.798165][T11903] netlink: 'syz.4.1597': attribute type 6 has an invalid length. [ 586.798202][T11903] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1597'. [ 586.873968][T11905] FAULT_INJECTION: forcing a failure. [ 586.873968][T11905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.873998][T11905] CPU: 0 UID: 0 PID: 11905 Comm: syz.3.1602 Not tainted syzkaller #0 PREEMPT(full) [ 586.874021][T11905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 586.874033][T11905] Call Trace: [ 586.874040][T11905] [ 586.874048][T11905] dump_stack_lvl+0x100/0x190 [ 586.874084][T11905] should_fail_ex.cold+0x5/0xa [ 586.874111][T11905] _copy_from_user+0x2e/0xd0 [ 586.874134][T11905] do_ipv6_setsockopt+0x73d/0x44a0 [ 586.874159][T11905] ? avc_has_perm_noaudit+0x56/0x470 [ 586.874192][T11905] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 586.874219][T11905] ? avc_has_perm_noaudit+0x145/0x470 [ 586.874249][T11905] ? avc_has_perm+0x135/0x1e0 [ 586.874276][T11905] ? __pfx_avc_has_perm+0x10/0x10 [ 586.874306][T11905] ? get_pid_task+0x106/0x250 [ 586.874336][T11905] ? sock_has_perm+0x25a/0x2f0 [ 586.874355][T11905] ? __pfx_sock_has_perm+0x10/0x10 [ 586.874374][T11905] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 586.874399][T11905] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 586.874432][T11905] ? ipv6_setsockopt+0xcb/0x170 [ 586.874452][T11905] ipv6_setsockopt+0xcb/0x170 [ 586.874478][T11905] udpv6_setsockopt+0x64/0xb0 [ 586.874506][T11905] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 586.874538][T11905] do_sock_setsockopt+0xf3/0x1d0 [ 586.874570][T11905] __sys_setsockopt+0x195/0x220 [ 586.874598][T11905] __x64_sys_setsockopt+0xbd/0x160 [ 586.874621][T11905] ? do_syscall_64+0xae/0x790 [ 586.874649][T11905] ? lockdep_hardirqs_on+0x7d/0x110 [ 586.874676][T11905] do_syscall_64+0x123/0x790 [ 586.874706][T11905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.874725][T11905] RIP: 0033:0x7f40f959e159 [ 586.874743][T11905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.874762][T11905] RSP: 002b:00007f40fa45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 586.874782][T11905] RAX: ffffffffffffffda RBX: 00007f40f9825fa0 RCX: 00007f40f959e159 [ 586.874795][T11905] RDX: 000000000000001c RSI: 0000000000000029 RDI: 0000000000000003 [ 586.874807][T11905] RBP: 00007f40fa45d090 R08: 0000000000000014 R09: 0000000000000000 [ 586.874819][T11905] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 586.874830][T11905] R13: 00007f40f9826038 R14: 00007f40f9825fa0 R15: 00007ffe7d869c38 [ 586.874857][T11905] [ 587.358169][ T31] audit: type=1400 audit(1790257594.824:589): avc: denied { setopt } for pid=11910 comm="syz.3.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 587.757943][ T5810] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 587.927421][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 587.941269][ T5810] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 587.945167][ T5810] usb 5-1: config 123 interface 0 has no altsetting 0 [ 587.955601][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.955885][ T5810] usb 5-1: Product: syz [ 587.955900][ T5810] usb 5-1: Manufacturer: syz [ 587.956094][ T5810] usb 5-1: SerialNumber: syz [ 588.210108][ T31] audit: type=1400 audit(1790257595.627:590): avc: denied { mounton } for pid=11919 comm="syz.5.1607" path="/118/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 588.316958][ T31] audit: type=1400 audit(1790257595.710:591): avc: denied { create } for pid=11919 comm="syz.5.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.317767][ T31] audit: type=1400 audit(1790257595.728:592): avc: denied { bind } for pid=11919 comm="syz.5.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.318376][ T31] audit: type=1400 audit(1790257595.728:593): avc: denied { setopt } for pid=11919 comm="syz.5.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.319105][ T31] audit: type=1400 audit(1790257595.728:594): avc: denied { accept } for pid=11919 comm="syz.5.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.320341][ T31] audit: type=1400 audit(1790257595.728:595): avc: denied { write } for pid=11919 comm="syz.5.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.320592][ T31] audit: type=1400 audit(1790257595.728:596): avc: denied { read } for pid=11919 comm="syz.5.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 588.450317][ T5810] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 588.461103][ T5810] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 588.464053][ T5810] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 588.464094][ T5810] usb 5-1: media controller created [ 588.536735][ T5694] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 588.549774][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 588.626315][ T5810] set interface failed [ 588.626376][ T5810] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 588.626391][ T5810] error writing reg: 0xff, val: 0x00 [ 588.755460][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 588.767261][ T5694] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 588.776163][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.776186][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.776230][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.778459][ T5694] usb 2-1: config 0 descriptor?? [ 588.905877][ T5810] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 588.922018][ T5810] usb 5-1: USB disconnect, device number 70 [ 589.153213][T10822] net_ratelimit: 75 callbacks suppressed [ 589.288017][T11945] FAULT_INJECTION: forcing a failure. [ 589.288017][T11945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.288041][T11945] CPU: 0 UID: 0 PID: 11945 Comm: syz.3.1616 Not tainted syzkaller #0 PREEMPT(full) [ 589.288068][T11945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 589.288079][T11945] Call Trace: [ 589.288085][T11945] [ 589.288093][T11945] dump_stack_lvl+0x100/0x190 [ 589.288126][T11945] should_fail_ex.cold+0x5/0xa [ 589.288152][T11945] _copy_from_iter+0x43a/0x1690 [ 589.288179][T11945] ? __pfx__copy_from_iter+0x10/0x10 [ 589.288202][T11945] ? lock_acquire+0x1d1/0x380 [ 589.288221][T11945] ? is_bpf_text_address+0x25/0x1a0 [ 589.288247][T11945] ? find_held_lock+0x2b/0x80 [ 589.288272][T11945] ? is_bpf_text_address+0x8a/0x1a0 [ 589.288296][T11945] ? is_bpf_text_address+0x8a/0x1a0 [ 589.288323][T11945] tun_get_user+0x265/0x3cc0 [ 589.288355][T11945] ? __lock_acquire+0x5c0/0x1f40 [ 589.288374][T11945] ? __pfx_tun_get_user+0x10/0x10 [ 589.288398][T11945] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 589.288430][T11945] ? find_held_lock+0x2b/0x80 [ 589.288455][T11945] ? tun_get+0x191/0x370 [ 589.288475][T11945] ? tun_get+0x191/0x370 [ 589.288502][T11945] tun_chr_write_iter+0xdc/0x200 [ 589.288527][T11945] do_iter_readv_writev+0x6f7/0x930 [ 589.288558][T11945] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 589.288585][T11945] ? avc_policy_seqno+0x9/0x20 [ 589.288609][T11945] ? selinux_file_permission+0x8f/0x6d0 [ 589.288634][T11945] ? bpf_lsm_file_permission+0x9/0x10 [ 589.288659][T11945] ? security_file_permission+0x76/0x210 [ 589.288683][T11945] ? rw_verify_area+0xce/0x6d0 [ 589.288712][T11945] vfs_writev+0x360/0xdd0 [ 589.288732][T11945] ? __lock_acquire+0x5c0/0x1f40 [ 589.288755][T11945] ? __pfx_vfs_writev+0x10/0x10 [ 589.288778][T11945] ? lock_acquire+0x1d1/0x380 [ 589.288798][T11945] ? __fget_files+0x34/0x3d0 [ 589.288830][T11945] ? __fget_files+0x21f/0x3d0 [ 589.288859][T11945] ? do_writev+0x13e/0x340 [ 589.288875][T11945] do_writev+0x13e/0x340 [ 589.288894][T11945] ? __pfx_do_writev+0x10/0x10 [ 589.288919][T11945] do_syscall_64+0x123/0x790 [ 589.288951][T11945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.288971][T11945] RIP: 0033:0x7f40f959e159 [ 589.288987][T11945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.289004][T11945] RSP: 002b:00007f40fa45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 589.289023][T11945] RAX: ffffffffffffffda RBX: 00007f40f9825fa0 RCX: 00007f40f959e159 [ 589.289035][T11945] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: 0000000000000003 [ 589.289050][T11945] RBP: 00007f40fa45d090 R08: 0000000000000000 R09: 0000000000000000 [ 589.289062][T11945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.289072][T11945] R13: 00007f40f9826038 R14: 00007f40f9825fa0 R15: 00007ffe7d869c38 [ 589.289097][T11945] [ 589.355878][ T31] audit: type=1400 audit(1790257596.669:597): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 589.368601][ T5694] savu 0003:1E7D:2D5A.003C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 589.618772][ T5692] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 589.814314][ T5692] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 589.816920][ T5692] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 589.816941][ T5692] usb 5-1: config 0 has no interface number 0 [ 589.816974][ T5692] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 589.816996][ T5692] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 589.817020][ T5692] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 589.818567][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 589.818586][ T5692] usb 5-1: Product: syz [ 589.818600][ T5692] usb 5-1: SerialNumber: syz [ 589.820838][ T5692] usb 5-1: config 0 descriptor?? [ 589.920805][ T5692] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 589.938715][ T5692] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input73 [ 589.939009][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 589.946251][ T5694] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 590.108543][ T5694] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 590.111787][ T5694] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 590.111808][ T5694] usb 1-1: config 0 has no interface number 0 [ 590.111839][ T5694] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 590.111856][ T5694] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 590.111871][ T5694] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 590.116931][ T5810] usb 2-1: USB disconnect, device number 67 [ 590.129961][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 590.130004][ T5694] usb 1-1: Product: syz [ 590.130018][ T5694] usb 1-1: SerialNumber: syz [ 590.189974][ T5694] usb 1-1: config 0 descriptor?? [ 590.228603][ T5694] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 590.229904][ T5694] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input74 [ 590.285944][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 591.105853][T11947] FAULT_INJECTION: forcing a failure. [ 591.105853][T11947] name failslab, interval 1, probability 0, space 0, times 0 [ 591.105873][T11947] CPU: 1 UID: 0 PID: 11947 Comm: syz.4.1617 Not tainted syzkaller #0 PREEMPT(full) [ 591.105888][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 591.105895][T11947] Call Trace: [ 591.105901][T11947] [ 591.105906][T11947] dump_stack_lvl+0x100/0x190 [ 591.105927][T11947] should_fail_ex.cold+0x5/0xa [ 591.105944][T11947] should_failslab+0xc2/0x120 [ 591.105959][T11947] __kvmalloc_node_noprof+0x113/0x9b0 [ 591.105974][T11947] ? file_tty_write.isra.0+0x64e/0x890 [ 591.105992][T11947] file_tty_write.isra.0+0x64e/0x890 [ 591.106006][T11947] ? security_file_permission+0x76/0x210 [ 591.106021][T11947] ? rw_verify_area+0xce/0x6d0 [ 591.106040][T11947] vfs_write+0x6af/0x1050 [ 591.106052][T11947] ? __pfx_tty_write+0x10/0x10 [ 591.106067][T11947] ? __pfx_vfs_write+0x10/0x10 [ 591.106077][T11947] ? find_held_lock+0x2b/0x80 [ 591.106103][T11947] ksys_write+0x12a/0x250 [ 591.106114][T11947] ? __pfx_ksys_write+0x10/0x10 [ 591.106130][T11947] do_syscall_64+0x123/0x790 [ 591.106149][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.106161][T11947] RIP: 0033:0x7fbe9659e159 [ 591.106170][T11947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.106181][T11947] RSP: 002b:00007fbe9740e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.106192][T11947] RAX: ffffffffffffffda RBX: 00007fbe96825fa0 RCX: 00007fbe9659e159 [ 591.106199][T11947] RDX: 0000000000001006 RSI: 00002000000005c0 RDI: 0000000000000005 [ 591.106206][T11947] RBP: 00007fbe9740e090 R08: 0000000000000000 R09: 0000000000000000 [ 591.106213][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.106219][T11947] R13: 00007fbe96826038 R14: 00007fbe96825fa0 R15: 00007fffc6ce9c98 [ 591.106234][T11947] [ 591.109484][ T5693] usb 5-1: USB disconnect, device number 71 [ 591.352928][ T5693] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 591.438621][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 591.603704][T11965] Bluetooth: ISO socket layer initialized [ 591.729727][ T5798] usb 1-1: USB disconnect, device number 69 [ 591.771699][ T5798] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 591.804399][T11973] FAULT_INJECTION: forcing a failure. [ 591.804399][T11973] name failslab, interval 1, probability 0, space 0, times 0 [ 591.804426][T11973] CPU: 1 UID: 0 PID: 11973 Comm: syz.4.1624 Not tainted syzkaller #0 PREEMPT(full) [ 591.804445][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 591.804455][T11973] Call Trace: [ 591.804462][T11973] [ 591.804468][T11973] dump_stack_lvl+0x100/0x190 [ 591.804499][T11973] should_fail_ex.cold+0x5/0xa [ 591.804521][T11973] should_failslab+0xc2/0x120 [ 591.804546][T11973] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 591.804574][T11973] ? sock_alloc_inode+0x26/0x2c0 [ 591.804603][T11973] ? __pfx_sock_alloc_inode+0x10/0x10 [ 591.804630][T11973] sock_alloc_inode+0x26/0x2c0 [ 591.804655][T11973] ? __pfx_sock_alloc_inode+0x10/0x10 [ 591.804680][T11973] alloc_inode+0x68/0x250 [ 591.804698][T11973] sock_alloc+0x44/0x280 [ 591.804725][T11973] do_accept+0xf9/0x530 [ 591.804745][T11973] ? do_raw_spin_lock+0x128/0x260 [ 591.804770][T11973] ? __pfx_do_accept+0x10/0x10 [ 591.804803][T11973] __sys_accept4+0x108/0x200 [ 591.804824][T11973] ? __pfx___sys_accept4+0x10/0x10 [ 591.804843][T11973] ? ksys_write+0x1ac/0x250 [ 591.804861][T11973] ? __pfx_ksys_write+0x10/0x10 [ 591.804885][T11973] __x64_sys_accept+0x74/0xb0 [ 591.804908][T11973] ? lockdep_hardirqs_on+0x7d/0x110 [ 591.804938][T11973] do_syscall_64+0x123/0x790 [ 591.804968][T11973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.804987][T11973] RIP: 0033:0x7fbe9659e159 [ 591.805004][T11973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.805021][T11973] RSP: 002b:00007fbe9740e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 591.805039][T11973] RAX: ffffffffffffffda RBX: 00007fbe96825fa0 RCX: 00007fbe9659e159 [ 591.805050][T11973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 591.805060][T11973] RBP: 00007fbe9740e090 R08: 0000000000000000 R09: 0000000000000000 [ 591.805070][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.805081][T11973] R13: 00007fbe96826038 R14: 00007fbe96825fa0 R15: 00007fffc6ce9c98 [ 591.805105][T11973] [ 593.346871][T11979] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 594.368670][T11979] bond15: entered promiscuous mode [ 594.369471][T11979] 8021q: adding VLAN 0 to HW filter on device bond15 [ 594.411148][T11983] netlink: 'syz.1.1628': attribute type 1 has an invalid length. [ 594.411162][T11983] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1628'. [ 594.463333][T11981] bond15: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 594.463349][T11981] bond15: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 594.468619][T11981] bond15: (slave ipvlan2): Error -95 calling set_mac_address [ 594.693292][ T12] net_ratelimit: 61 callbacks suppressed [ 595.385358][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.405927][ T31] audit: type=1400 audit(1790257602.261:598): avc: denied { ioctl } for pid=11999 comm="syz.1.1631" path="socket:[40661]" dev="sockfs" ino=40661 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 595.500716][T12001] jffs2: notice: (12001) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 595.920726][T11979] bond15: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 595.920800][T11979] bond15: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 596.037023][T11979] bond15: (slave ipvlan2): Error -95 calling set_mac_address [ 596.665967][T12005] fuse: fd is not a fuse device [ 597.214601][T12016] bond0: invalid ARP target specified [ 597.295889][T12020] FAULT_INJECTION: forcing a failure. [ 597.295889][T12020] name failslab, interval 1, probability 0, space 0, times 0 [ 597.295929][T12020] CPU: 0 UID: 0 PID: 12020 Comm: syz.5.1636 Not tainted syzkaller #0 PREEMPT(full) [ 597.295953][T12020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 597.295965][T12020] Call Trace: [ 597.295973][T12020] [ 597.295982][T12020] dump_stack_lvl+0x100/0x190 [ 597.296016][T12020] should_fail_ex.cold+0x5/0xa [ 597.296045][T12020] should_failslab+0xc2/0x120 [ 597.296072][T12020] kmem_cache_alloc_noprof+0x92/0x6a0 [ 597.296094][T12020] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 597.296120][T12020] ? do_getname+0x35/0x390 [ 597.296155][T12020] do_getname+0x35/0x390 [ 597.296188][T12020] do_sys_openat2+0xc7/0x1e0 [ 597.296217][T12020] ? __pfx_do_sys_openat2+0x10/0x10 [ 597.296246][T12020] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 597.296286][T12020] __x64_sys_openat+0x12d/0x210 [ 597.296320][T12020] ? __pfx___x64_sys_openat+0x10/0x10 [ 597.296351][T12020] ? trace_hardirqs_off+0x70/0x170 [ 597.296384][T12020] do_syscall_64+0x123/0x790 [ 597.296415][T12020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.296434][T12020] RIP: 0033:0x7f011699e159 [ 597.296450][T12020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.296472][T12020] RSP: 002b:00007f01178af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 597.296492][T12020] RAX: ffffffffffffffda RBX: 00007f0116c26180 RCX: 00007f011699e159 [ 597.296505][T12020] RDX: 00000000001c1002 RSI: 0000200000004400 RDI: ffffffffffffff9c [ 597.296517][T12020] RBP: 00007f01178af090 R08: 0000000000000000 R09: 0000000000000000 [ 597.296528][T12020] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 597.296540][T12020] R13: 00007f0116c26218 R14: 00007f0116c26180 R15: 00007ffeb4d4e3f8 [ 597.296567][T12020] [ 597.420990][ T31] audit: type=1400 audit(1790257603.996:599): avc: denied { watch } for pid=12013 comm="syz.5.1636" path="/124" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 597.421126][ T31] audit: type=1400 audit(1790257603.996:600): avc: denied { watch_sb } for pid=12013 comm="syz.5.1636" path="/124" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 597.534058][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 598.821645][ T5800] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 598.824667][ T5693] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 599.034404][T12042] netlink: 'syz.1.1643': attribute type 21 has an invalid length. [ 599.034745][T12042] netlink: 'syz.1.1643': attribute type 6 has an invalid length. [ 599.034785][T12042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1643'. [ 599.068223][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 599.068956][ T5693] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 599.070155][ T5693] usb 1-1: config 123 interface 0 has no altsetting 0 [ 599.095687][ T5800] usb 5-1: Using ep0 maxpacket: 32 [ 599.103923][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.103941][ T5693] usb 1-1: Product: syz [ 599.103953][ T5693] usb 1-1: Manufacturer: syz [ 599.103966][ T5693] usb 1-1: SerialNumber: syz [ 599.137371][ T5800] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 599.138561][ T5800] usb 5-1: config 123 interface 0 has no altsetting 0 [ 599.143432][ T5800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.143451][ T5800] usb 5-1: Product: syz [ 599.143465][ T5800] usb 5-1: Manufacturer: syz [ 599.143479][ T5800] usb 5-1: SerialNumber: syz [ 599.263635][T12041] overlayfs: failed to resolve './bus': -2 [ 599.594536][T12052] jffs2: notice: (12052) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 599.624632][ T5693] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 599.641356][ T5693] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 599.703473][ T31] audit: type=1400 audit(1790257606.219:601): avc: denied { mounton } for pid=12049 comm="syz.1.1649" path="/339/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 599.757132][ T5800] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 599.909975][ T5800] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 599.910762][ T5693] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 599.910782][ T5800] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 599.910808][ T5693] usb 1-1: media controller created [ 599.910828][ T5800] usb 5-1: media controller created [ 600.240994][ T13] net_ratelimit: 51 callbacks suppressed [ 600.782841][ T5800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 600.849180][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 600.941534][ T5693] set interface failed [ 600.941598][ T5693] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 600.941611][ T5693] error writing reg: 0xff, val: 0x00 [ 601.026353][ T5800] set interface failed [ 601.026411][ T5800] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 601.026425][ T5800] error writing reg: 0xff, val: 0x00 [ 601.123449][ T5800] dvb_usb_mxl111sf 5-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 601.140184][ T5800] usb 5-1: USB disconnect, device number 72 [ 602.400204][ T5693] dvb_usb_mxl111sf 1-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 602.446750][ T5693] usb 1-1: USB disconnect, device number 70 [ 602.541398][T12070] bond13: entered promiscuous mode [ 602.541442][T12070] bond13: entered allmulticast mode [ 602.541809][T12070] 8021q: adding VLAN 0 to HW filter on device bond13 [ 603.966287][T12087] FAULT_INJECTION: forcing a failure. [ 603.966287][T12087] name failslab, interval 1, probability 0, space 0, times 0 [ 603.966309][T12087] CPU: 1 UID: 0 PID: 12087 Comm: syz.1.1657 Not tainted syzkaller #0 PREEMPT(full) [ 603.966330][T12087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 603.966341][T12087] Call Trace: [ 603.966348][T12087] [ 603.966356][T12087] dump_stack_lvl+0x100/0x190 [ 603.966389][T12087] should_fail_ex.cold+0x5/0xa [ 603.966416][T12087] should_failslab+0xc2/0x120 [ 603.966441][T12087] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 603.966463][T12087] ? sock_alloc_inode+0x26/0x2c0 [ 603.966492][T12087] ? __pfx_sock_alloc_inode+0x10/0x10 [ 603.966520][T12087] sock_alloc_inode+0x26/0x2c0 [ 603.966546][T12087] ? __pfx_sock_alloc_inode+0x10/0x10 [ 603.966571][T12087] alloc_inode+0x68/0x250 [ 603.966590][T12087] sock_alloc+0x44/0x280 [ 603.966613][T12087] ? security_socket_create+0x7f/0x250 [ 603.966633][T12087] __sock_create+0xc2/0x860 [ 603.966653][T12087] ? __lock_acquire+0x5c0/0x1f40 [ 603.966676][T12087] mptcp_subflow_create_socket+0xec/0xa30 [ 603.966703][T12087] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 603.966732][T12087] ? lock_acquire+0x1d1/0x380 [ 603.966756][T12087] __mptcp_nmpc_sk+0x17f/0x880 [ 603.966778][T12087] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 603.966806][T12087] ? __local_bh_enable_ip+0xa5/0x120 [ 603.966829][T12087] mptcp_listen+0x135/0x4e0 [ 603.966856][T12087] ? __pfx_mptcp_listen+0x10/0x10 [ 603.966890][T12087] __sys_listen_socket+0x108/0x150 [ 603.966911][T12087] __sys_listen+0xa7/0x130 [ 603.966933][T12087] __x64_sys_listen+0x53/0x80 [ 603.966954][T12087] do_syscall_64+0x123/0x790 [ 603.966985][T12087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.967004][T12087] RIP: 0033:0x7f416c59e159 [ 603.967021][T12087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.967039][T12087] RSP: 002b:00007f416d51d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 603.967059][T12087] RAX: ffffffffffffffda RBX: 00007f416c825fa0 RCX: 00007f416c59e159 [ 603.967072][T12087] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 603.967083][T12087] RBP: 00007f416d51d090 R08: 0000000000000000 R09: 0000000000000000 [ 603.967095][T12087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.967106][T12087] R13: 00007f416c826038 R14: 00007f416c825fa0 R15: 00007ffc68463218 [ 603.967133][T12087] [ 604.340740][T12094] netlink: 'syz.0.1656': attribute type 21 has an invalid length. [ 604.341055][T12094] netlink: 'syz.0.1656': attribute type 6 has an invalid length. [ 604.341088][T12094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1656'. [ 604.399432][T12093] netlink: 'syz.5.1658': attribute type 1 has an invalid length. [ 604.436341][T12100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1662'. [ 604.559828][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1658'. [ 604.578363][T12104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1663'. [ 604.784242][T12101] bond1: (slave geneve2): making interface the new active one [ 604.807126][T12101] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 604.817910][T12102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.835459][ T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.855693][ T13] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.856414][ T13] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 604.856445][ T13] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 605.160456][T12116] netlink: 'syz.1.1666': attribute type 10 has an invalid length. [ 605.206716][T12123] netlink: 'syz.5.1667': attribute type 20 has an invalid length. [ 605.206737][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1667'. [ 605.323612][ T31] audit: type=1400 audit(1790257611.414:602): avc: denied { write } for pid=12122 comm="syz.5.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 605.335741][T12116] input: syz0 as /devices/virtual/input/input76 ** 3547 printk messages dropped ** [ 605.787823][ C1] net_ratelimit: 57 callbacks suppressed [ 606.805569][T12134] FAULT_INJECTION: forcing a failure. [ 606.805569][T12134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.805589][T12134] CPU: 1 UID: 0 PID: 12134 Comm: syz.4.1670 Not tainted syzkaller #0 PREEMPT(full) [ 606.805602][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 606.805609][T12134] Call Trace: [ 606.805613][T12134] [ 606.805618][T12134] dump_stack_lvl+0x100/0x190 [ 606.805639][T12134] should_fail_ex.cold+0x5/0xa [ 606.805656][T12134] _copy_from_user+0x2e/0xd0 [ 606.805669][T12134] copy_msghdr_from_user+0x9f/0x4c0 [ 606.805682][T12134] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 606.805697][T12134] ? lock_acquire+0x1d1/0x380 [ 606.805710][T12134] ? get_pid_task+0x2a/0x250 [ 606.805727][T12134] ___sys_sendmsg+0x106/0x1e0 [ 606.805742][T12134] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.805756][T12134] ? get_pid_task+0x106/0x250 [ 606.805777][T12134] ? find_held_lock+0x2b/0x80 [ 606.805801][T12134] __sys_sendmsg+0x160/0x210 [ 606.805816][T12134] ? __pfx___sys_sendmsg+0x10/0x10 [ 606.805838][T12134] do_syscall_64+0x123/0x790 [ 606.805858][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.805870][T12134] RIP: 0033:0x7fbe9659e159 [ 606.805880][T12134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.805891][T12134] RSP: 002b:00007fbe9740e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.805902][T12134] RAX: ffffffffffffffda RBX: 00007fbe96825fa0 RCX: 00007fbe9659e159 [ 606.805910][T12134] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 606.805917][T12134] RBP: 00007fbe9740e090 R08: 0000000000000000 R09: 0000000000000000 [ 606.805924][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.805931][T12134] R13: 00007fbe96826038 R14: 00007fbe96825fa0 R15: 00007fffc6ce9c98 [ 606.805945][T12134] [ 607.262090][T12149] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 607.265389][T12149] CIFS: Attempting to mount //127.0.0.1/share [ 607.347515][T12151] netlink: 'syz.1.1676': attribute type 2 has an invalid length. [ 608.343342][T12138] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 608.444072][T12158] netlink: 'syz.4.1674': attribute type 21 has an invalid length. [ 608.675593][T12138] bond9 (unregistering): Released all slaves [ 608.811220][T12149] CIFS: VFS: Error connecting to socket. Aborting operation. [ 608.874020][T12149] CIFS: VFS: cifs_mount failed w/return code = -4 [ 608.891363][T12158] netlink: 'syz.4.1674': attribute type 6 has an invalid length. [ 608.891376][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1674'. [ 609.217923][ T31] audit: type=1400 audit(1790257615.003:603): avc: denied { create } for pid=12161 comm="syz.0.1678" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 609.227953][ T31] audit: type=1400 audit(1790257615.013:604): avc: denied { write } for pid=12161 comm="syz.0.1678" name="file0" dev="tmpfs" ino=1885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 609.228000][ T31] audit: type=1400 audit(1790257615.013:605): avc: denied { open } for pid=12161 comm="syz.0.1678" path="/323/file0" dev="tmpfs" ino=1885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 609.364136][ T5797] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 609.551464][ T5797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 609.551965][ T5797] usb 2-1: not running at top speed; connect to a high speed hub [ 609.551991][ T5797] usb 2-1: New USB device found, idVendor=2cb7, idProduct=0112, bcdDevice=3a.d1 [ 609.555653][ T5797] usb 2-1: config 11 has an invalid interface number: 183 but max is 0 [ 609.555675][ T5797] usb 2-1: config 11 has no interface number 0 [ 609.555708][ T5797] usb 2-1: config 11 interface 183 altsetting 156 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 609.555753][ T5797] usb 2-1: config 11 interface 183 has no altsetting 0 [ 609.558207][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.558227][ T5797] usb 2-1: Product: syz [ 609.558241][ T5797] usb 2-1: Manufacturer: syz [ 609.558255][ T5797] usb 2-1: SerialNumber: syz [ 609.824677][ T31] audit: type=1400 audit(1790257615.566:606): avc: denied { create } for pid=12162 comm="syz.1.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 610.235406][T12178] FAULT_INJECTION: forcing a failure. [ 610.235406][T12178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.235424][T12178] CPU: 0 UID: 0 PID: 12178 Comm: syz.3.1669 Not tainted syzkaller #0 PREEMPT(full) [ 610.235438][T12178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 610.235445][T12178] Call Trace: [ 610.235449][T12178] [ 610.235454][T12178] dump_stack_lvl+0x100/0x190 [ 610.235476][T12178] should_fail_ex.cold+0x5/0xa [ 610.235493][T12178] _copy_from_iter+0x43a/0x1690 [ 610.235510][T12178] ? __pfx__copy_from_iter+0x10/0x10 [ 610.235525][T12178] ? __alloc_skb+0x4e9/0x710 [ 610.235539][T12178] ? __pfx___alloc_skb+0x10/0x10 [ 610.235554][T12178] ? lock_acquire+0x1d1/0x380 [ 610.235566][T12178] ? skb_put+0x138/0x180 [ 610.235584][T12178] tipc_msg_build+0x30a/0x1100 [ 610.235603][T12178] ? avc_has_perm_noaudit+0x145/0x470 [ 610.235620][T12178] ? __pfx_tipc_msg_build+0x10/0x10 [ 610.235639][T12178] ? register_lock_class+0x3f/0x7b0 [ 610.235652][T12178] ? rcu_is_watching+0x13/0xc0 [ 610.235671][T12178] __tipc_sendstream+0x6a7/0x10e0 [ 610.235691][T12178] ? __pfx___tipc_sendstream+0x10/0x10 [ 610.235706][T12178] ? do_raw_spin_lock+0x128/0x260 [ 610.235722][T12178] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 610.235738][T12178] ? __pfx_woken_wake_function+0x10/0x10 [ 610.235755][T12178] ? __local_bh_enable_ip+0xa5/0x120 [ 610.235772][T12178] tipc_sendstream+0x4f/0x70 [ 610.235787][T12178] ____sys_sendmsg+0xa4d/0xbe0 [ 610.235809][T12178] ? __pfx_tipc_sendstream+0x10/0x10 [ 610.235825][T12178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.235852][T12178] ___sys_sendmsg+0x190/0x1e0 [ 610.235864][T12178] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.235877][T12178] ? futex_wait+0x11e/0x370 [ 610.235894][T12178] ? find_held_lock+0x2b/0x80 [ 610.235921][T12178] __sys_sendmsg+0x160/0x210 [ 610.235936][T12178] ? __pfx___sys_sendmsg+0x10/0x10 [ 610.235959][T12178] do_syscall_64+0x123/0x790 [ 610.235978][T12178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.235990][T12178] RIP: 0033:0x7f40f959e159 [ 610.235999][T12178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.236010][T12178] RSP: 002b:00007f40fa43c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.236025][T12178] RAX: ffffffffffffffda RBX: 00007f40f9826090 RCX: 00007f40f959e159 [ 610.236037][T12178] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 610.236047][T12178] RBP: 00007f40f963506b R08: 0000000000000000 R09: 0000000000000000 [ 610.236055][T12178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.236061][T12178] R13: 00007f40f9826128 R14: 00007f40f9826090 R15: 00007ffe7d869c38 [ 610.236076][T12178] [ 610.277336][ T31] audit: type=1400 audit(1790257615.981:607): avc: denied { cmd } for pid=12162 comm="iou-wrk-12163" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 610.336808][T12182] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 610.665563][ T5797] option 2-1:11.183: GSM modem (1-port) converter detected [ 610.676945][T12164] block device autoloading is deprecated and will be removed. [ 610.697953][ T5797] usb 2-1: USB disconnect, device number 68 [ 610.709425][ T5797] option 2-1:11.183: device disconnected [ 610.765419][ T31] audit: type=1400 audit(1790257616.434:608): avc: denied { unlink } for pid=5596 comm="syz-executor" name="file0" dev="tmpfs" ino=1885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 611.013703][ T5693] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 611.178638][ T5693] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 611.215375][ T5693] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 611.215447][ T5693] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 611.215512][ T5693] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 611.215849][ T5693] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.304500][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 611.304529][ T5693] usb 5-1: Product: syz [ 611.304543][ T5693] usb 5-1: Manufacturer: syz [ 611.481784][ T5693] cdc_wdm 5-1:1.0: skipping garbage [ 611.482100][ T5693] cdc_wdm 5-1:1.0: skipping garbage [ 611.596608][ C0] net_ratelimit: 81 callbacks suppressed [ 611.903073][ T5693] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 611.903100][ T5693] cdc_wdm 5-1:1.0: Unknown control protocol [ 612.002599][ T5693] usb 5-1: USB disconnect, device number 73 [ 612.147446][T12197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=12197 comm=syz.1.1684 [ 612.210061][ T31] audit: type=1400 audit(1790257617.762:609): avc: denied { read } for pid=5263 comm="dhcpcd" name="n123" dev="tmpfs" ino=7939 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 612.211616][ T31] audit: type=1400 audit(1790257617.762:610): avc: denied { open } for pid=5263 comm="dhcpcd" path="/run/udev/data/n123" dev="tmpfs" ino=7939 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 612.212096][ T31] audit: type=1400 audit(1790257617.762:611): avc: denied { getattr } for pid=5263 comm="dhcpcd" path="/run/udev/data/n123" dev="tmpfs" ino=7939 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 612.314784][T12206] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1677'. [ 612.420529][ T5694] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 612.420663][ T5693] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 612.584145][ T5693] usb 5-1: device descriptor read/64, error -71 [ 612.604920][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 612.606816][ T5694] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 612.613166][ T5694] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.613189][ T5694] usb 2-1: config 0 has no interface number 0 [ 612.613229][ T5694] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 612.613249][ T5694] usb 2-1: config 0 interface 1 has no altsetting 0 [ 612.656271][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.656282][ T5694] usb 2-1: Product: syz [ 612.656291][ T5694] usb 2-1: Manufacturer: syz [ 612.656299][ T5694] usb 2-1: SerialNumber: syz [ 612.683188][ T5694] usb 2-1: config 0 descriptor?? [ 612.843541][ T5693] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 612.991308][T12225] netlink: 'syz.5.1690': attribute type 21 has an invalid length. [ 612.991572][T12225] netlink: 'syz.5.1690': attribute type 6 has an invalid length. [ 612.991593][T12225] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1690'. [ 613.032571][ T5694] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 613.032594][ T5694] cx231xx 2-1:0.1: Not found matching IAD interface [ 613.036870][ T5694] usb 2-1: USB disconnect, device number 69 [ 613.092419][ T5693] usb 5-1: device descriptor read/64, error -71 [ 613.211814][ T5693] usb usb5-port1: attempt power cycle [ 613.347734][ T31] audit: type=1400 audit(1790257618.814:612): avc: denied { write } for pid=12209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.347866][ T31] audit: type=1400 audit(1790257618.814:613): avc: denied { create } for pid=12209 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 613.348117][ T31] audit: type=1400 audit(1790257618.814:614): avc: denied { write } for pid=12209 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller0.link" dev="tmpfs" ino=7966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 613.348765][ T31] audit: type=1400 audit(1790257618.814:615): avc: denied { append } for pid=12209 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=7966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 613.580058][ T5693] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 613.581556][ T31] audit: type=1400 audit(1790257619.036:616): avc: denied { write } for pid=12238 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.581787][ T31] audit: type=1400 audit(1790257619.036:617): avc: denied { unlink } for pid=12238 comm="rm" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=7966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 613.602350][ T5693] usb 5-1: device descriptor read/8, error -71 [ 613.808359][ T5692] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 613.861863][ T5693] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 613.886378][ T5693] usb 5-1: device descriptor read/8, error -71 [ 613.951336][ T5692] usb 6-1: device descriptor read/64, error -71 [ 614.003858][ T5693] usb usb5-port1: unable to enumerate USB device [ 614.219606][ T5692] usb 6-1: new high-speed USB device number 20 using dummy_hcd ** 3119 printk messages dropped ** [ 614.409113][ T5692] usb 6-1: device descriptor read/64, error -71 ** 802 printk messages dropped ** ** 618 printk messages dropped ** ** 310 printk messages dropped ** ** 300 printk messages dropped ** ** 303 printk messages dropped ** ** 304 printk messages dropped ** ** 166 printk messages dropped ** ** 2 printk messages dropped ** [ 614.523354][ T5692] usb usb6-port1: attempt power cycle [ 614.860716][T12264] overlay: filesystem on ./file0 not supported as upperdir [ 614.926217][ T5692] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 614.947731][ T5692] usb 6-1: device descriptor read/8, error -71 [ 615.097231][ T5800] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 615.189313][T12275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1698'. [ 615.216716][ T5692] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 615.240624][ T5692] usb 6-1: device descriptor read/8, error -71 [ 615.272939][ T5800] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 615.275661][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.275686][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.276764][ T5800] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 615.276784][ T5800] usb 4-1: Manufacturer: syz [ 615.279129][ T5800] usb 4-1: config 0 descriptor?? [ 615.368823][ T5692] usb usb6-port1: unable to enumerate USB device [ 616.203207][ T31] kauditd_printk_skb: 94 callbacks suppressed [ 616.203222][ T31] audit: type=1400 audit(1790257621.453:712): avc: denied { read } for pid=12242 comm="syz.1.1693" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 616.203266][ T31] audit: type=1400 audit(1790257621.453:713): avc: denied { open } for pid=12242 comm="syz.1.1693" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 616.563815][T12294] overlayfs: failed to resolve './file1': -2 [ 616.766085][T12292] overlayfs: failed to resolve './bus': -2 [ 616.830757][ T5800] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003D/input/input79 [ 616.925679][ T5800] uclogic 0003:256C:006D.003D: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 617.137197][T12309] netlink: 'syz.0.1702': attribute type 21 has an invalid length. [ 617.217498][ T5800] usb 4-1: USB disconnect, device number 60 [ 617.271994][T12309] netlink: 'syz.0.1702': attribute type 6 has an invalid length. [ 617.272009][T12309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1702'. [ 617.455308][ T31] audit: type=1400 audit(1790257622.606:714): avc: denied { write } for pid=12290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.458138][T12310] fido_id[12310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 617.579938][ C0] net_ratelimit: 72 callbacks suppressed [ 617.802897][ T31] audit: type=1400 audit(1790257622.920:715): avc: denied { write } for pid=12324 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.744396][T12338] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1706'. [ 619.049334][ T31] audit: type=1400 audit(1790257624.074:716): avc: denied { write } for pid=12329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.238356][ T31] audit: type=1400 audit(1790257624.258:717): avc: denied { write } for pid=12352 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.295963][T12348] netlink: 'syz.5.1708': attribute type 10 has an invalid length. [ 619.296190][T12348] veth0_vlan: entered allmulticast mode [ 619.374292][ T31] audit: type=1400 audit(1790257624.378:718): avc: denied { mount } for pid=12354 comm="syz.0.1710" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 619.417216][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 619.465118][T12345] input: syz0 as /devices/virtual/input/input80 [ 620.048814][T12378] netlink: 'syz.5.1713': attribute type 21 has an invalid length. [ 620.049046][T12378] netlink: 'syz.5.1713': attribute type 6 has an invalid length. [ 620.049079][T12378] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1713'. [ 620.194968][ T31] audit: type=1400 audit(1790257625.135:719): avc: denied { shutdown } for pid=12365 comm="syz.4.1712" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 620.201420][ T31] audit: type=1400 audit(1790257625.135:720): avc: denied { read } for pid=12365 comm="syz.4.1712" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 620.306393][ T31] audit: type=1400 audit(1790257625.236:721): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 620.398912][ T5608] block nbd0: Receive control failed (result -32) [ 620.409099][ T5608] block nbd0: Receive control failed (result -32) [ 620.764248][T12398] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1720'. [ 622.143104][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 622.143124][ T31] audit: type=1400 audit(1790257626.934:723): avc: denied { write } for pid=12393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.222306][ T31] audit: type=1400 audit(1790257627.008:724): avc: denied { write } for pid=12420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.561496][ T5692] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 622.599978][T12427] netlink: 'syz.1.1723': attribute type 10 has an invalid length. [ 622.739717][ T5692] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 622.742624][ T5692] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 622.742651][ T5692] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 622.833200][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.833239][ T5692] usb 4-1: Product: syz [ 622.833301][ T5692] usb 4-1: Manufacturer: syz [ 622.833337][ T5692] usb 4-1: SerialNumber: syz [ 623.129175][ C1] net_ratelimit: 59 callbacks suppressed [ 623.274464][T12427] input: syz0 as /devices/virtual/input/input81 [ 623.358072][ T5692] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 623.453599][T12438] netlink: 'syz.5.1726': attribute type 21 has an invalid length. [ 623.568511][ T31] audit: type=1400 audit(1790257628.235:725): avc: denied { read write } for pid=12424 comm="syz.3.1725" name="lp0" dev="devtmpfs" ino=4035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 623.568554][ T31] audit: type=1400 audit(1790257628.235:726): avc: denied { open } for pid=12424 comm="syz.3.1725" path="/dev/usb/lp0" dev="devtmpfs" ino=4035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 623.668220][ C0] usblp0: nonzero read bulk status received: -71 [ 623.696527][ T5693] usb 4-1: USB disconnect, device number 61 [ 623.736237][ T31] audit: type=1400 audit(1790257628.401:727): avc: denied { write } for pid=12428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.739054][T12438] netlink: 'syz.5.1726': attribute type 6 has an invalid length. [ 623.739068][T12438] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1726'. [ 623.771536][T12446] FAULT_INJECTION: forcing a failure. [ 623.771536][T12446] name failslab, interval 1, probability 0, space 0, times 0 [ 623.771565][T12446] CPU: 1 UID: 0 PID: 12446 Comm: syz.0.1727 Not tainted syzkaller #0 PREEMPT(full) [ 623.771586][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 623.771598][T12446] Call Trace: [ 623.771605][T12446] [ 623.771613][T12446] dump_stack_lvl+0x100/0x190 [ 623.771645][T12446] should_fail_ex.cold+0x5/0xa [ 623.771669][T12446] should_failslab+0xc2/0x120 [ 623.771690][T12446] kmem_cache_alloc_noprof+0x92/0x6a0 [ 623.771712][T12446] ? prepare_creds+0x2c/0x950 [ 623.771733][T12446] prepare_creds+0x2c/0x950 [ 623.771750][T12446] __sys_setuid+0x9c/0x440 [ 623.771770][T12446] do_syscall_64+0x123/0x790 [ 623.771797][T12446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.771814][T12446] RIP: 0033:0x7f926819e159 [ 623.771829][T12446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.771844][T12446] RSP: 002b:00007f9269110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 623.771862][T12446] RAX: ffffffffffffffda RBX: 00007f9268425fa0 RCX: 00007f926819e159 [ 623.771874][T12446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 623.771890][T12446] RBP: 00007f926823506b R08: 0000000000000000 R09: 0000000000000000 [ 623.771901][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.771911][T12446] R13: 00007f9268426038 R14: 00007f9268425fa0 R15: 00007ffcbaf0f5e8 [ 623.771933][T12446] [ 623.810813][ T31] audit: type=1400 audit(1790257628.466:728): avc: denied { ioctl } for pid=12445 comm="syz.0.1727" path="socket:[42687]" dev="sockfs" ino=42687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 624.077432][ T31] audit: type=1400 audit(1790257628.715:729): avc: denied { write } for pid=12451 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.853156][ T5692] usblp0: removed [ 625.348398][T12465] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [101] [ 625.348420][T12465] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 625.348434][T12465] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 625.348445][T12465] One or more global auth toks could not properly register; rc = [-22] [ 625.348474][T12465] Error validating options; rc = [-22] [ 625.515091][T12467] lo: entered promiscuous mode [ 626.182823][T12472] lo speed is unknown, defaulting to 1000 [ 626.249079][T12481] FAULT_INJECTION: forcing a failure. [ 626.249079][T12481] name failslab, interval 1, probability 0, space 0, times 0 [ 626.249118][T12481] CPU: 0 UID: 0 PID: 12481 Comm: syz.5.1739 Not tainted syzkaller #0 PREEMPT(full) [ 626.249142][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 626.249154][T12481] Call Trace: [ 626.249162][T12481] [ 626.249169][T12481] dump_stack_lvl+0x100/0x190 [ 626.249206][T12481] should_fail_ex.cold+0x5/0xa [ 626.249230][T12481] should_failslab+0xc2/0x120 [ 626.249253][T12481] kmem_cache_alloc_noprof+0x92/0x6a0 [ 626.249273][T12481] ? prepare_creds+0x2c/0x950 [ 626.249296][T12481] prepare_creds+0x2c/0x950 [ 626.249315][T12481] __sys_setuid+0x9c/0x440 [ 626.249336][T12481] do_syscall_64+0x123/0x790 [ 626.249365][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.249385][T12481] RIP: 0033:0x7f011699e159 [ 626.249400][T12481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.249417][T12481] RSP: 002b:00007f01178f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 626.249434][T12481] RAX: ffffffffffffffda RBX: 00007f0116c25fa0 RCX: 00007f011699e159 [ 626.249445][T12481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 626.249456][T12481] RBP: 00007f0116a3506b R08: 0000000000000000 R09: 0000000000000000 [ 626.249468][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.249479][T12481] R13: 00007f0116c26038 R14: 00007f0116c25fa0 R15: 00007ffeb4d4e3f8 [ 626.249505][T12481] [ 626.558784][ T31] audit: type=1400 audit(1790257631.003:730): avc: denied { connect } for pid=12479 comm="syz.0.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 626.559112][ T31] audit: type=1400 audit(1790257631.003:731): avc: denied { name_connect } for pid=12479 comm="syz.0.1738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 626.621831][ T31] audit: type=1400 audit(1790257631.068:732): avc: denied { mounton } for pid=12479 comm="syz.0.1738" path="/340/file0" dev="tmpfs" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 627.041299][ T30] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 627.278900][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 627.281268][ T30] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 ** 147830 printk messages dropped ** ** 2 printk messages dropped ** [ 628.869049][ T5798] net_ratelimit: 94 callbacks suppressed ** 98587 printk messages dropped ** ** 3 printk messages dropped ** ** 5 printk messages dropped ** [ 629.969151][ T30] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 ** 91540 printk messages dropped ** [ 630.996957][T12501] syz.4.1743 (12501) used greatest stack depth: 18248 bytes left [ 631.289384][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.289403][ T30] usb 2-1: Product: syz [ 631.310280][ T30] usb 2-1: config 0 descriptor?? [ 631.326105][ T30] usb 2-1: can't set config #0, error -71 [ 631.342775][ T30] usb 2-1: USB disconnect, device number 70 [ 631.631919][T12513] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [101] [ 631.631938][T12513] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 631.631953][T12513] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 631.631964][T12513] One or more global auth toks could not properly register; rc = [-22] [ 631.631993][T12513] Error validating options; rc = [-22] [ 633.230689][T12522] FAULT_INJECTION: forcing a failure. [ 633.230689][T12522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.230734][T12522] CPU: 0 UID: 0 PID: 12522 Comm: syz.1.1750 Not tainted syzkaller #0 PREEMPT(full) [ 633.230756][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 633.230767][T12522] Call Trace: [ 633.230775][T12522] [ 633.230783][T12522] dump_stack_lvl+0x100/0x190 [ 633.230815][T12522] should_fail_ex.cold+0x5/0xa [ 633.230841][T12522] _copy_from_user+0x2e/0xd0 [ 633.230864][T12522] copy_msghdr_from_user+0x9f/0x4c0 [ 633.230885][T12522] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 633.230916][T12522] ___sys_sendmsg+0x106/0x1e0 [ 633.230943][T12522] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.230962][T12522] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 633.231008][T12522] ? ___sys_sendmsg+0x20/0x1e0 [ 633.231031][T12522] __sys_sendmsg+0x160/0x210 [ 633.231056][T12522] ? __pfx___sys_sendmsg+0x10/0x10 [ 633.231085][T12522] ? trace_hardirqs_off+0x70/0x170 [ 633.231116][T12522] do_syscall_64+0x123/0x790 [ 633.231148][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.231167][T12522] RIP: 0033:0x7f416c59e159 [ 633.231184][T12522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.231202][T12522] RSP: 002b:00007f416d4fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.231221][T12522] RAX: ffffffffffffffda RBX: 00007f416c826090 RCX: 00007f416c59e159 [ 633.231233][T12522] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000009 [ 633.231245][T12522] RBP: 00007f416d4fc090 R08: 0000000000000000 R09: 0000000000000000 [ 633.231257][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.231269][T12522] R13: 00007f416c826128 R14: 00007f416c826090 R15: 00007ffc68463218 [ 633.231295][T12522] [ 633.306810][T12526] MTD: Couldn't look up './dev/mtdblock0': -2 [ 633.722851][T12528] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 633.722868][T12528] netlink: 'syz.3.1752': attribute type 2 has an invalid length. [ 633.722880][T12528] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1752'. [ 634.640548][ T5726] net_ratelimit: 59 callbacks suppressed [ 634.691927][ T30] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 634.780700][ T5693] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 634.881204][ T30] usb 6-1: not running at top speed; connect to a high speed hub [ 634.881357][ T30] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 634.881483][ T30] usb 6-1: no configurations [ 634.881545][ T30] usb 6-1: can't read configurations, error -22 [ 634.968471][ T5693] usb 2-1: Using ep0 maxpacket: 32 [ 635.011375][ T5693] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 635.034565][ T5693] usb 2-1: config 123 interface 0 has no altsetting 0 [ 635.071601][ T30] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 635.112475][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.112517][ T5693] usb 2-1: Product: syz [ 635.112578][ T5693] usb 2-1: Manufacturer: syz [ 635.112641][ T5693] usb 2-1: SerialNumber: syz [ 635.247688][ T30] usb 6-1: not running at top speed; connect to a high speed hub [ 635.247836][ T30] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 635.247924][ T30] usb 6-1: no configurations [ 635.247999][ T30] usb 6-1: can't read configurations, error -22 [ 635.248893][ T30] usb usb6-port1: attempt power cycle [ 635.711177][ T30] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 635.737281][ T30] usb 6-1: not running at top speed; connect to a high speed hub [ 635.737308][ T30] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 635.737344][ T30] usb 6-1: no configurations [ 635.737356][ T30] usb 6-1: can't read configurations, error -22 [ 635.875653][ T30] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 635.898145][ T30] usb 6-1: not running at top speed; connect to a high speed hub [ 635.898172][ T30] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 635.898205][ T30] usb 6-1: no configurations [ 635.898217][ T30] usb 6-1: can't read configurations, error -22 [ 635.898591][ T30] usb usb6-port1: unable to enumerate USB device [ 636.014803][ T5693] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 636.023118][ T5693] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 636.024560][ T5693] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 636.024606][ T5693] usb 2-1: media controller created [ 636.087600][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 636.120514][ T5693] set interface failed [ 636.120574][ T5693] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 636.120587][ T5693] error writing reg: 0xff, val: 0x00 [ 636.192350][ T5693] dvb_usb_mxl111sf 2-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 636.209338][ T5693] usb 2-1: USB disconnect, device number 71 [ 636.433749][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 636.433774][ T31] audit: type=1400 audit(1790257640.110:735): avc: denied { bind } for pid=12552 comm="syz.4.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 636.883800][T12568] FAULT_INJECTION: forcing a failure. [ 636.883800][T12568] name failslab, interval 1, probability 0, space 0, times 0 [ 636.883830][T12568] CPU: 0 UID: 0 PID: 12568 Comm: syz.1.1761 Not tainted syzkaller #0 PREEMPT(full) [ 636.883853][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 636.883865][T12568] Call Trace: [ 636.883871][T12568] [ 636.883879][T12568] dump_stack_lvl+0x100/0x190 [ 636.883913][T12568] should_fail_ex.cold+0x5/0xa [ 636.883941][T12568] should_failslab+0xc2/0x120 [ 636.883967][T12568] kmem_cache_alloc_noprof+0x92/0x6a0 [ 636.883988][T12568] ? prepare_creds+0x2c/0x950 [ 636.884010][T12568] prepare_creds+0x2c/0x950 [ 636.884031][T12568] __sys_setuid+0x9c/0x440 [ 636.884055][T12568] do_syscall_64+0x123/0x790 [ 636.884086][T12568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.884106][T12568] RIP: 0033:0x7f416c59e159 [ 636.884124][T12568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.884143][T12568] RSP: 002b:00007f416d51d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 636.884170][T12568] RAX: ffffffffffffffda RBX: 00007f416c825fa0 RCX: 00007f416c59e159 [ 636.884186][T12568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 636.884197][T12568] RBP: 00007f416c63506b R08: 0000000000000000 R09: 0000000000000000 [ 636.884208][T12568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.884217][T12568] R13: 00007f416c826038 R14: 00007f416c825fa0 R15: 00007ffc68463218 [ 636.884243][T12568] [ 637.030155][ T31] audit: type=1400 audit(1790257640.664:736): avc: denied { getopt } for pid=12569 comm="syz.0.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 637.106567][T12575] MTD: Couldn't look up './dev/mtdblock0': -2 [ 638.005281][ T31] audit: type=1400 audit(1790257641.568:737): avc: denied { shutdown } for pid=12569 comm="syz.0.1756" lport=51066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 638.275324][T12585] netlink: 'syz.3.1767': attribute type 10 has an invalid length. [ 638.302099][T12585] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 638.482469][ T31] audit: type=1400 audit(1790257642.002:738): avc: denied { ioctl } for pid=12586 comm="syz.4.1768" path="socket:[42964]" dev="sockfs" ino=42964 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 638.702075][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 638.866505][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 638.873122][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 638.890827][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.910242][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 638.910254][ T9] pvrusb2: ********** [ 638.910260][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 638.910270][ T9] pvrusb2: Important functionality might not be entirely working. [ 638.910276][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 638.910284][ T9] pvrusb2: ********** [ 639.221132][ T2339] pvrusb2: Invalid write control endpoint [ 639.234949][T12604] FAULT_INJECTION: forcing a failure. [ 639.234949][T12604] name failslab, interval 1, probability 0, space 0, times 0 [ 639.234977][T12604] CPU: 0 UID: 0 PID: 12604 Comm: syz.0.1774 Not tainted syzkaller #0 PREEMPT(full) [ 639.235001][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 639.235012][T12604] Call Trace: [ 639.235019][T12604] [ 639.235027][T12604] dump_stack_lvl+0x100/0x190 [ 639.235059][T12604] should_fail_ex.cold+0x5/0xa [ 639.235085][T12604] should_failslab+0xc2/0x120 [ 639.235112][T12604] kmem_cache_alloc_noprof+0x92/0x6a0 [ 639.235133][T12604] ? prepare_creds+0x2c/0x950 [ 639.235154][T12604] prepare_creds+0x2c/0x950 [ 639.235173][T12604] __sys_setuid+0x9c/0x440 [ 639.235194][T12604] do_syscall_64+0x123/0x790 [ 639.235223][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.235243][T12604] RIP: 0033:0x7f926819e159 [ 639.235259][T12604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.235276][T12604] RSP: 002b:00007f9269110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 639.235295][T12604] RAX: ffffffffffffffda RBX: 00007f9268425fa0 RCX: 00007f926819e159 [ 639.235308][T12604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 639.235319][T12604] RBP: 00007f926823506b R08: 0000000000000000 R09: 0000000000000000 [ 639.235329][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.235340][T12604] R13: 00007f9268426038 R14: 00007f9268425fa0 R15: 00007ffcbaf0f5e8 [ 639.235366][T12604] [ 639.241072][ T31] audit: type=1400 audit(1790257642.703:739): avc: denied { setopt } for pid=12605 comm="syz.1.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 639.448883][ T2339] pvrusb2: Invalid write control endpoint [ 639.448893][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 639.448901][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 639.448908][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 639.448916][ T2339] pvrusb2: Device being rendered inoperable [ 639.490247][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 639.490360][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 639.510607][ T2339] pvrusb2: Attached sub-driver cx25840 [ 639.510615][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 639.510623][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 639.536770][T12590] pvrusb2: Attempted to execute control transfer when device not ok [ 639.552484][T12590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=12590 comm=syz.3.1769 [ 639.559073][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 639.586879][ T31] audit: type=1400 audit(1790257643.026:740): avc: denied { ioctl } for pid=12601 comm="syz.4.1773" path="socket:[43318]" dev="sockfs" ino=43318 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 639.732744][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 639.733431][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.734518][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.734568][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.734588][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 639.734605][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 639.736018][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 639.736035][ T9] usb 6-1: SerialNumber: syz [ 639.744273][T12607] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 639.759325][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 639.759342][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 639.764497][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 639.863977][ T31] audit: type=1400 audit(1790257643.284:741): avc: denied { bind } for pid=12589 comm="syz.3.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 640.038587][ T30] usb 4-1: USB disconnect, device number 62 [ 640.468468][ C1] net_ratelimit: 232 callbacks suppressed [ 641.318306][T12630] overlayfs: failed to resolve './bus': -2 [ 641.599313][T12642] FAULT_INJECTION: forcing a failure. [ 641.599313][T12642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.599337][T12642] CPU: 1 UID: 0 PID: 12642 Comm: syz.0.1784 Not tainted syzkaller #0 PREEMPT(full) [ 641.599357][T12642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 641.599368][T12642] Call Trace: [ 641.599374][T12642] [ 641.599381][T12642] dump_stack_lvl+0x100/0x190 [ 641.599410][T12642] should_fail_ex.cold+0x5/0xa [ 641.599434][T12642] _copy_to_user+0x32/0xd0 [ 641.599456][T12642] simple_read_from_buffer+0xcb/0x170 [ 641.599481][T12642] proc_fail_nth_read+0x1af/0x230 [ 641.599504][T12642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.599527][T12642] ? rw_verify_area+0xce/0x6d0 [ 641.599552][T12642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.599573][T12642] vfs_read+0x1e4/0xb40 [ 641.599591][T12642] ? lock_acquire+0x1d1/0x380 [ 641.599608][T12642] ? __fget_files+0x34/0x3d0 [ 641.599629][T12642] ? __pfx_vfs_read+0x10/0x10 [ 641.599645][T12642] ? find_held_lock+0x2b/0x80 [ 641.599668][T12642] ? __fget_files+0x215/0x3d0 [ 641.599693][T12642] ? __fget_files+0x21f/0x3d0 [ 641.599720][T12642] ksys_read+0x12a/0x250 [ 641.599744][T12642] ? __pfx_ksys_read+0x10/0x10 [ 641.599768][T12642] do_syscall_64+0x123/0x790 [ 641.599798][T12642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.599814][T12642] RIP: 0033:0x7f926815e98e [ 641.599829][T12642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 641.599844][T12642] RSP: 002b:00007f926910ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 641.599862][T12642] RAX: ffffffffffffffda RBX: 00007f92691106c0 RCX: 00007f926815e98e [ 641.599873][T12642] RDX: 000000000000000f RSI: 00007f92691100a0 RDI: 0000000000000004 [ 641.599883][T12642] RBP: 00007f9269110090 R08: 0000000000000000 R09: 0000000000000000 [ 641.599893][T12642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.599904][T12642] R13: 00007f9268426038 R14: 00007f9268425fa0 R15: 00007ffcbaf0f5e8 [ 641.599928][T12642] [ 642.145296][T12645] jffs2: notice: (12645) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 642.826832][ T5800] usb 6-1: USB disconnect, device number 27 [ 642.997678][T12658] xt_NETMAP: bad MAP_IPS. [ 643.880073][T12668] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 646.028149][ C0] net_ratelimit: 59 callbacks suppressed [ 646.241752][T12671] netlink: 'syz.3.1795': attribute type 21 has an invalid length. [ 646.242153][T12671] netlink: 'syz.3.1795': attribute type 6 has an invalid length. [ 646.242187][T12671] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1795'. [ 646.664551][ T31] audit: type=1400 audit(1790257649.549:742): avc: denied { view } for pid=12682 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 646.922631][T12683] jffs2: notice: (12683) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 647.851078][ T31] audit: type=1400 audit(1790257650.656:743): avc: denied { setattr } for pid=12664 comm="syz.0.1792" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 648.336803][ T5800] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 648.500624][ T5800] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 648.510787][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.510813][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.533362][ T5800] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 648.533381][ T5800] usb 2-1: Manufacturer: syz [ 648.543761][ T5800] usb 2-1: config 0 descriptor?? [ 648.873778][T12705] FAULT_INJECTION: forcing a failure. [ 648.873778][T12705] name failslab, interval 1, probability 0, space 0, times 0 [ 648.873812][T12705] CPU: 0 UID: 0 PID: 12705 Comm: syz.5.1803 Not tainted syzkaller #0 PREEMPT(full) [ 648.873837][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 648.873849][T12705] Call Trace: [ 648.873857][T12705] [ 648.873865][T12705] dump_stack_lvl+0x100/0x190 [ 648.873905][T12705] should_fail_ex.cold+0x5/0xa [ 648.873938][T12705] should_failslab+0xc2/0x120 [ 648.873968][T12705] kmem_cache_alloc_noprof+0x92/0x6a0 [ 648.873993][T12705] ? prepare_creds+0x2c/0x950 [ 648.874021][T12705] prepare_creds+0x2c/0x950 [ 648.874046][T12705] __sys_setuid+0x9c/0x440 [ 648.874070][T12705] do_syscall_64+0x123/0x790 [ 648.874104][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.874127][T12705] RIP: 0033:0x7f011699e159 [ 648.874145][T12705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.874165][T12705] RSP: 002b:00007f01178f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 648.874193][T12705] RAX: ffffffffffffffda RBX: 00007f0116c25fa0 RCX: 00007f011699e159 [ 648.874207][T12705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 648.874220][T12705] RBP: 00007f0116a3506b R08: 0000000000000000 R09: 0000000000000000 [ 648.874233][T12705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.874245][T12705] R13: 00007f0116c26038 R14: 00007f0116c25fa0 R15: 00007ffeb4d4e3f8 [ 648.874274][T12705] [ 649.243523][T12711] overlay: filesystem on ./file0 not supported as upperdir [ 649.940255][T12715] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [101] [ 649.940276][T12715] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 649.940291][T12715] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 649.940302][T12715] One or more global auth toks could not properly register; rc = [-22] [ 649.940331][T12715] Error validating options; rc = [-22] [ 650.065747][T12717] FAULT_INJECTION: forcing a failure. [ 650.065747][T12717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.065771][T12717] CPU: 0 UID: 0 PID: 12717 Comm: syz.4.1807 Not tainted syzkaller #0 PREEMPT(full) [ 650.065791][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 650.065805][T12717] Call Trace: [ 650.065812][T12717] [ 650.065820][T12717] dump_stack_lvl+0x100/0x190 [ 650.065852][T12717] should_fail_ex.cold+0x5/0xa [ 650.065879][T12717] _copy_from_user+0x2e/0xd0 [ 650.065901][T12717] copy_msghdr_from_user+0x9f/0x4c0 [ 650.065921][T12717] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 650.065946][T12717] ? lock_acquire+0x1d1/0x380 [ 650.065966][T12717] ? get_pid_task+0x2a/0x250 [ 650.065994][T12717] ___sys_sendmsg+0x106/0x1e0 [ 650.066014][T12717] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.066032][T12717] ? get_pid_task+0x106/0x250 [ 650.066065][T12717] ? find_held_lock+0x2b/0x80 [ 650.066107][T12717] __sys_sendmsg+0x160/0x210 [ 650.066130][T12717] ? __pfx___sys_sendmsg+0x10/0x10 [ 650.066167][T12717] do_syscall_64+0x123/0x790 [ 650.066196][T12717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.066216][T12717] RIP: 0033:0x7fbe9659e159 [ 650.066231][T12717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.066248][T12717] RSP: 002b:00007fbe9740e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.066268][T12717] RAX: ffffffffffffffda RBX: 00007fbe96825fa0 RCX: 00007fbe9659e159 [ 650.066280][T12717] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 650.066292][T12717] RBP: 00007fbe9740e090 R08: 0000000000000000 R09: 0000000000000000 [ 650.066303][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.066314][T12717] R13: 00007fbe96826038 R14: 00007fbe96825fa0 R15: 00007fffc6ce9c98 [ 650.066339][T12717] [ 650.164192][ T5800] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.003E/input/input85 [ 650.338483][ T5800] uclogic 0003:256C:006D.003E: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 650.372448][ T31] audit: type=1400 audit(1790257652.972:744): avc: denied { accept } for pid=12729 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 650.598155][ T30] usb 2-1: USB disconnect, device number 72 [ 650.753039][T12735] fido_id[12735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 651.020922][T12748] netlink: 'syz.0.1816': attribute type 21 has an invalid length. [ 651.170530][T12751] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 651.182264][T12751] cramfs: wrong magic [ 651.194212][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1817'. [ 651.196402][T12741] netlink: 'syz.4.1815': attribute type 10 has an invalid length. [ 651.261897][T12748] netlink: 'syz.0.1816': attribute type 6 has an invalid length. [ 651.261910][T12748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1816'. [ 651.336140][ T31] audit: type=1400 audit(1790257653.867:745): avc: denied { bind } for pid=12747 comm="syz.5.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 651.392859][T12749] netlink: 'syz.5.1817': attribute type 10 has an invalid length. [ 651.418468][T12750] input: syz0 as /devices/virtual/input/input86 [ 651.578051][T10572] net_ratelimit: 71 callbacks suppressed [ 651.655977][T12757] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [101] [ 651.655997][T12757] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 651.656017][T12757] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 651.656028][T12757] One or more global auth toks could not properly register; rc = [-22] [ 651.656058][T12757] Error validating options; rc = [-22] [ 652.888110][T12766] FAULT_INJECTION: forcing a failure. [ 652.888110][T12766] name failslab, interval 1, probability 0, space 0, times 0 [ 652.888135][T12766] CPU: 1 UID: 0 PID: 12766 Comm: syz.3.1822 Not tainted syzkaller #0 PREEMPT(full) [ 652.888155][T12766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 652.888166][T12766] Call Trace: [ 652.888173][T12766] [ 652.888180][T12766] dump_stack_lvl+0x100/0x190 [ 652.888211][T12766] should_fail_ex.cold+0x5/0xa [ 652.888236][T12766] should_failslab+0xc2/0x120 [ 652.888260][T12766] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 652.888282][T12766] ? sock_alloc_inode+0x26/0x2c0 [ 652.888310][T12766] ? __pfx_sock_alloc_inode+0x10/0x10 [ 652.888338][T12766] sock_alloc_inode+0x26/0x2c0 [ 652.888363][T12766] ? __pfx_sock_alloc_inode+0x10/0x10 [ 652.888388][T12766] alloc_inode+0x68/0x250 [ 652.888404][T12766] sock_alloc+0x44/0x280 [ 652.888428][T12766] do_accept+0xf9/0x530 [ 652.888447][T12766] ? do_raw_spin_lock+0x128/0x260 [ 652.888470][T12766] ? __pfx_do_accept+0x10/0x10 [ 652.888504][T12766] __sys_accept4+0x108/0x200 [ 652.888525][T12766] ? __pfx___sys_accept4+0x10/0x10 [ 652.888547][T12766] ? __pfx_ksys_write+0x10/0x10 [ 652.888577][T12766] __x64_sys_accept4+0x96/0x100 [ 652.888597][T12766] ? lockdep_hardirqs_on+0x7d/0x110 [ 652.888625][T12766] do_syscall_64+0x123/0x790 [ 652.888653][T12766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.888673][T12766] RIP: 0033:0x7f40f959e159 [ 652.888688][T12766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.888704][T12766] RSP: 002b:00007f40fa45d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 652.888722][T12766] RAX: ffffffffffffffda RBX: 00007f40f9825fa0 RCX: 00007f40f959e159 [ 652.888734][T12766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 652.888744][T12766] RBP: 00007f40fa45d090 R08: 0000000000000000 R09: 0000000000000000 [ 652.888754][T12766] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 652.888765][T12766] R13: 00007f40f9826038 R14: 00007f40f9825fa0 R15: 00007ffe7d869c38 [ 652.888791][T12766] [ 653.227682][T12774] FAULT_INJECTION: forcing a failure. [ 653.227682][T12774] name fail_futex, interval 1, probability 0, space 0, times 1 [ 653.227715][T12774] CPU: 1 UID: 0 PID: 12774 Comm: syz.1.1825 Not tainted syzkaller #0 PREEMPT(full) [ 653.227738][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 653.227751][T12774] Call Trace: [ 653.227759][T12774] [ 653.227768][T12774] dump_stack_lvl+0x100/0x190 [ 653.227805][T12774] should_fail_ex.cold+0x5/0xa [ 653.227835][T12774] get_futex_key+0x1d0/0x14f0 [ 653.227868][T12774] ? __pfx_get_futex_key+0x10/0x10 [ 653.227893][T12774] ? __fget_files+0x215/0x3d0 [ 653.227923][T12774] ? __fget_files+0x21f/0x3d0 [ 653.227951][T12774] futex_wake+0xf4/0x5e0 [ 653.227975][T12774] ? __pfx_futex_wake+0x10/0x10 [ 653.228001][T12774] ? rcu_read_lock_any_held+0x6a/0x90 [ 653.228031][T12774] ? find_held_lock+0x2b/0x80 [ 653.228060][T12774] ? ksys_write+0x190/0x250 [ 653.228081][T12774] ? ksys_write+0x190/0x250 [ 653.228104][T12774] do_futex+0x2b2/0x440 [ 653.228134][T12774] ? __pfx_do_futex+0x10/0x10 [ 653.228169][T12774] __x64_sys_futex+0x34f/0x4d0 [ 653.228201][T12774] ? __pfx___x64_sys_futex+0x10/0x10 [ 653.228230][T12774] ? __pfx___do_sys_prctl+0x10/0x10 [ 653.228269][T12774] do_syscall_64+0x123/0x790 [ 653.228302][T12774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.228323][T12774] RIP: 0033:0x7f416c59e159 [ 653.228340][T12774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.228360][T12774] RSP: 002b:00007f416d51d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 653.228382][T12774] RAX: ffffffffffffffda RBX: 00007f416c825fa8 RCX: 00007f416c59e159 [ 653.228396][T12774] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f416c825fac [ 653.228409][T12774] RBP: 00007f416c825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 653.228421][T12774] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 653.228440][T12774] R13: 00007f416c826038 R14: 00007ffc68463130 R15: 00007ffc68463218 [ 653.228468][T12774] [ 653.932884][T12749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 653.934054][T12749] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 654.170614][ T31] audit: type=1400 audit(1790257656.488:746): avc: denied { write } for pid=12778 comm="syz.3.1826" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 654.170779][ T31] audit: type=1400 audit(1790257656.488:747): avc: denied { open } for pid=12778 comm="syz.3.1826" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 654.174181][ T31] audit: type=1400 audit(1790257656.488:748): avc: denied { ioctl } for pid=12778 comm="syz.3.1826" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x7511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 654.175155][ T31] audit: type=1400 audit(1790257656.488:749): avc: denied { getopt } for pid=12777 comm="syz.5.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 654.522431][T12784] db_root: cannot be changed because it's in use [ 654.763590][ T5798] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 654.995678][ T5798] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 655.099134][ T5798] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 655.099196][ T5798] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.099225][ T5798] usb 5-1: config 0 interface 0 has no altsetting 0 [ 655.099387][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.388804][ T5798] usb 5-1: config 0 descriptor?? [ 655.413115][T12788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 656.032839][ T5800] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 656.172087][ T5798] usbhid 5-1:0.0: can't add hid device: -71 [ 656.172223][ T5798] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 656.191688][ T5798] usb 5-1: USB disconnect, device number 78 [ 656.205066][ T5800] usb 4-1: Using ep0 maxpacket: 32 [ 656.206186][ T5800] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 656.212434][ T5800] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 656.212461][ T5800] usb 4-1: config 0 has no interface number 0 [ 656.238420][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.238439][ T5800] usb 4-1: Product: syz [ 656.238459][ T5800] usb 4-1: Manufacturer: syz [ 656.238473][ T5800] usb 4-1: SerialNumber: syz [ 656.241006][ T5800] usb 4-1: config 0 descriptor?? [ 657.115231][ C1] net_ratelimit: 72 callbacks suppressed [ 657.181181][ T9] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 657.354420][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 657.355571][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 657.355595][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.355648][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 657.355695][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.361045][ T9] usb 1-1: config 0 descriptor?? [ 657.363148][T12799] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 657.438044][ T5800] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 657.438069][ T5800] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 657.892242][ T31] audit: type=1400 audit(1790257659.911:750): avc: denied { write } for pid=12789 comm="syz.3.1830" path="socket:[43933]" dev="sockfs" ino=43933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 657.986783][ T31] audit: type=1400 audit(1790257660.003:751): avc: denied { setopt } for pid=12789 comm="syz.3.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 658.080300][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 658.080395][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 658.109661][ T9] usb 1-1: USB disconnect, device number 71 [ 658.169585][ T5800] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 658.169760][ T5800] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 658.197140][ T5800] usb 4-1: USB disconnect, device number 63 [ 658.295225][T12816] overlayfs: failed to resolve './bus': -2 [ 658.793220][T12829] netlink: 'syz.4.1839': attribute type 10 has an invalid length. [ 658.858972][T12829] input: syz0 as /devices/virtual/input/input88 [ 658.993157][T12834] overlay: filesystem on ./file0 not supported as upperdir [ 659.036891][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1842'. [ 659.213026][ T31] audit: type=1400 audit(1790257661.138:752): avc: denied { create } for pid=12836 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 659.214850][ T31] audit: type=1400 audit(1790257661.138:753): avc: denied { write } for pid=12836 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 659.215864][T12837] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1842'. [ 659.470457][ T5694] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 659.522736][ T30] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 659.633558][ T5694] usb 1-1: not running at top speed; connect to a high speed hub [ 659.633584][ T5694] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 659.634626][ T5694] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.634647][ T5694] usb 1-1: config 0 has no interfaces? [ 659.639368][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.639387][ T5694] usb 1-1: Product: syz [ 659.639402][ T5694] usb 1-1: Manufacturer: syz [ 659.639416][ T5694] usb 1-1: SerialNumber: syz [ 659.645254][ T5694] usb 1-1: config 0 descriptor?? [ 659.690793][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 659.708935][ T30] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 659.708958][ T30] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.708980][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 659.709021][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.711133][ T30] usb 5-1: config 0 descriptor?? [ 659.713148][T12845] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 660.037530][T12850] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 660.037546][T12850] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1847'. [ 660.835181][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 660.835292][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 660.852510][T12843] lo speed is unknown, defaulting to 1000 [ 660.863707][ T30] usb 5-1: USB disconnect, device number 79 [ 661.454536][ T30] usb 1-1: USB disconnect, device number 72 [ 661.641948][T12857] FAULT_INJECTION: forcing a failure. [ 661.641948][T12857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.641976][T12857] CPU: 1 UID: 0 PID: 12857 Comm: syz.4.1849 Not tainted syzkaller #0 PREEMPT(full) [ 661.641996][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 661.642006][T12857] Call Trace: [ 661.642012][T12857] [ 661.642020][T12857] dump_stack_lvl+0x100/0x190 [ 661.642050][T12857] should_fail_ex.cold+0x5/0xa [ 661.642074][T12857] _copy_from_iter+0x1f4/0x1690 [ 661.642101][T12857] ? __pfx__copy_from_iter+0x10/0x10 [ 661.642122][T12857] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 661.642149][T12857] ? lock_acquire+0x1d1/0x380 [ 661.642175][T12857] copy_page_from_iter+0x238/0x300 [ 661.642199][T12857] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 661.642231][T12857] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 661.642255][T12857] ? unwind_get_return_address+0x59/0xa0 [ 661.642281][T12857] ? arch_stack_walk+0xa6/0xf0 [ 661.642318][T12857] ? _kstrtoull+0x144/0x200 [ 661.642342][T12857] ? __pfx__kstrtoull+0x10/0x10 [ 661.642369][T12857] tun_get_user+0x1674/0x3cc0 [ 661.642400][T12857] ? __lock_acquire+0x5c0/0x1f40 [ 661.642426][T12857] ? __pfx_tun_get_user+0x10/0x10 [ 661.642450][T12857] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 661.642483][T12857] ? find_held_lock+0x2b/0x80 [ 661.642508][T12857] ? tun_get+0x191/0x370 [ 661.642527][T12857] ? tun_get+0x191/0x370 [ 661.642553][T12857] tun_chr_write_iter+0xdc/0x200 [ 661.642577][T12857] vfs_write+0x6af/0x1050 [ 661.642597][T12857] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 661.642621][T12857] ? __pfx_vfs_write+0x10/0x10 [ 661.642638][T12857] ? find_held_lock+0x2b/0x80 [ 661.642678][T12857] ksys_write+0x12a/0x250 [ 661.642698][T12857] ? __pfx_ksys_write+0x10/0x10 [ 661.642724][T12857] do_syscall_64+0x123/0x790 [ 661.642755][T12857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.642773][T12857] RIP: 0033:0x7fbe9655e98e [ 661.642788][T12857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 661.642805][T12857] RSP: 002b:00007fbe9740dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.642823][T12857] RAX: ffffffffffffffda RBX: 00007fbe9740e6c0 RCX: 00007fbe9655e98e [ 661.642836][T12857] RDX: 000000000000003a RSI: 0000200000000540 RDI: 00000000000000c8 [ 661.642847][T12857] RBP: 00007fbe9740e090 R08: 0000000000000000 R09: 0000000000000000 [ 661.642859][T12857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.642870][T12857] R13: 00007fbe96826038 R14: 00007fbe96825fa0 R15: 00007fffc6ce9c98 [ 661.642895][T12857] [ 661.955728][T12859] overlayfs: failed to resolve './bus': -2 [ 661.982982][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 662.192739][T12865] lo speed is unknown, defaulting to 1000 [ 662.289059][T12869] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [101] [ 662.289080][T12869] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 662.289094][T12869] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 662.289105][T12869] One or more global auth toks could not properly register; rc = [-22] [ 662.289136][T12869] Error validating options; rc = [-22] [ 662.761693][ C0] net_ratelimit: 135 callbacks suppressed [ 663.091952][T12868] netlink: 'syz.4.1853': attribute type 4 has an invalid length. [ 663.097344][ T31] audit: type=1400 audit(1790257664.709:754): avc: denied { create } for pid=12864 comm="syz.4.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 663.097375][ T31] audit: type=1400 audit(1790257664.709:755): avc: denied { write } for pid=12864 comm="syz.4.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 663.097406][ T31] audit: type=1400 audit(1790257664.709:756): avc: denied { bind } for pid=12864 comm="syz.4.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 663.128513][T12875] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 663.128528][T12875] netlink: 'syz.0.1856': attribute type 2 has an invalid length. [ 663.231968][T12865] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=ffff888038db7194 [ 663.232006][T12865] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=ffff888038db7184 [ 663.232050][T12865] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=ffff888038db7188 [ 663.232079][T12865] procname=tag mode=644 proc_handler=devinet_conf_proc data=ffff888038db718c [ 663.232108][T12865] procname=arp_filter mode=644 proc_handler=devinet_conf_proc data=ffff888038db7190 [ 663.232136][T12865] procname=arp_announce mode=644 proc_handler=devinet_conf_proc data=ffff888038db71a4 [ 663.232162][T12865] procname=arp_ignore mode=644 proc_handler=devinet_conf_proc data=ffff888038db71a8 [ 663.232188][T12865] procname=arp_accept mode=644 proc_handler=devinet_conf_proc data=ffff888038db71b0 [ 663.232216][T12865] procname=arp_notify mode=644 proc_handler=devinet_conf_proc data=ffff888038db71b4 [ 663.232244][T12865] procname=arp_evict_nocarrier mode=644 proc_handler=devinet_conf_proc data=ffff888038db71e0 [ 663.232273][T12865] procname=proxy_arp_pvlan mode=644 proc_handler=devinet_conf_proc data=ffff888038db71c0 [ 663.232301][T12865] procname=force_igmp_version mode=644 proc_handler=devinet_conf_proc data=ffff888038db71a0 [ 663.232331][T12865] procname=igmpv2_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff888038db71c8 [ 663.232361][T12865] procname=igmpv3_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=ffff888038db71cc [ 663.232391][T12865] procname=ignore_routes_with_linkdown mode=644 proc_handler=devinet_conf_proc data=ffff888038db71d0 [ 663.232421][T12865] procname=drop_gratuitous_arp mode=644 proc_handler=devinet_conf_proc data=ffff888038db71d8 [ 663.232451][T12865] procname=disable_xfrm mode=644 proc_handler=devinet_conf_proc data=ffff888038db7198 [ 663.232480][T12865] procname=disable_policy mode=644 proc_handler=devinet_conf_proc data=ffff888038db719c [ 663.232509][T12865] procname=promote_secondaries mode=644 proc_handler=devinet_conf_proc data=ffff888038db71ac [ 663.232538][T12865] procname=route_localnet mode=644 proc_handler=devinet_conf_proc data=ffff888038db71c4 [ 663.232567][T12865] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=devinet_conf_proc data=ffff888038db71d4 [ 663.232746][T12865] ip6_vti0: bond_netdev_event received NETDEV_REGISTER [ 663.232772][T12865] net ip6_vti0: siw: event 5 [ 663.232969][T12875] llcp: llcp_sock_bind: sk ffff888049e9f000 addr ffffc900033f7df8 family 39 [ 663.232992][T12865] Registering net sysctl (net ffff88807c8bcf80): net/ipv6/neigh/ip6_vti0 [ 663.233007][T12865] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888073c8d060 [ 663.233023][T12875] ================================================================== [ 663.233032][T12875] BUG: KASAN: slab-out-of-bounds in string+0x471/0x4d0 [ 663.233042][T12865] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888073c8d064 [ 663.233061][T12875] Read of size 1 at addr ffff888028d09801 by task syz.0.1856/12875 [ 663.233076][T12875] [ 663.233078][T12865] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888073c8d068 [ 663.233085][T12875] CPU: 1 UID: 0 PID: 12875 Comm: syz.0.1856 Not tainted syzkaller #0 PREEMPT(full) [ 663.233108][T12875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 663.233121][T12875] Call Trace: [ 663.233111][T12865] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888073c8d06c [ 663.233129][T12875] [ 663.233137][T12875] dump_stack_lvl+0x100/0x190 [ 663.233144][T12865] procname=retrans_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff888073c8d070 [ 663.233165][T12875] print_report+0x13d/0x4b0 [ 663.233174][T12865] procname=base_reachable_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=ffff888073c8d074 [ 663.233194][T12875] ? __virt_addr_valid+0x239/0x430 [ 663.233206][T12865] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff888073c8d078 [ 663.233217][T12875] ? string+0x471/0x4d0 [ 663.233240][T12875] kasan_report+0xdf/0x1c0 [ 663.233240][T12865] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=ffff888073c8d07c [ 663.233268][T12875] ? string+0x471/0x4d0 [ 663.233276][T12865] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=ffff888073c8d080 [ 663.233303][T12875] string+0x471/0x4d0 [ 663.233308][T12865] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888073c8d084 [ 663.233328][T12875] ? __pfx_string+0x10/0x10 [ 663.233352][T12875] ? __pfx_number+0x10/0x10 [ 663.233345][T12865] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=ffff888073c8d088 [ 663.233374][T12875] ? pointer+0x39c/0xe50 [ 663.233390][T12865] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888073c8d08c [ 663.233399][T12875] ? format_decode+0x1ad/0xdd0 [ 663.233423][T12875] vsnprintf+0x422/0x1300 [ 663.233427][T12865] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888073c8d090 [ 663.233452][T12875] ? __pfx_vsnprintf+0x10/0x10 [ 663.233462][T12865] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=ffff888073c8d094 [ 663.233480][T12875] ? desc_read+0x2e2/0x380 [ 663.233501][T12875] va_format+0x14e/0x4b0 [ 663.233525][T12875] ? __pfx_va_format+0x10/0x10 [ 663.233546][T12875] ? desc_read_finalized_seq+0x131/0x1d0 [ 663.233571][T12875] pointer+0x929/0xe50 [ 663.233594][T12875] ? ip6_addr_string_sa+0x2ff/0x830 [ 663.233618][T12875] ? __pfx_pointer+0x10/0x10 [ 663.233641][T12875] ? __pfx__prb_read_valid+0x10/0x10 [ 663.233662][T12875] vsnprintf+0x649/0x1300 [ 663.233690][T12875] ? __pfx_vsnprintf+0x10/0x10 [ 663.233717][T12875] ? vprintk_store+0x6e8/0xbe0 [ 663.233742][T12875] vprintk_store+0x3b3/0xbe0 [ 663.233768][T12875] ? __pfx_vprintk_store+0x10/0x10 [ 663.233790][T12875] ? bpf_ksym_find+0x128/0x1c0 [ 663.233819][T12875] ? is_bpf_text_address+0x94/0x1a0 [ 663.233844][T12875] ? unwind_get_return_address+0x59/0xa0 [ 663.233873][T12875] ? printk_percpu_data_ready+0x9/0x20 [ 663.233896][T12875] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 663.233918][T12875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 663.233941][T12875] vprintk_emit+0x139/0x6b0 [ 663.233965][T12875] ? __pfx_vprintk_emit+0x10/0x10 [ 663.233993][T12875] _printk+0xcf/0x110 [ 663.234010][T12875] ? __pfx__printk+0x10/0x10 [ 663.234028][T12875] ? nfc_llcp_get_sdp_ssap+0x30/0x4c0 [ 663.234058][T12875] __dynamic_pr_debug+0x201/0x270 [ 663.234084][T12875] ? __pfx___dynamic_pr_debug+0x10/0x10 [ 663.234110][T12875] ? nfc_llcp_get_sdp_ssap+0x30/0x4c0 [ 663.234138][T12875] ? __pfx___mutex_lock+0x10/0x10 [ 663.234168][T12875] ? rcu_is_watching+0x13/0xc0 [ 663.234191][T12875] ? trace_kmalloc+0xeb/0x110 [ 663.234215][T12875] ? __kasan_kmalloc+0xaa/0xb0 [ 663.234237][T12875] nfc_llcp_get_sdp_ssap+0x32d/0x4c0 [ 663.234266][T12875] llcp_sock_bind+0x3c0/0x720 [ 663.234291][T12875] ? tomoyo_socket_bind_permission+0x1ab/0x350 [ 663.234317][T12875] ? __pfx_llcp_sock_bind+0x10/0x10 [ 663.234343][T12875] __sys_bind+0x1a9/0x260 [ 663.234364][T12875] ? __pfx___sys_bind+0x10/0x10 [ 663.234389][T12875] __x64_sys_bind+0x72/0xb0 [ 663.234408][T12875] ? lockdep_hardirqs_on+0x7d/0x110 [ 663.234435][T12875] do_syscall_64+0x123/0x790 [ 663.234464][T12875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.234482][T12875] RIP: 0033:0x7f926819e159 [ 663.234498][T12875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.234516][T12875] RSP: 002b:00007f9269110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 663.234536][T12875] RAX: ffffffffffffffda RBX: 00007f9268425fa0 RCX: 00007f926819e159 [ 663.234549][T12875] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 000000000000000c [ 663.234561][T12875] RBP: 00007f926823506b R08: 0000000000000000 R09: 0000000000000000 [ 663.234572][T12875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.234584][T12875] R13: 00007f9268426038 R14: 00007f9268425fa0 R15: 00007ffcbaf0f5e8 [ 663.234603][T12875] [ 663.234611][T12875] [ 663.234616][T12875] Allocated by task 12875: [ 663.234626][T12875] kasan_save_stack+0x30/0x50 [ 663.234645][T12875] kasan_save_track+0x14/0x30 [ 663.234665][T12875] __kasan_kmalloc+0xaa/0xb0 [ 663.234684][T12875] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 663.234704][T12875] kmemdup_noprof+0x29/0x60 [ 663.234729][T12875] llcp_sock_bind+0x37c/0x720 [ 663.234744][T12875] __sys_bind+0x1a9/0x260 [ 663.234760][T12875] __x64_sys_bind+0x72/0xb0 [ 663.234776][T12875] do_syscall_64+0x123/0x790 [ 663.234799][T12875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.234816][T12875] [ 663.234821][T12875] The buggy address belongs to the object at ffff888028d09800 [ 663.234821][T12875] which belongs to the cache kmalloc-8 of size 8 [ 663.234835][T12875] The buggy address is located 0 bytes to the right of [ 663.234835][T12875] allocated 1-byte region [ffff888028d09800, ffff888028d09801) [ 663.234852][T12875] [ 663.234857][T12875] The buggy address belongs to the physical page: [ 663.234865][T12875] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28d09 [ 663.234880][T12875] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 663.234894][T12875] page_type: f5(slab) [ 663.234910][T12875] raw: 00fff00000000000 ffff88801c034500 dead000000000100 dead000000000122 [ 663.234927][T12875] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 663.234938][T12875] page dumped because: kasan: bad access detected [ 663.234946][T12875] page_owner tracks the page as allocated [ 663.234952][T12875] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 165, tgid 165 (kworker/u8:5), ts 4811547264 [ 663.234978][T12875] post_alloc_hook+0xfd/0x120 [ 663.235003][T12875] get_page_from_freelist+0x110d/0x35d0 [ 663.235019][T12875] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 663.235036][T12875] new_slab+0xa9/0x6e0 [ 663.235049][T12875] refill_objects+0xe3/0x410 [ 663.235063][T12875] __pcs_replace_empty_main+0x35e/0x650 [ 663.235085][T12875] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 663.235103][T12875] kvasprintf+0xbc/0x150 [ 663.235120][T12875] kvasprintf_const+0x66/0x1a0 [ 663.235136][T12875] kobject_set_name_vargs+0x5a/0x140 [ 663.235157][T12875] dev_set_name+0xc7/0x100 [ 663.235171][T12875] scsi_sysfs_device_initialize+0x3b6/0xa60 [ 663.235192][T12875] scsi_alloc_sdev+0xa4a/0xe90 [ 663.235212][T12875] scsi_probe_and_add_lun+0x555/0xd30 [ 663.235230][T12875] __scsi_scan_target+0x1a3/0x4b0 [ 663.235250][T12875] scsi_scan_channel+0x142/0x1e0 [ 663.235271][T12875] page last free pid 2 tgid 2 ts 4811277088 stack trace: [ 663.235301][T12875] __free_frozen_pages+0x79f/0x10f0 [ 663.235326][T12875] __kasan_populate_vmalloc+0x1ea/0x210 [ 663.235345][T12875] alloc_vmap_area+0x95d/0x2bb0 [ 663.235364][T12875] __get_vm_area_node+0x1ed/0x350 [ 663.235384][T12875] __vmalloc_node_range_noprof+0x268/0x1420 [ 663.235407][T12875] __vmalloc_node_noprof+0xad/0xf0 [ 663.235429][T12875] copy_process+0x803/0x8370 [ 663.235447][T12875] kernel_clone+0x176/0x9d0 [ 663.235465][T12875] kernel_thread+0xdb/0x120 [ 663.235482][T12875] kthreadd+0x498/0x7a0 [ 663.235506][T12875] ret_from_fork+0x730/0xd60 [ 663.235525][T12875] ret_from_fork_asm+0x1a/0x30 [ 663.235543][T12875] [ 663.235548][T12875] Memory state around the buggy address: [ 663.235557][T12875] ffff888028d09700: 05 fc fc fc 00 fc fc fc fa fc fc fc 05 fc fc fc [ 663.235569][T12875] ffff888028d09780: fa fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 663.235581][T12875] >ffff888028d09800: 01 fc fc fc 05 fc fc fc fa fc fc fc 06 fc fc fc [ 663.235591][T12875] ^ [ 663.235600][T12875] ffff888028d09880: fa fc fc fc 04 fc fc fc 06 fc fc fc 06 fc fc fc [ 663.235612][T12875] ffff888028d09900: 06 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc [ 663.235623][T12875] ================================================================== [ 663.235633][T12875] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 664.393186][T12875] CPU: 1 UID: 0 PID: 12875 Comm: syz.0.1856 Not tainted syzkaller #0 PREEMPT(full) [ 664.402537][T12875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 664.412571][T12875] Call Trace: [ 664.415834][T12875] [ 664.418746][T12875] dump_stack_lvl+0x100/0x190 [ 664.423416][T12875] vpanic+0x553/0x970 [ 664.427389][T12875] ? __pfx_vpanic+0x10/0x10 [ 664.431875][T12875] ? __pfx_vprintk_emit+0x10/0x10 [ 664.436898][T12875] ? string+0x471/0x4d0 [ 664.441040][T12875] panic+0xd1/0xe0 [ 664.444750][T12875] ? __pfx_panic+0x10/0x10 [ 664.449163][T12875] ? end_report.part.0+0x23/0x90 [ 664.454096][T12875] ? rcu_is_watching+0x13/0xc0 [ 664.458853][T12875] ? end_report.part.0+0x23/0x90 [ 664.463780][T12875] check_panic_on_warn.cold+0x19/0x34 [ 664.469135][T12875] end_report.part.0+0x3a/0x90 [ 664.473894][T12875] kasan_report.cold+0xe/0x18 [ 664.478571][T12875] ? string+0x471/0x4d0 [ 664.482712][T12875] string+0x471/0x4d0 [ 664.486681][T12875] ? __pfx_string+0x10/0x10 [ 664.491173][T12875] ? __pfx_number+0x10/0x10 [ 664.495688][T12875] ? pointer+0x39c/0xe50 [ 664.499919][T12875] ? format_decode+0x1ad/0xdd0 [ 664.504669][T12875] vsnprintf+0x422/0x1300 [ 664.508989][T12875] ? __pfx_vsnprintf+0x10/0x10 [ 664.513739][T12875] ? desc_read+0x2e2/0x380 [ 664.518154][T12875] va_format+0x14e/0x4b0 [ 664.522384][T12875] ? __pfx_va_format+0x10/0x10 [ 664.527142][T12875] ? desc_read_finalized_seq+0x131/0x1d0 [ 664.532762][T12875] pointer+0x929/0xe50 [ 664.536815][T12875] ? ip6_addr_string_sa+0x2ff/0x830 [ 664.541999][T12875] ? __pfx_pointer+0x10/0x10 [ 664.546577][T12875] ? __pfx__prb_read_valid+0x10/0x10 [ 664.551847][T12875] vsnprintf+0x649/0x1300 [ 664.556170][T12875] ? __pfx_vsnprintf+0x10/0x10 [ 664.560924][T12875] ? vprintk_store+0x6e8/0xbe0 [ 664.565676][T12875] vprintk_store+0x3b3/0xbe0 [ 664.570252][T12875] ? __pfx_vprintk_store+0x10/0x10 [ 664.575362][T12875] ? bpf_ksym_find+0x128/0x1c0 [ 664.580117][T12875] ? is_bpf_text_address+0x94/0x1a0 [ 664.585305][T12875] ? unwind_get_return_address+0x59/0xa0 [ 664.590938][T12875] ? printk_percpu_data_ready+0x9/0x20 [ 664.596403][T12875] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 664.602556][T12875] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 664.608449][T12875] vprintk_emit+0x139/0x6b0 [ 664.612943][T12875] ? __pfx_vprintk_emit+0x10/0x10 [ 664.617956][T12875] _printk+0xcf/0x110 [ 664.621920][T12875] ? __pfx__printk+0x10/0x10 [ 664.626493][T12875] ? nfc_llcp_get_sdp_ssap+0x30/0x4c0 [ 664.631856][T12875] __dynamic_pr_debug+0x201/0x270 [ 664.636869][T12875] ? __pfx___dynamic_pr_debug+0x10/0x10 [ 664.642405][T12875] ? nfc_llcp_get_sdp_ssap+0x30/0x4c0 [ 664.647771][T12875] ? __pfx___mutex_lock+0x10/0x10 [ 664.652789][T12875] ? rcu_is_watching+0x13/0xc0 [ 664.657541][T12875] ? trace_kmalloc+0xeb/0x110 [ 664.662203][T12875] ? __kasan_kmalloc+0xaa/0xb0 [ 664.666952][T12875] nfc_llcp_get_sdp_ssap+0x32d/0x4c0 [ 664.672228][T12875] llcp_sock_bind+0x3c0/0x720 [ 664.676885][T12875] ? tomoyo_socket_bind_permission+0x1ab/0x350 [ 664.683025][T12875] ? __pfx_llcp_sock_bind+0x10/0x10 [ 664.688209][T12875] __sys_bind+0x1a9/0x260 [ 664.692521][T12875] ? __pfx___sys_bind+0x10/0x10 [ 664.697362][T12875] __x64_sys_bind+0x72/0xb0 [ 664.701851][T12875] ? lockdep_hardirqs_on+0x7d/0x110 [ 664.707038][T12875] do_syscall_64+0x123/0x790 [ 664.711618][T12875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.717498][T12875] RIP: 0033:0x7f926819e159 [ 664.721897][T12875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.741485][T12875] RSP: 002b:00007f9269110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 664.749885][T12875] RAX: ffffffffffffffda RBX: 00007f9268425fa0 RCX: 00007f926819e159 [ 664.757840][T12875] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 000000000000000c [ 664.765794][T12875] RBP: 00007f926823506b R08: 0000000000000000 R09: 0000000000000000 [ 664.773746][T12875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.781697][T12875] R13: 00007f9268426038 R14: 00007f9268425fa0 R15: 00007ffcbaf0f5e8 [ 664.789656][T12875] [ 664.792859][T12875] Kernel Offset: disabled [ 664.797172][T12875] Rebooting in 86400 seconds..