last executing test programs: 7m34.458240608s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x7, 0x1}) 7m34.203574805s ago: executing program 3 (id=17): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002201c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 7m33.56000389s ago: executing program 3 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x6000000, {0x0, 0x84}}}, 0xe0}}, 0x0) 7m33.364181182s ago: executing program 3 (id=23): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005000000"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000300050005000000cc580a"], 0x80}}, 0x24000000) 7m33.188053743s ago: executing program 3 (id=27): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 7m31.929880292s ago: executing program 3 (id=31): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x1000}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x61}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x61, 0x0, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f88a8d34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da8080408833ba4d60cbac74d7"}}}}, 0x71) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r1, @ANYBLOB="f765b814db05d2"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x1000}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x61}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x61, 0x0, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f88a8d34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da8080408833ba4d60cbac74d7"}}}}, 0x71) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe2$9p(&(0x7f0000000200), 0x80000) (async) write$P9_RVERSION(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r1, @ANYBLOB="f765b814db05d2"], 0x15) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (async) 7m16.684922523s ago: executing program 32 (id=31): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x1000}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x61}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x61, 0x0, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f88a8d34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da8080408833ba4d60cbac74d7"}}}}, 0x71) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r1, @ANYBLOB="f765b814db05d2"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_1\x00', 0x1000}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x61}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x61, 0x0, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f88a8d34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da8080408833ba4d60cbac74d7"}}}}, 0x71) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe2$9p(&(0x7f0000000200), 0x80000) (async) write$P9_RVERSION(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r1, @ANYBLOB="f765b814db05d2"], 0x15) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) (async) 18.679915557s ago: executing program 5 (id=1690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102dd8a7a20670812980f240102030109023f0001f40820100904"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc0, 0xe4, 0xbb, 0x40, 0x46d, 0xa0e, 0x92db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xd5, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x296df579a05dc682, 0x3, 0x10, 0x1, 0x8}}]}}]}}]}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000040), 0x6, r5}, 0x38) 15.32115145s ago: executing program 5 (id=1702): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002480)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in=@rand_addr=0x64010101, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xac}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {}, {0x0, 0x0, 0x7000000}, {0x2}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}}, 0x0) 15.123863548s ago: executing program 5 (id=1703): socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000800)={r0, 0x7, 0xf, 0x981a}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="b43000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000500"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x21, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000010000000000000001000038e974c8ffffffffff18110000dd88c65bfe22862fbf54ae40ba23b9070dca494c51cc14255ddad7b09d38055bf06b7ffd5bf12797d6732739643c2dd6d860d21318ffacafb9e4bea6f9ff003f2c8cd4b61dd68e46dcd7bae1825bb898c1d3b19a325eb81360e87babc741235ffbacc3b51f4d3c8f962b007b97f2374c0907832274c2cff5de35af3d304e17", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000000932ff03080000009500000000000000852000000200000018120000", @ANYRES64=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000018000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, r2, r3], 0x0, 0x10, 0x3}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r12) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r13, &(0x7f0000000000), 0x12) close(r13) 13.415667836s ago: executing program 5 (id=1710): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000280)={0x40, 0x16}, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) 10.990183425s ago: executing program 5 (id=1726): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 10.836147974s ago: executing program 5 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001040)=@newtaction={0x48, 0x32, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) 5.575750367s ago: executing program 2 (id=1755): socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20040824) 5.396316895s ago: executing program 2 (id=1758): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04d63d20", @ANYBLOB='y'], 0x7) 5.219654709s ago: executing program 4 (id=1761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x1, &(0x7f0000000000)=0x304, 0x4) 5.191455871s ago: executing program 2 (id=1762): r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 4.561980213s ago: executing program 4 (id=1763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003400000004a0800064000000001080004"], 0x94}}, 0x0) 4.409343471s ago: executing program 4 (id=1765): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) 3.765368152s ago: executing program 2 (id=1767): socket$packet(0x11, 0x3, 0x300) openat$audio1(0xffffffffffffff9c, 0x0, 0x20002, 0x0) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_num_supported_adv_sets={{0xb}, {0x8, 0x4e}}}}, 0x8) socket(0x840000000002, 0x3, 0x100) 3.704032796s ago: executing program 4 (id=1769): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x1c3800) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000100)) 3.665301874s ago: executing program 4 (id=1770): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) r1 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.61822147s ago: executing program 2 (id=1772): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x4, 0xffe0}, {}, {0x1c, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xf9}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000b1}, 0x24000084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.302862756s ago: executing program 0 (id=1774): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000015000300686173683a69702c706f72742c6e6574000000000c000780080012400a"], 0x5c}}, 0x0) 2.280459283s ago: executing program 2 (id=1775): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) socket(0x5, 0x4, 0x9) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.815616804s ago: executing program 4 (id=1776): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00222200000049e9b31ce93ee9070c000000290495b9"], 0x0}, 0x0) 1.68201243s ago: executing program 0 (id=1777): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x0, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 1.548565898s ago: executing program 1 (id=1779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r1, 0x331, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8) 1.485033406s ago: executing program 1 (id=1780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x1000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 1.470136806s ago: executing program 0 (id=1781): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.397041161s ago: executing program 0 (id=1782): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 529.462363ms ago: executing program 1 (id=1783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 276.15066ms ago: executing program 0 (id=1784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x1, &(0x7f0000000000)=0x304, 0x4) 206.117059ms ago: executing program 1 (id=1785): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 171.691275ms ago: executing program 0 (id=1786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x5, 0x8, 0x2, 0x8, 0x14, 0x4, 0x7, 0x0, 0x6, 0xffffffffffffffff, 0x80, 0xffffffff, 0x7f, 0x8, 0x5f3a, 0x7ff], 0x4, 0x200002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) 113.332832ms ago: executing program 1 (id=1787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=1788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x24, &(0x7f00000003c0)={0x2, 0x1, 0xfe5, 0x9}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x83, 0xffffffff}) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x83) fchdir(r4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', r5, 0x0, 0x260) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) kernel console output (not intermixed with test programs): x64_sys_mount+0x28d/0x310 [ 349.279119][ T9895] __x64_sys_mount+0x28d/0x310 [ 349.279133][ T9895] ? __pfx___x64_sys_mount+0x10/0x10 [ 349.279150][ T9895] do_syscall_64+0xcd/0x4e0 [ 349.279168][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.279179][ T9895] RIP: 0033:0x7fa75518eec9 [ 349.279187][ T9895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.279202][ T9895] RSP: 002b:00007fa7560aa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 349.279218][ T9895] RAX: ffffffffffffffda RBX: 00007fa7553e5fa0 RCX: 00007fa75518eec9 [ 349.279229][ T9895] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000200000000240 [ 349.279240][ T9895] RBP: 00007fa7560aa090 R08: 0000000000000000 R09: 0000000000000000 [ 349.279250][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.279260][ T9895] R13: 00007fa7553e6038 R14: 00007fa7553e5fa0 R15: 00007ffe5c8304c8 [ 349.279285][ T9895] [ 350.290604][ T9895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 350.671496][ T5830] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 350.810186][ T5830] usb 3-1: device descriptor read/64, error -71 [ 351.057014][ T9915] netlink: 'syz.4.1108': attribute type 8 has an invalid length. [ 351.069252][ T9915] 9pnet: Unknown protocol version 9p20\++} [ 352.450009][ T5830] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 352.589990][ T5830] usb 3-1: device descriptor read/64, error -71 [ 353.450465][ T5830] usb usb3-port1: attempt power cycle [ 354.503063][ T9946] netlink: 'syz.2.1114': attribute type 8 has an invalid length. [ 354.514849][ T9946] 9pnet: Unknown protocol version 9p20\++} [ 356.165302][ T30] audit: type=1400 audit(2000000192.700:593): avc: denied { create } for pid=9950 comm="syz.2.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 356.306391][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1120'. [ 356.760377][ T5888] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 356.811214][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1122'. [ 356.930175][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 356.939515][ T5888] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.947932][ T5888] usb 1-1: config 0 has no interface number 0 [ 356.989239][ T5888] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 357.001499][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.020389][ T9977] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 357.021755][ T5888] usb 1-1: Product: syz [ 357.045597][ T5888] usb 1-1: Manufacturer: syz [ 357.048113][ T9977] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 357.071125][ T5888] usb 1-1: SerialNumber: syz [ 357.088490][ T5888] usb 1-1: config 0 descriptor?? [ 357.114932][ T5888] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 359.043044][ T5888] gspca_spca1528: reg_w err -110 [ 359.463887][ T9997] netlink: 'syz.5.1128': attribute type 8 has an invalid length. [ 359.473731][ T9997] 9pnet: Unknown protocol version 9p20\++} [ 359.610047][ T5888] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 359.710233][ T5888] usb 1-1: USB disconnect, device number 15 [ 360.842651][T10024] : Can't lookup blockdev [ 360.993385][T10028] qrtr: Invalid version 0 [ 362.192206][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'. [ 362.663362][T10052] fuse: Unknown parameter '0x0000000000000003' [ 362.777432][T10055] netlink: 'syz.4.1143': attribute type 8 has an invalid length. [ 362.787788][T10055] 9pnet: Unknown protocol version 9p20\++} [ 363.813916][T10057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.464272][T10095] FAULT_INJECTION: forcing a failure. [ 365.464272][T10095] name failslab, interval 1, probability 0, space 0, times 0 [ 365.477177][T10095] CPU: 0 UID: 0 PID: 10095 Comm: syz.0.1155 Not tainted syzkaller #0 PREEMPT(full) [ 365.477192][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.477199][T10095] Call Trace: [ 365.477203][T10095] [ 365.477207][T10095] dump_stack_lvl+0x16c/0x1f0 [ 365.477227][T10095] should_fail_ex+0x512/0x640 [ 365.477244][T10095] ? __kvmalloc_node_noprof+0x124/0x620 [ 365.477256][T10095] should_failslab+0xc2/0x120 [ 365.477269][T10095] __kvmalloc_node_noprof+0x137/0x620 [ 365.477279][T10095] ? __pfx___mutex_lock+0x10/0x10 [ 365.477296][T10095] ? traverse.part.0.constprop.0+0x392/0x640 [ 365.477306][T10095] ? __kernel_text_address+0xd/0x40 [ 365.477321][T10095] ? traverse.part.0.constprop.0+0x392/0x640 [ 365.477331][T10095] traverse.part.0.constprop.0+0x392/0x640 [ 365.477346][T10095] seq_read_iter+0x932/0x12c0 [ 365.477357][T10095] ? _kstrtoull+0x145/0x200 [ 365.477373][T10095] seq_read+0x3a3/0x570 [ 365.477383][T10095] ? __pfx_seq_read+0x10/0x10 [ 365.477393][T10095] ? handle_failed_stripe+0x74d/0x11d0 [ 365.477412][T10095] ? import_ubuf+0x1b6/0x220 [ 365.477429][T10095] ? avc_policy_seqno+0x9/0x20 [ 365.477443][T10095] ? __pfx_seq_read+0x10/0x10 [ 365.477453][T10095] proc_reg_read+0x240/0x330 [ 365.477470][T10095] ? __pfx_proc_reg_read+0x10/0x10 [ 365.477486][T10095] vfs_readv+0x5c1/0x8b0 [ 365.477499][T10095] ? __pfx_vfs_readv+0x10/0x10 [ 365.477509][T10095] ? find_held_lock+0x2b/0x80 [ 365.477530][T10095] ? __fget_files+0x20e/0x3c0 [ 365.477545][T10095] ? do_preadv+0x1a6/0x270 [ 365.477554][T10095] do_preadv+0x1a6/0x270 [ 365.477564][T10095] ? __pfx_do_preadv+0x10/0x10 [ 365.477577][T10095] do_syscall_64+0xcd/0x4e0 [ 365.477595][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.477605][T10095] RIP: 0033:0x7fa75518eec9 [ 365.477615][T10095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.477625][T10095] RSP: 002b:00007fa756089038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 365.477635][T10095] RAX: ffffffffffffffda RBX: 00007fa7553e6090 RCX: 00007fa75518eec9 [ 365.477642][T10095] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 365.477648][T10095] RBP: 00007fa756089090 R08: 0000000000000001 R09: 0000000000000000 [ 365.477654][T10095] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 365.477659][T10095] R13: 00007fa7553e6128 R14: 00007fa7553e6090 R15: 00007ffe5c8304c8 [ 365.477672][T10095] [ 365.520019][ T5955] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 365.675112][ T5955] usb 5-1: Invalid ep0 maxpacket: 32 [ 365.914778][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1157'. [ 365.950040][ T5955] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 366.402068][ T5955] usb 5-1: Invalid ep0 maxpacket: 32 [ 366.402280][ T5955] usb usb5-port1: attempt power cycle [ 367.106725][ T5955] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 367.138181][ T5955] usb 5-1: Invalid ep0 maxpacket: 32 [ 367.198493][T10122] geneve2: entered promiscuous mode [ 367.198514][T10122] geneve2: entered allmulticast mode [ 367.290114][ T5955] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 367.368983][ T5955] usb 5-1: Invalid ep0 maxpacket: 32 [ 367.398670][ T5955] usb usb5-port1: unable to enumerate USB device [ 369.856638][T10159] FAULT_INJECTION: forcing a failure. [ 369.856638][T10159] name failslab, interval 1, probability 0, space 0, times 0 [ 369.882243][T10159] CPU: 1 UID: 0 PID: 10159 Comm: syz.1.1173 Not tainted syzkaller #0 PREEMPT(full) [ 369.882266][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.882276][T10159] Call Trace: [ 369.882281][T10159] [ 369.882288][T10159] dump_stack_lvl+0x16c/0x1f0 [ 369.882314][T10159] should_fail_ex+0x512/0x640 [ 369.882330][T10159] ? fs_reclaim_acquire+0xae/0x150 [ 369.882346][T10159] ? tomoyo_encode2+0x100/0x3e0 [ 369.882362][T10159] should_failslab+0xc2/0x120 [ 369.882375][T10159] __kmalloc_noprof+0xd2/0x510 [ 369.882385][T10159] ? d_absolute_path+0x136/0x1a0 [ 369.882405][T10159] tomoyo_encode2+0x100/0x3e0 [ 369.882423][T10159] tomoyo_encode+0x29/0x50 [ 369.882432][T10159] tomoyo_realpath_from_path+0x18f/0x6e0 [ 369.882446][T10159] tomoyo_mount_acl+0x664/0x850 [ 369.882461][T10159] ? bpf_ksym_find+0x127/0x1c0 [ 369.882476][T10159] ? is_bpf_text_address+0x94/0x1a0 [ 369.882489][T10159] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 369.882503][T10159] ? __kernel_text_address+0xd/0x40 [ 369.882515][T10159] ? unwind_get_return_address+0x59/0xa0 [ 369.882529][T10159] ? arch_stack_walk+0xa6/0x100 [ 369.882555][T10159] ? tomoyo_domain+0xbb/0x150 [ 369.882566][T10159] ? tomoyo_profile+0x47/0x60 [ 369.882578][T10159] tomoyo_mount_permission+0x16d/0x420 [ 369.882593][T10159] ? tomoyo_mount_permission+0x14f/0x420 [ 369.882609][T10159] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 369.882634][T10159] security_sb_mount+0x9b/0x260 [ 369.882656][T10159] path_mount+0x15f/0x2060 [ 369.882672][T10159] ? __pfx_path_mount+0x10/0x10 [ 369.882686][T10159] ? kmem_cache_free+0x2d1/0x4d0 [ 369.882696][T10159] ? putname+0x154/0x1a0 [ 369.882712][T10159] ? putname+0x154/0x1a0 [ 369.882727][T10159] ? __x64_sys_mount+0x28d/0x310 [ 369.882739][T10159] __x64_sys_mount+0x28d/0x310 [ 369.882753][T10159] ? __pfx___x64_sys_mount+0x10/0x10 [ 369.882771][T10159] do_syscall_64+0xcd/0x4e0 [ 369.882789][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.882799][T10159] RIP: 0033:0x7fc60398eec9 [ 369.882808][T10159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.882819][T10159] RSP: 002b:00007fc604879038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 369.882829][T10159] RAX: ffffffffffffffda RBX: 00007fc603be5fa0 RCX: 00007fc60398eec9 [ 369.882835][T10159] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000200000000240 [ 369.882842][T10159] RBP: 00007fc604879090 R08: 0000000000000000 R09: 0000000000000000 [ 369.882848][T10159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.882854][T10159] R13: 00007fc603be6038 R14: 00007fc603be5fa0 R15: 00007ffe8c274a28 [ 369.882867][T10159] [ 370.198632][T10159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.783824][ T30] audit: type=1400 audit(2000000207.440:594): avc: denied { accept } for pid=10175 comm="syz.1.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 370.860404][ T30] audit: type=1400 audit(2000000207.450:595): avc: denied { read } for pid=10175 comm="syz.1.1178" name="nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 371.367324][ T30] audit: type=1400 audit(2000000207.450:596): avc: denied { open } for pid=10175 comm="syz.1.1178" path="/dev/nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 371.393156][ T30] audit: type=1400 audit(2000000207.920:597): avc: denied { connect } for pid=10187 comm="syz.5.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 371.720077][ T30] audit: type=1400 audit(2000000207.920:598): avc: denied { ioctl } for pid=10187 comm="syz.5.1185" path="socket:[29035]" dev="sockfs" ino=29035 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 371.749666][ T30] audit: type=1400 audit(2000000207.920:599): avc: denied { getopt } for pid=10187 comm="syz.5.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 375.151508][ T51] Bluetooth: hci5: command 0x041b tx timeout [ 375.177048][T10244] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1200'. [ 376.585318][ T5888] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 376.802607][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 376.814609][ T5888] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 376.824706][ T5888] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 376.836976][T10262] FAULT_INJECTION: forcing a failure. [ 376.836976][T10262] name failslab, interval 1, probability 0, space 0, times 0 [ 376.844956][ T5888] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 376.859711][ T5888] usb 5-1: config 129 has no interface number 0 [ 376.866149][ T5888] usb 5-1: config 129 has no interface number 1 [ 376.892783][ T5888] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 376.906368][ T5888] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 376.997398][T10262] CPU: 1 UID: 0 PID: 10262 Comm: syz.1.1206 Not tainted syzkaller #0 PREEMPT(full) [ 376.997421][T10262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.997430][T10262] Call Trace: [ 376.997436][T10262] [ 376.997442][T10262] dump_stack_lvl+0x16c/0x1f0 [ 376.997472][T10262] should_fail_ex+0x512/0x640 [ 376.997496][T10262] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 376.997523][T10262] should_failslab+0xc2/0x120 [ 376.997543][T10262] __kmalloc_cache_noprof+0x6a/0x3e0 [ 376.997568][T10262] ? alloc_fs_context+0x57/0x9c0 [ 376.997594][T10262] alloc_fs_context+0x57/0x9c0 [ 376.997619][T10262] path_mount+0xbdd/0x2060 [ 376.997645][T10262] ? __pfx_path_mount+0x10/0x10 [ 376.997668][T10262] ? kmem_cache_free+0x2d1/0x4d0 [ 376.997684][T10262] ? putname+0x154/0x1a0 [ 376.997709][T10262] ? putname+0x154/0x1a0 [ 376.997734][T10262] ? __x64_sys_mount+0x28d/0x310 [ 376.997753][T10262] __x64_sys_mount+0x28d/0x310 [ 376.997775][T10262] ? __pfx___x64_sys_mount+0x10/0x10 [ 376.997804][T10262] do_syscall_64+0xcd/0x4e0 [ 376.997830][T10262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.997847][T10262] RIP: 0033:0x7fc60398eec9 [ 376.997860][T10262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.997875][T10262] RSP: 002b:00007fc604879038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 376.997891][T10262] RAX: ffffffffffffffda RBX: 00007fc603be5fa0 RCX: 00007fc60398eec9 [ 376.997903][T10262] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000200000000240 [ 376.997912][T10262] RBP: 00007fc604879090 R08: 0000000000000000 R09: 0000000000000000 [ 376.997921][T10262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.997930][T10262] R13: 00007fc603be6038 R14: 00007fc603be5fa0 R15: 00007ffe8c274a28 [ 376.997953][T10262] [ 378.135622][ T5888] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 378.148794][ T5888] usb 5-1: config 129 interface 135 has no altsetting 0 [ 378.155921][ T5888] usb 5-1: config 129 interface 5 has no altsetting 0 [ 378.166781][ T5888] usb 5-1: string descriptor 0 read error: -22 [ 378.171655][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.173065][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 378.179189][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.199240][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.226273][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.258633][ T5888] usb 5-1: MIDIStreaming interface descriptor not found [ 378.523498][T10281] input: syz0 as /devices/virtual/input/input17 [ 379.480424][T10292] netlink: 'syz.1.1213': attribute type 10 has an invalid length. [ 380.149302][ T5888] usb 5-1: USB disconnect, device number 28 [ 380.411119][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 381.212791][T10321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.505987][T10333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.672295][T10340] : Can't lookup blockdev [ 382.707179][T10339] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 382.977087][ T30] audit: type=1400 audit(2000000219.660:600): avc: denied { mounton } for pid=10338 comm="syz.4.1229" path="/247/file0" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 383.015623][T10356] vlan0: entered promiscuous mode [ 383.480232][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 383.710269][ T5886] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 383.880188][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 383.889788][ T5886] usb 6-1: config 0 has an invalid interface number: 152 but max is 0 [ 383.909663][ T5886] usb 6-1: config 0 has no interface number 0 [ 383.928361][ T5886] usb 6-1: config 0 interface 152 has no altsetting 0 [ 384.941663][ T5886] usb 6-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=2d.d4 [ 385.522771][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.546417][ T5886] usb 6-1: Product: syz [ 385.554797][ T5886] usb 6-1: Manufacturer: syz [ 385.563532][ T5886] usb 6-1: SerialNumber: syz [ 385.578070][ T5886] usb 6-1: config 0 descriptor?? [ 385.619536][ T5886] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in warm state. [ 385.703089][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 385.806054][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 385.823328][ T5886] dvbdev: DVB: registering new adapter (DiBcom USB1.1 DVB-T reference design (MOD3000)) [ 385.839059][ T5886] usb 6-1: media controller created [ 386.053876][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.088695][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 386.179695][ T5886] dvb-usb: no frontend was attached by 'DiBcom USB1.1 DVB-T reference design (MOD3000)' [ 386.199425][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 386.667899][ T5886] dvb-usb: schedule remote query interval to 150 msecs. [ 386.678696][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 386.703133][ T5886] dvb-usb: DiBcom USB1.1 DVB-T reference design (MOD3000) successfully initialized and connected. [ 386.840327][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 386.981619][T10402] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 386.997814][ T5886] dvb-usb: error while querying for an remote control event. [ 387.180011][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 387.187585][ T5886] dvb-usb: error while querying for an remote control event. [ 387.350050][ T5886] dvb-usb: bulk message failed: -22 (1/0) [ 387.369208][ T5886] dvb-usb: error while querying for an remote control event. [ 388.296526][ T5886] usb 6-1: USB disconnect, device number 12 [ 388.471760][ T5886] dvb-usb: DiBcom USB1.1 DVB-T reference design (M successfully deinitialized and disconnected. [ 390.845940][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1261'. [ 392.790267][T10477] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1268'. [ 392.831242][T10480] fuse: blksize only supported for fuseblk [ 393.481263][T10487] vlan2: entered promiscuous mode [ 393.824262][ T30] audit: type=1400 audit(2000000230.510:601): avc: denied { write } for pid=10493 comm="syz.1.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 393.847581][ T30] audit: type=1400 audit(2000000230.530:602): avc: denied { write } for pid=10493 comm="syz.1.1274" name="nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 394.352884][T10511] lo speed is unknown, defaulting to 1000 [ 394.358972][T10511] lo speed is unknown, defaulting to 1000 [ 394.369994][T10511] lo speed is unknown, defaulting to 1000 [ 394.392457][T10511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 394.434338][T10511] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 394.585661][T10511] lo speed is unknown, defaulting to 1000 [ 394.600721][T10511] lo speed is unknown, defaulting to 1000 [ 394.614857][T10511] lo speed is unknown, defaulting to 1000 [ 394.629458][T10511] lo speed is unknown, defaulting to 1000 [ 394.643819][T10511] lo speed is unknown, defaulting to 1000 [ 394.659545][T10511] lo speed is unknown, defaulting to 1000 [ 394.739586][T10513] 9pnet: Unknown protocol version 9p20\++} [ 394.876486][ T30] audit: type=1400 audit(2000000231.020:603): avc: denied { append } for pid=10497 comm="syz.2.1277" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 395.102522][T10520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1279'. [ 395.348759][T10515] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 395.355994][T10515] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 395.382174][T10515] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 395.388672][T10515] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 395.411748][T10525] netlink: 'syz.5.1281': attribute type 10 has an invalid length. [ 395.449155][T10515] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 395.473934][T10529] syz_tun: entered allmulticast mode [ 395.489093][T10515] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 395.500210][T10515] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 395.547951][T10515] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 395.677430][T10515] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 395.686131][ T30] audit: type=1326 audit(2000000232.360:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 395.693253][T10515] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 395.716813][ T30] audit: type=1326 audit(2000000232.360:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 395.743050][T10515] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 395.752941][T10515] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 395.775328][ T30] audit: type=1326 audit(2000000232.360:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 395.780327][T10515] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 395.813932][T10515] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 395.821680][ T5886] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 395.829717][ T30] audit: type=1326 audit(2000000232.360:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 395.854663][ T30] audit: type=1326 audit(2000000232.360:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 395.889238][T10515] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 395.952828][T10515] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 396.127694][T10515] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 396.127704][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 396.220413][T10515] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 396.248364][T10515] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 396.263737][ T5886] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.279627][T10515] comedi comedi3: 8255: I/O port conflict (0x8000000,4) [ 396.292316][ T5886] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.299000][ T5886] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 396.308686][T10515] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 396.319065][ T30] audit: type=1326 audit(2000000232.360:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 396.355465][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.374560][ T5886] usb 5-1: config 0 descriptor?? [ 396.379765][ T30] audit: type=1326 audit(2000000232.360:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.5.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 396.754795][T10557] vlan2: entered promiscuous mode [ 396.938974][T10560] Process accounting resumed [ 397.015262][ T5886] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 397.191354][T10568] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1295'. [ 397.686054][T10574] syz_tun: entered allmulticast mode [ 397.826351][ T5886] usb 5-1: USB disconnect, device number 29 [ 397.950011][ T43] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 398.125074][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1297'. [ 398.561069][ T43] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 398.579323][ T43] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 398.588435][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.596652][ T43] usb 2-1: Product: syz [ 398.615698][ T43] usb 2-1: Manufacturer: syz [ 398.620463][ T43] usb 2-1: SerialNumber: syz [ 398.655215][ T43] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 398.696233][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'. [ 400.353017][ T43] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 400.458915][T10597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1303'. [ 400.515687][T10574] dvmrp8: entered allmulticast mode [ 400.570838][T10603] netlink: 'syz.5.1305': attribute type 10 has an invalid length. [ 400.699015][T10574] syz_tun: left allmulticast mode [ 400.770454][T10574] dvmrp8: left allmulticast mode [ 400.788252][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 400.788273][ T30] audit: type=1400 audit(2000000237.350:643): avc: denied { listen } for pid=10601 comm="syz.0.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 401.018641][T10611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1307'. [ 401.126398][ T5888] usb 2-1: USB disconnect, device number 9 [ 401.145016][ T30] audit: type=1400 audit(2000000237.830:644): avc: denied { bind } for pid=10615 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.188156][ T30] audit: type=1400 audit(2000000237.830:645): avc: denied { listen } for pid=10615 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.261820][ T30] audit: type=1400 audit(2000000237.830:646): avc: denied { write } for pid=10615 comm="syz.5.1308" path="socket:[30257]" dev="sockfs" ino=30257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.293962][ T30] audit: type=1400 audit(2000000237.850:647): avc: denied { accept } for pid=10615 comm="syz.5.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.790679][T10626] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.857041][T10626] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.585774][T10626] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.788030][T10645] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1316'. [ 403.804930][T10626] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.018074][T10645] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1316'. [ 404.095308][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.116001][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.134882][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.149526][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.177188][T10645] netlink: 'syz.2.1316': attribute type 5 has an invalid length. [ 404.190350][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 404.217936][T10645] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1316'. [ 404.338845][T10651] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1316'. [ 404.359672][ T10] lo speed is unknown, defaulting to 1000 [ 404.519846][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1321'. [ 404.611620][T10642] lo speed is unknown, defaulting to 1000 [ 405.420329][T10664] syz_tun: entered allmulticast mode [ 405.509086][T10660] syz_tun: left allmulticast mode [ 405.769569][T10653] lo speed is unknown, defaulting to 1000 [ 406.072323][ T5954] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 406.435576][T10688] ip6tnl1: entered promiscuous mode [ 406.540040][ T5954] usb 6-1: Using ep0 maxpacket: 16 [ 406.648039][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 406.728640][ T5954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.851697][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.852312][ T10] usb 2-1: config 16 has an invalid descriptor of length 129, skipping remainder of the config [ 406.923358][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.971123][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 406.993225][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.019183][ T5954] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 407.100146][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.116443][T10695] FAULT_INJECTION: forcing a failure. [ 407.116443][T10695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.166259][T10695] CPU: 0 UID: 0 PID: 10695 Comm: syz.4.1330 Not tainted syzkaller #0 PREEMPT(full) [ 407.166285][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.166295][T10695] Call Trace: [ 407.166300][T10695] [ 407.166304][T10695] dump_stack_lvl+0x16c/0x1f0 [ 407.166325][T10695] should_fail_ex+0x512/0x640 [ 407.166344][T10695] _copy_from_iter+0x29f/0x1720 [ 407.166363][T10695] ? __alloc_skb+0x200/0x380 [ 407.166378][T10695] ? __pfx__copy_from_iter+0x10/0x10 [ 407.166396][T10695] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 407.166417][T10695] netlink_sendmsg+0x829/0xdd0 [ 407.166429][T10695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.166450][T10695] ____sys_sendmsg+0xa95/0xc70 [ 407.166463][T10695] ? copy_msghdr_from_user+0x10a/0x160 [ 407.166478][T10695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.166496][T10695] ___sys_sendmsg+0x134/0x1d0 [ 407.166513][T10695] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.166545][T10695] __sys_sendmsg+0x16d/0x220 [ 407.166561][T10695] ? __pfx___sys_sendmsg+0x10/0x10 [ 407.166585][T10695] do_syscall_64+0xcd/0x4e0 [ 407.166603][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.166614][T10695] RIP: 0033:0x7f31f1d8eec9 [ 407.166623][T10695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.166633][T10695] RSP: 002b:00007f31f2bd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.166644][T10695] RAX: ffffffffffffffda RBX: 00007f31f1fe5fa0 RCX: 00007f31f1d8eec9 [ 407.166651][T10695] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000003 [ 407.166657][T10695] RBP: 00007f31f2bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 407.166663][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.166669][T10695] R13: 00007f31f1fe6038 R14: 00007f31f1fe5fa0 R15: 00007ffd2178ac38 [ 407.166682][T10695] [ 407.368857][ T5954] usb 6-1: Product: syz [ 407.379966][ T5954] usb 6-1: Manufacturer: syz [ 407.384565][ T5954] usb 6-1: SerialNumber: syz [ 407.410326][ T5954] usb 6-1: config 0 descriptor?? [ 407.414556][ T10] usbhid 2-1:16.0: couldn't find an input interrupt endpoint [ 407.502495][ T30] audit: type=1400 audit(2000000244.180:648): avc: denied { getopt } for pid=10696 comm="syz.0.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 407.529284][ T5954] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 407.535628][ T5954] gspca_stv06xx: st6422 sensor detected [ 407.612512][ T30] audit: type=1326 audit(2000000244.300:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60398eec9 code=0x7ffc0000 [ 407.665768][ T30] audit: type=1326 audit(2000000244.300:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60398eec9 code=0x7ffc0000 [ 407.711648][ T30] audit: type=1326 audit(2000000244.300:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fc60398eec9 code=0x7ffc0000 [ 407.838529][ T30] audit: type=1326 audit(2000000244.300:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60398eec9 code=0x7ffc0000 [ 407.865227][ T30] audit: type=1326 audit(2000000244.300:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc60398eacb code=0x7ffc0000 [ 408.464940][ T30] audit: type=1326 audit(2000000244.300:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60398eec9 code=0x7ffc0000 [ 408.491481][ T30] audit: type=1326 audit(2000000244.300:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60398eec9 code=0x7ffc0000 [ 408.890095][ T5830] usb 2-1: USB disconnect, device number 10 [ 408.973130][ T30] audit: type=1326 audit(2000000245.180:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc60398eec9 code=0x7ffc0000 [ 409.009228][ T30] audit: type=1326 audit(2000000245.180:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.1.1329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc60398eec9 code=0x7ffc0000 [ 409.182480][T10712] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 409.195102][T10712] block device autoloading is deprecated and will be removed. [ 411.058556][ T5954] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 411.068311][ T5954] usb 6-1: USB disconnect, device number 13 [ 411.735262][T10736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1343'. [ 413.107271][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 413.107286][ T30] audit: type=1326 audit(2000000249.790:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.5.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 413.292308][ T30] audit: type=1326 audit(2000000249.890:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.5.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 413.316109][T10760] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 413.390034][ T30] audit: type=1326 audit(2000000249.890:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.5.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 413.803188][ T30] audit: type=1326 audit(2000000249.890:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.5.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 413.961450][ T30] audit: type=1326 audit(2000000249.930:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.5.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 413.985639][ T30] audit: type=1400 audit(2000000250.000:692): avc: denied { execmem } for pid=10755 comm="syz.4.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 414.427009][ T30] audit: type=1326 audit(2000000250.020:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.5.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 414.451203][ T30] audit: type=1326 audit(2000000250.020:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.5.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489ad8eec9 code=0x7ffc0000 [ 414.491630][T10774] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1352'. [ 414.538773][ T30] audit: type=1400 audit(2000000250.070:695): avc: denied { read } for pid=10761 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 414.579799][ T30] audit: type=1400 audit(2000000250.090:696): avc: denied { create } for pid=10761 comm="syz.0.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 414.658438][T10777] : Can't lookup blockdev [ 414.829605][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1357'. [ 414.840471][T10780] fuse: Unknown parameter '0x0000000000000008' [ 415.643360][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 415.979245][ T10] usb 6-1: device descriptor read/64, error -71 [ 416.609090][T10808] 9pnet_virtio: no channels available for device 127.0.0.1 [ 416.995666][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 417.797360][ T10] usb 6-1: device descriptor read/64, error -71 [ 417.948511][ T10] usb usb6-port1: attempt power cycle [ 418.229553][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'. [ 418.247025][T10823] vlan2: entered promiscuous mode [ 418.253667][T10827] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1366'. [ 418.257876][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 418.257887][ T30] audit: type=1400 audit(2000000254.700:758): avc: denied { bind } for pid=10813 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 418.272915][T10823] bond0: entered promiscuous mode [ 418.639352][ T30] audit: type=1400 audit(2000000254.700:759): avc: denied { setopt } for pid=10813 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 418.700353][T10823] bond_slave_0: entered promiscuous mode [ 418.707477][T10823] bond_slave_1: entered promiscuous mode [ 418.716549][ T30] audit: type=1400 audit(2000000254.710:760): avc: denied { accept } for pid=10813 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 418.766467][ T30] audit: type=1400 audit(2000000254.720:761): avc: denied { write } for pid=10813 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 418.849861][ T30] audit: type=1400 audit(2000000254.720:762): avc: denied { read } for pid=10813 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 418.857589][T10836] binder: 10835:10836 unknown command 1885300084 [ 418.896130][T10836] binder: 10835:10836 ioctl c0306201 200000000080 returned -22 [ 418.927346][ T30] audit: type=1400 audit(2000000254.940:763): avc: denied { write } for pid=10826 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 419.001163][ T30] audit: type=1400 audit(2000000255.130:764): avc: denied { mount } for pid=10820 comm="syz.5.1365" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 419.414721][ T30] audit: type=1400 audit(2000000255.280:765): avc: denied { setopt } for pid=10820 comm="syz.5.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 419.545858][ T30] audit: type=1400 audit(2000000255.400:766): avc: denied { unmount } for pid=6280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 419.566202][ T30] audit: type=1400 audit(2000000255.540:767): avc: denied { read } for pid=10835 comm="syz.5.1367" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 421.800431][ T5897] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 421.826497][T10870] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1377'. [ 421.949975][T10870] FAULT_INJECTION: forcing a failure. [ 421.949975][T10870] name failslab, interval 1, probability 0, space 0, times 0 [ 422.146064][T10870] CPU: 1 UID: 0 PID: 10870 Comm: syz.5.1377 Not tainted syzkaller #0 PREEMPT(full) [ 422.146090][T10870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.146100][T10870] Call Trace: [ 422.146105][T10870] [ 422.146111][T10870] dump_stack_lvl+0x16c/0x1f0 [ 422.146141][T10870] should_fail_ex+0x512/0x640 [ 422.146166][T10870] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 422.146188][T10870] should_failslab+0xc2/0x120 [ 422.146209][T10870] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 422.146227][T10870] ? __alloc_skb+0x2b2/0x380 [ 422.146255][T10870] __alloc_skb+0x2b2/0x380 [ 422.146277][T10870] ? __pfx___alloc_skb+0x10/0x10 [ 422.146299][T10870] ? rcu_is_watching+0x12/0xc0 [ 422.146321][T10870] ? nl80211_parse_counter_offsets+0x252/0x2d0 [ 422.146354][T10870] nl80211_tx_mgmt+0x747/0xd60 [ 422.146376][T10870] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 422.146413][T10870] ? nl80211_pre_doit+0x1b0/0xb10 [ 422.146438][T10870] genl_family_rcv_msg_doit+0x206/0x2f0 [ 422.146459][T10870] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 422.146487][T10870] ? bpf_lsm_capable+0x9/0x10 [ 422.146511][T10870] ? security_capable+0x7e/0x260 [ 422.146534][T10870] ? ns_capable+0xd7/0x110 [ 422.146554][T10870] genl_rcv_msg+0x55c/0x800 [ 422.146575][T10870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.146593][T10870] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 422.146613][T10870] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 422.146630][T10870] ? __pfx_nl80211_post_doit+0x10/0x10 [ 422.146656][T10870] netlink_rcv_skb+0x158/0x420 [ 422.146672][T10870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 422.146691][T10870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.146716][T10870] ? netlink_deliver_tap+0x1ae/0xd30 [ 422.146745][T10870] genl_rcv+0x28/0x40 [ 422.146767][T10870] netlink_unicast+0x5a7/0x870 [ 422.146798][T10870] ? __pfx_netlink_unicast+0x10/0x10 [ 422.146825][T10870] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 422.146859][T10870] netlink_sendmsg+0x8d1/0xdd0 [ 422.146879][T10870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.146915][T10870] ____sys_sendmsg+0xa95/0xc70 [ 422.146936][T10870] ? copy_msghdr_from_user+0x10a/0x160 [ 422.146960][T10870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.146989][T10870] ___sys_sendmsg+0x134/0x1d0 [ 422.147014][T10870] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.147068][T10870] __sys_sendmsg+0x16d/0x220 [ 422.147094][T10870] ? __pfx___sys_sendmsg+0x10/0x10 [ 422.147120][T10870] do_syscall_64+0xcd/0x4e0 [ 422.147138][T10870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.147149][T10870] RIP: 0033:0x7f489ad8eec9 [ 422.147162][T10870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.147178][T10870] RSP: 002b:00007f489bc2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.147194][T10870] RAX: ffffffffffffffda RBX: 00007f489afe5fa0 RCX: 00007f489ad8eec9 [ 422.147205][T10870] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000003 [ 422.147214][T10870] RBP: 00007f489bc2f090 R08: 0000000000000000 R09: 0000000000000000 [ 422.147224][T10870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.147232][T10870] R13: 00007f489afe6038 R14: 00007f489afe5fa0 R15: 00007ffed1cc0d08 [ 422.147248][T10870] [ 422.552891][ T5897] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 422.583578][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.670497][ T5897] usb 3-1: Product: syz [ 422.772902][T10881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1380'. [ 422.792987][ T5897] usb 3-1: Manufacturer: syz [ 422.837091][ T5897] usb 3-1: SerialNumber: syz [ 423.839545][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 424.053353][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 424.061577][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.080732][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 424.111013][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 424.111027][ T30] audit: type=1400 audit(2000000260.800:783): avc: denied { mount } for pid=10897 comm="syz.5.1386" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 424.115710][ T10] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 424.133339][ T30] audit: type=1400 audit(2000000260.820:784): avc: denied { create } for pid=10897 comm="syz.5.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 424.281186][ T5897] rtl8150 3-1:1.0: couldn't reset the device [ 424.287518][ T5897] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 424.299010][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.336211][ T30] audit: type=1400 audit(2000000260.860:785): avc: denied { ioctl } for pid=10897 comm="syz.5.1386" path="socket:[32155]" dev="sockfs" ino=32155 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 424.380528][ T10] usb 5-1: config 0 descriptor?? [ 424.385793][ T5897] usb 3-1: USB disconnect, device number 34 [ 424.412491][ T10] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 424.436480][ T30] audit: type=1400 audit(2000000260.860:786): avc: denied { create } for pid=10892 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 424.546923][T10905] : Can't lookup blockdev [ 424.616931][ T10] usb 5-1: USB disconnect, device number 30 [ 424.647841][ T30] audit: type=1400 audit(2000000260.870:787): avc: denied { mount } for pid=10897 comm="syz.5.1386" name="/" dev="configfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 424.691340][ T30] audit: type=1400 audit(2000000260.870:788): avc: denied { ioctl } for pid=10862 comm="syz.2.1375" path="socket:[31700]" dev="sockfs" ino=31700 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 424.720397][ T30] audit: type=1400 audit(2000000260.890:789): avc: denied { mounton } for pid=10897 comm="syz.5.1386" path="/250/file0/file0" dev="configfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 424.747419][ T30] audit: type=1400 audit(2000000260.890:790): avc: denied { mount } for pid=10897 comm="syz.5.1386" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 424.775159][ T30] audit: type=1400 audit(2000000260.900:791): avc: denied { read } for pid=10897 comm="syz.5.1386" name="/" dev="configfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 424.829068][ T30] audit: type=1400 audit(2000000260.900:792): avc: denied { open } for pid=10897 comm="syz.5.1386" path="/250/file0/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.507048][T10925] input: syz1 as /devices/virtual/input/input20 [ 426.470180][ T5954] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 427.311565][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 427.351323][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1394'. [ 427.374215][T10939] netlink: 'syz.5.1394': attribute type 1 has an invalid length. [ 427.447081][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 427.481338][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 427.512284][ T5954] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 427.541600][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.833834][ T5954] usb 2-1: config 0 descriptor?? [ 427.851590][ T5954] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 428.376665][ T5954] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 428.431850][ T5954] usb 2-1: USB disconnect, device number 11 [ 429.198394][T10959] geneve2: entered promiscuous mode [ 429.203719][T10959] geneve2: entered allmulticast mode [ 429.290614][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 429.290659][ T30] audit: type=1400 audit(2000000265.930:827): avc: denied { read write } for pid=10969 comm="syz.4.1406" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 429.291215][ T5149] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 429.442415][ T30] audit: type=1400 audit(2000000265.930:828): avc: denied { open } for pid=10969 comm="syz.4.1406" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 429.459999][ T5954] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 429.723200][T10975] : Can't lookup blockdev [ 429.800185][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 430.031185][ T5954] usb 2-1: config 2 has an invalid interface number: 25 but max is 1 [ 430.083835][ T5954] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 430.370759][ T5954] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 430.748584][ T5954] usb 2-1: config 2 has no interface number 0 [ 430.775891][ T5954] usb 2-1: config 2 has no interface number 1 [ 430.782602][ T5954] usb 2-1: config 2 interface 25 altsetting 1 endpoint 0x8 has an invalid bInterval 85, changing to 7 [ 430.796962][ T5954] usb 2-1: config 2 interface 25 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 1023 [ 430.807851][ T5954] usb 2-1: config 2 interface 25 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 430.913574][ T5954] usb 2-1: config 2 interface 25 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 430.943092][ T5954] usb 2-1: config 2 interface 25 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 430.986765][ T5954] usb 2-1: config 2 interface 25 altsetting 1 endpoint 0x6 has invalid maxpacket 503, setting to 64 [ 431.014222][ T5954] usb 2-1: config 2 interface 25 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 431.045513][ T30] audit: type=1400 audit(2000000267.720:829): avc: denied { create } for pid=10988 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 431.069964][ T5954] usb 2-1: config 2 interface 25 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 431.118374][ T5954] usb 2-1: config 2 interface 212 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 431.143557][ T30] audit: type=1400 audit(2000000267.720:830): avc: denied { ioctl } for pid=10988 comm="syz.4.1411" path="socket:[32337]" dev="sockfs" ino=32337 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 431.173250][ T5954] usb 2-1: config 2 interface 25 has no altsetting 0 [ 431.214502][ T5954] usb 2-1: New USB device found, idVendor=0403, idProduct=fc60, bcdDevice=d5.b9 [ 431.223805][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.360049][ T5954] usb 2-1: Product: 隅᱋꛵鑉䀳瀸᭼雀í”夙â¦ì£¾â…ˆé³±ãŠ¡ãŸ¯ç•ºë£¤ížªí‰¼â¡˜îœ‹â½…욗뷄榲檎㤗áŒëµ¯é°´ä¬“í†ì¥ åšªæ¼¾å³¥çˆ¾Þ•äƒæ¾£ê†›ï£•ç§™à¹ë—€é…»â¨«áŸ¤ê‹†ë¡ˆá”‘⮎귤뽫ں짣颯äºá¡¥ç¾©î‡¾ã•¥ã¨µãŽ· [ 431.389968][ T30] audit: type=1400 audit(2000000267.880:831): avc: denied { sys_module } for pid=10988 comm="syz.4.1411" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 431.539998][ T5954] usb 2-1: Manufacturer: 瀖ڙá§ê¤²ì™€ìª„é‡ä…Œå ¤ï¾Ÿç¨–엵뫴뽒ï㪧ê€æ§ˆè«”硊狈滠íµêŸ»ä£“ퟨ律áŸç›¶Ò¬é…„äŠã‹œâ©²á³­Òƒî¸“쳚㕺뢷齿㸆呷䛓䳟㰬涗쨷ë¡àª‰äž‘괷뒽붰盓鼉å™ã†í€ªì¬…먋馈컛æ±ç”ëŽê¤°ç¾ç¥µæ™æ¤Šçµœã‚¢ï´„᫂턔哌ॿ듛ཫ와澤ï¢ì¸¨è‚¨ä˜²ï»Šè‘¼ë¿”╖傚軿鮲ꬰ拀ঔࠃ꽿繳 [ 431.580057][ T30] audit: type=1400 audit(2000000267.950:832): avc: denied { connect } for pid=10988 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 431.700745][ T30] audit: type=1400 audit(2000000267.960:833): avc: denied { ioctl } for pid=10988 comm="syz.4.1411" path="socket:[32943]" dev="sockfs" ino=32943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 431.769984][ T5954] usb 2-1: SerialNumber: 㴈㛕絜燲舞⎯넗谫䮄뵸鲣á–⒒続ë¤ï†â®ŒæºŸëˆ€é•Ÿá¿·ì…›á¬”᧴垆ࣨ㌨鑚탢暦ｘ藅æ†á§€ï²”喂î—í­ë–·î²¸ã…Šî ‘壔ꕖæ ê‹‡éœ—쇲⹷䅱ᡫ欺࡯ë¬â¬è§’헴봈棛럀é¥êŸºå„ì—ºë”쫇ꮫâ“è¤æ­†å­ê¢Žáµ¹æ¥€é¡–áŸá µâµç•²æ—¤âƒƒè®ªç»„ãšÑ¨åƒ¿âœáº»ìŽ—薵㞞衃튡 [ 431.814041][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1414'. [ 431.947127][ T30] audit: type=1400 audit(2000000267.960:834): avc: denied { write } for pid=10988 comm="syz.4.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 431.988985][ T5954] usb 2-1: can't set config #2, error -71 [ 432.004632][ T5954] usb 2-1: USB disconnect, device number 12 [ 432.178613][ T30] audit: type=1400 audit(2000000268.850:835): avc: denied { bind } for pid=11004 comm="syz.5.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.682651][ T30] audit: type=1400 audit(2000000268.860:836): avc: denied { name_bind } for pid=11004 comm="syz.5.1418" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 432.738274][T11009] netlink: 'syz.5.1418': attribute type 10 has an invalid length. [ 432.760443][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1416'. [ 432.794498][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1418'. [ 432.796438][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 432.815469][T11009] batman_adv: batadv0: Adding interface: team0 [ 432.835783][T11009] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.985996][T11009] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 433.729824][T11027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1422'. [ 434.618301][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 434.618316][ T30] audit: type=1400 audit(2000000270.830:841): avc: denied { read } for pid=11020 comm="syz.2.1421" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 434.818337][ T30] audit: type=1400 audit(2000000270.830:842): avc: denied { open } for pid=11020 comm="syz.2.1421" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 435.027779][ T30] audit: type=1400 audit(2000000270.830:843): avc: denied { read write } for pid=11020 comm="syz.2.1421" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 435.269416][ T30] audit: type=1400 audit(2000000270.830:844): avc: denied { open } for pid=11020 comm="syz.2.1421" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 435.297204][ T30] audit: type=1400 audit(2000000270.830:845): avc: denied { ioctl } for pid=11020 comm="syz.2.1421" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 435.549698][T11052] binder: 11048:11052 ioctl c0306201 2000000001c0 returned -22 [ 435.614594][ T30] audit: type=1400 audit(2000000271.540:846): avc: denied { setattr } for pid=11040 comm="syz.5.1426" name="iommu" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 436.775294][T11068] netlink: 'syz.0.1432': attribute type 8 has an invalid length. [ 436.785214][T11068] 9pnet: Unknown protocol version 9p20\++} [ 437.372884][ T30] audit: type=1400 audit(2000000273.440:847): avc: denied { ioctl } for pid=11061 comm="syz.0.1432" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33050 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 437.398891][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.850045][ T30] audit: type=1400 audit(2000000273.450:848): avc: denied { ioctl } for pid=11061 comm="syz.0.1432" path="socket:[33052]" dev="sockfs" ino=33052 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 438.400107][ T30] audit: type=1400 audit(2000000275.070:849): avc: denied { setopt } for pid=11088 comm="syz.0.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 438.755089][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1444'. [ 439.433071][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 439.512849][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.519160][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.833425][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 439.842477][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.844423][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'. [ 439.863516][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.246265][ T10] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 440.273521][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.305361][ T10] usb 3-1: config 0 descriptor?? [ 440.325905][ T30] audit: type=1400 audit(2000000277.000:850): avc: denied { ioctl } for pid=11120 comm="syz.1.1451" path="socket:[33128]" dev="sockfs" ino=33128 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 440.351257][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.108853][ T10] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x2 [ 441.372790][ T10] hid-multitouch 0003:1FD2:6007.0004: item fetching failed at offset 4/5 [ 441.412621][ T10] hid-multitouch 0003:1FD2:6007.0004: probe with driver hid-multitouch failed with error -22 [ 441.439626][ T10] usb 3-1: USB disconnect, device number 35 [ 441.560273][ T30] audit: type=1400 audit(2000000278.240:851): avc: denied { name_bind } for pid=11120 comm="syz.1.1451" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 441.614388][ T30] audit: type=1400 audit(2000000278.240:852): avc: denied { node_bind } for pid=11120 comm="syz.1.1451" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 441.949408][ T30] audit: type=1400 audit(2000000278.630:853): avc: denied { mount } for pid=11140 comm="syz.4.1457" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 442.165206][ T30] audit: type=1400 audit(2000000278.630:854): avc: denied { read write } for pid=11140 comm="syz.4.1457" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 442.236389][ T30] audit: type=1400 audit(2000000278.630:855): avc: denied { open } for pid=11140 comm="syz.4.1457" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 442.484944][T11162] netlink: 'syz.5.1463': attribute type 8 has an invalid length. [ 442.495121][T11162] 9pnet: Unknown protocol version 9p20\++} [ 444.510706][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 444.955343][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1469'. [ 445.155564][ T30] audit: type=1400 audit(2000000281.828:856): avc: denied { bind } for pid=11177 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 445.225408][ T30] audit: type=1400 audit(2000000281.828:857): avc: denied { node_bind } for pid=11177 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 445.304396][ T30] audit: type=1400 audit(2000000281.988:858): avc: denied { read } for pid=11190 comm="syz.2.1470" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 445.347285][ T30] audit: type=1400 audit(2000000281.988:859): avc: denied { open } for pid=11190 comm="syz.2.1470" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 445.440132][ T5886] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 445.470056][ T30] audit: type=1400 audit(2000000282.028:860): avc: denied { create } for pid=11175 comm="syz.0.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 445.633826][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 445.643526][ T5886] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 445.652495][ T5886] usb 6-1: config 0 has no interface number 0 [ 445.658574][ T5886] usb 6-1: config 0 interface 184 has no altsetting 0 [ 445.702652][ T5886] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 445.712728][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.732157][ T5886] usb 6-1: Product: syz [ 445.738953][ T5886] usb 6-1: Manufacturer: syz [ 445.765972][T11203] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1473'. [ 445.775004][ T5886] usb 6-1: SerialNumber: syz [ 445.813398][ T5886] usb 6-1: config 0 descriptor?? [ 445.827200][ T5886] smsc75xx v1.0.0 [ 445.973774][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1474'. [ 446.344205][T11212] vlan0: entered promiscuous mode [ 446.622351][T11220] netlink: 'syz.0.1478': attribute type 8 has an invalid length. [ 446.632283][T11220] 9pnet: Unknown protocol version 9p20\++} [ 447.418339][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 447.494613][ T5886] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 447.505537][ T5886] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 447.520681][ T5886] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 447.531677][ T5886] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 447.549979][ T5886] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 447.560743][ T5886] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 447.573908][ T5886] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 447.598976][ T30] audit: type=1400 audit(2000000284.278:861): avc: denied { append } for pid=11224 comm="syz.4.1481" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 447.598989][ T5886] usb 6-1: USB disconnect, device number 17 [ 447.694988][ T30] audit: type=1400 audit(2000000284.378:862): avc: denied { read write } for pid=11230 comm="syz.0.1483" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 447.751334][ T30] audit: type=1400 audit(2000000284.378:863): avc: denied { open } for pid=11230 comm="syz.0.1483" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 447.776974][T11234] loop2: detected capacity change from 0 to 7 [ 447.800109][T11234] Dev loop2: unable to read RDB block 7 [ 447.806231][T11234] loop2: unable to read partition table [ 447.812170][T11234] loop2: partition table beyond EOD, truncated [ 447.820732][T11234] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 448.863689][ T30] audit: type=1400 audit(2000000285.548:864): avc: denied { ioctl } for pid=11242 comm="syz.5.1487" path="socket:[33971]" dev="sockfs" ino=33971 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 449.223900][ T30] audit: type=1400 audit(2000000285.898:865): avc: denied { setopt } for pid=11249 comm="syz.0.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 449.570026][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 449.801191][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 449.853249][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 450.043037][ T43] usb 1-1: config 8 has an invalid interface number: 103 but max is 1 [ 450.053228][ T43] usb 1-1: config 8 has an invalid interface number: 179 but max is 1 [ 450.061680][ T43] usb 1-1: config 8 has no interface number 0 [ 450.068015][ T43] usb 1-1: config 8 has no interface number 1 [ 450.074474][ T43] usb 1-1: config 8 interface 103 has no altsetting 0 [ 450.081636][ T43] usb 1-1: config 8 interface 179 has no altsetting 0 [ 450.090812][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=31.12 [ 450.100330][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.123256][ T43] usb 1-1: Product: syz [ 450.127507][ T43] usb 1-1: Manufacturer: syz [ 450.176667][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1496'. [ 450.302317][ T43] usb 1-1: SerialNumber: syz [ 450.309123][ T30] audit: type=1400 audit(2000000286.988:866): avc: denied { read } for pid=11264 comm="syz.4.1497" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 450.520300][ T30] audit: type=1400 audit(2000000286.988:867): avc: denied { open } for pid=11264 comm="syz.4.1497" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 450.582093][ T30] audit: type=1400 audit(2000000287.018:868): avc: denied { ioctl } for pid=11264 comm="syz.4.1497" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 450.744375][T11273] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1499'. [ 451.361189][ T30] audit: type=1400 audit(2000000287.358:869): avc: denied { read write } for pid=11249 comm="syz.0.1490" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 451.417526][ T30] audit: type=1400 audit(2000000287.358:870): avc: denied { open } for pid=11249 comm="syz.0.1490" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 451.440973][ T30] audit: type=1400 audit(2000000287.448:871): avc: denied { getattr } for pid=11270 comm="syz.1.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 451.461146][ T30] audit: type=1400 audit(2000000287.688:872): avc: denied { create } for pid=11270 comm="syz.1.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 451.511016][T11280] FAULT_INJECTION: forcing a failure. [ 451.511016][T11280] name failslab, interval 1, probability 0, space 0, times 0 [ 451.566391][T11280] CPU: 0 UID: 0 PID: 11280 Comm: syz.4.1501 Not tainted syzkaller #0 PREEMPT(full) [ 451.566414][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.566423][T11280] Call Trace: [ 451.566429][T11280] [ 451.566435][T11280] dump_stack_lvl+0x16c/0x1f0 [ 451.566466][T11280] should_fail_ex+0x512/0x640 [ 451.566496][T11280] should_failslab+0xc2/0x120 [ 451.566517][T11280] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 451.566537][T11280] ? skb_clone+0x190/0x3f0 [ 451.566565][T11280] skb_clone+0x190/0x3f0 [ 451.566596][T11280] netlink_deliver_tap+0xabd/0xd30 [ 451.566629][T11280] netlink_unicast+0x64c/0x870 [ 451.566659][T11280] ? __pfx_netlink_unicast+0x10/0x10 [ 451.566685][T11280] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 451.566718][T11280] netlink_sendmsg+0x8d1/0xdd0 [ 451.566739][T11280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.566775][T11280] ____sys_sendmsg+0xa95/0xc70 [ 451.566796][T11280] ? copy_msghdr_from_user+0x10a/0x160 [ 451.566821][T11280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.566851][T11280] ___sys_sendmsg+0x134/0x1d0 [ 451.566879][T11280] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.566946][T11280] __sys_sendmsg+0x16d/0x220 [ 451.566971][T11280] ? __pfx___sys_sendmsg+0x10/0x10 [ 451.567018][T11280] do_syscall_64+0xcd/0x4e0 [ 451.567047][T11280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.567064][T11280] RIP: 0033:0x7f31f1d8eec9 [ 451.567079][T11280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.567095][T11280] RSP: 002b:00007f31f2bd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.567110][T11280] RAX: ffffffffffffffda RBX: 00007f31f1fe5fa0 RCX: 00007f31f1d8eec9 [ 451.567121][T11280] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 451.567131][T11280] RBP: 00007f31f2bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 451.567141][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.567151][T11280] R13: 00007f31f1fe6038 R14: 00007f31f1fe5fa0 R15: 00007ffd2178ac38 [ 451.567174][T11280] [ 452.148518][ T30] audit: type=1400 audit(2000000288.828:873): avc: denied { getopt } for pid=11287 comm="syz.4.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 452.170171][ T5830] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 452.291241][T11291] kAFS: No cell specified [ 452.403032][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 452.498429][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 452.727939][ T5830] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 452.751265][ T5830] usb 2-1: config 0 has no interface number 0 [ 452.759132][ T5830] usb 2-1: config 0 interface 237 has no altsetting 0 [ 452.768686][ T5830] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 452.778411][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.787713][ T5830] usb 2-1: Product: syz [ 452.792910][ T5830] usb 2-1: Manufacturer: syz [ 452.797607][ T5830] usb 2-1: SerialNumber: syz [ 452.803680][ T5830] usb 2-1: config 0 descriptor?? [ 452.814068][ T5830] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 found [ 452.973019][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1508'. [ 453.043709][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.073532][ T30] audit: type=1400 audit(2000000289.658:874): avc: denied { create } for pid=11296 comm="syz.5.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 453.103535][ T5830] snd_usb_podhd 2-1:0.237: cannot get proper max packet size [ 453.123114][ T5830] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 now disconnected [ 453.126860][T11302] FAULT_INJECTION: forcing a failure. [ 453.126860][T11302] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 453.132205][ T5830] snd_usb_podhd 2-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 453.189834][T11302] CPU: 0 UID: 0 PID: 11302 Comm: syz.4.1509 Not tainted syzkaller #0 PREEMPT(full) [ 453.189858][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.189868][T11302] Call Trace: [ 453.189874][T11302] [ 453.189881][T11302] dump_stack_lvl+0x16c/0x1f0 [ 453.189911][T11302] should_fail_ex+0x512/0x640 [ 453.189938][T11302] should_fail_alloc_page+0xe7/0x130 [ 453.189957][T11302] prepare_alloc_pages+0x3c2/0x610 [ 453.189975][T11302] ? find_held_lock+0x2b/0x80 [ 453.189995][T11302] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 453.190010][T11302] ? kasan_save_stack+0x33/0x60 [ 453.190023][T11302] ? __kasan_kmalloc+0xaa/0xb0 [ 453.190035][T11302] ? __kmalloc_noprof+0x223/0x510 [ 453.190048][T11302] ? sock_kmalloc+0x111/0x170 [ 453.190062][T11302] ? af_alg_sendmsg+0x12ca/0x29b0 [ 453.190081][T11302] ? ____sys_sendmsg+0xa95/0xc70 [ 453.190096][T11302] ? ___sys_sendmsg+0x134/0x1d0 [ 453.190114][T11302] ? __sys_sendmmsg+0x200/0x420 [ 453.190132][T11302] ? __x64_sys_sendmmsg+0x9c/0x100 [ 453.190150][T11302] ? do_syscall_64+0xcd/0x4e0 [ 453.190169][T11302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.190189][T11302] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 453.190218][T11302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.190236][T11302] ? policy_nodemask+0xea/0x4e0 [ 453.190254][T11302] alloc_pages_mpol+0x1fb/0x550 [ 453.190271][T11302] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 453.190285][T11302] ? __kmalloc_noprof+0x242/0x510 [ 453.190316][T11302] alloc_pages_noprof+0x131/0x390 [ 453.190332][T11302] af_alg_sendmsg+0x8a2/0x29b0 [ 453.190359][T11302] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 453.190381][T11302] ? __import_iovec+0x1dd/0x650 [ 453.190402][T11302] ____sys_sendmsg+0xa95/0xc70 [ 453.190419][T11302] ? copy_msghdr_from_user+0x10a/0x160 [ 453.190439][T11302] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.190459][T11302] ? __pfx__kstrtoull+0x10/0x10 [ 453.190483][T11302] ___sys_sendmsg+0x134/0x1d0 [ 453.190507][T11302] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.190543][T11302] ? find_held_lock+0x2b/0x80 [ 453.190578][T11302] __sys_sendmmsg+0x200/0x420 [ 453.190606][T11302] ? __pfx___sys_sendmmsg+0x10/0x10 [ 453.190643][T11302] ? __might_fault+0xe3/0x190 [ 453.190657][T11302] ? __might_fault+0xe3/0x190 [ 453.190669][T11302] ? __might_fault+0x13b/0x190 [ 453.190688][T11302] __x64_sys_sendmmsg+0x9c/0x100 [ 453.190710][T11302] do_syscall_64+0xcd/0x4e0 [ 453.190733][T11302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.190747][T11302] RIP: 0033:0x7f31f1d8eec9 [ 453.190759][T11302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.190774][T11302] RSP: 002b:00007f31f2bd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 453.190788][T11302] RAX: ffffffffffffffda RBX: 00007f31f1fe5fa0 RCX: 00007f31f1d8eec9 [ 453.190798][T11302] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 453.190806][T11302] RBP: 00007f31f2bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 453.190815][T11302] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 453.190824][T11302] R13: 00007f31f1fe6038 R14: 00007f31f1fe5fa0 R15: 00007ffd2178ac38 [ 453.190844][T11302] [ 453.844122][ T43] msi2500 1-1:8.103: Registered as swradio24 [ 453.881279][T11296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.891209][ T43] msi2500 1-1:8.103: SDR API is still slightly experimental and functionality changes may follow [ 454.112413][ T5830] usb 2-1: USB disconnect, device number 13 [ 454.138094][ T43] videodev: could not get a free minor [ 454.638088][ T43] msi2500 1-1:8.179: Failed to register as video device (-23) [ 454.657976][ T43] msi2500 1-1:8.179: probe with driver msi2500 failed with error -23 [ 454.685356][ T43] usb 1-1: USB disconnect, device number 16 [ 454.931824][T11327] 9pnet_fd: Insufficient options for proto=fd [ 455.039993][ T43] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 455.167364][T11332] netlink: 'syz.2.1517': attribute type 8 has an invalid length. [ 455.177740][T11332] 9pnet: Unknown protocol version 9p20\++} [ 455.296013][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 455.388404][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.465068][T11335] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1520'. [ 455.478814][ T43] usb 1-1: Product: syz [ 455.508282][ T43] usb 1-1: Manufacturer: syz [ 455.915989][ T43] usb 1-1: SerialNumber: syz [ 455.944165][ T43] usb 1-1: config 0 descriptor?? [ 456.228292][ T43] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 456.258485][T11349] vlan3: entered promiscuous mode [ 456.746882][T11357] kAFS: No cell specified [ 456.845783][ T30] audit: type=1400 audit(2000000293.528:875): avc: denied { ioctl } for pid=11359 comm="syz.4.1528" path="/dev/net/tun" dev="devtmpfs" ino=707 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_var_run_t:s0" [ 457.673402][ T30] audit: type=1400 audit(2000000294.358:876): avc: denied { connect } for pid=11359 comm="syz.4.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 457.726623][ T30] audit: type=1400 audit(2000000294.378:877): avc: denied { bind } for pid=11359 comm="syz.4.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 458.388001][T11373] fuse: Unknown parameter '0x0000000000000008' [ 458.551687][ T43] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 459.315201][ T30] audit: type=1400 audit(2000000295.998:878): avc: denied { write } for pid=11369 comm="syz.5.1530" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 459.385893][ T43] usb 1-1: USB disconnect, device number 17 [ 459.447093][ T30] audit: type=1400 audit(2000000296.128:879): avc: denied { ioctl } for pid=11382 comm="syz.2.1533" path="socket:[33713]" dev="sockfs" ino=33713 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 459.705233][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 460.293862][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1535'. [ 461.262153][T11405] netlink: 'syz.2.1537': attribute type 8 has an invalid length. [ 461.275779][T11405] 9pnet: Unknown protocol version 9p20\++} [ 461.998656][ T30] audit: type=1400 audit(2000000298.678:880): avc: denied { create } for pid=11421 comm="syz.4.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 462.260020][ T43] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 462.518968][ T30] audit: type=1400 audit(2000000299.198:881): avc: denied { bind } for pid=11421 comm="syz.4.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 462.634368][ T43] usb 6-1: device descriptor read/64, error -71 [ 462.653589][ T30] audit: type=1400 audit(2000000299.338:882): avc: denied { setopt } for pid=11412 comm="syz.1.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 462.655227][T11429] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 462.956481][T11429] UDF-fs: Scanning with blocksize 512 failed [ 462.965376][T11429] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 462.973052][T11429] UDF-fs: Scanning with blocksize 1024 failed [ 462.979470][T11429] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 462.987066][T11429] UDF-fs: Scanning with blocksize 2048 failed [ 462.994136][T11429] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 463.090382][ T30] audit: type=1400 audit(2000000299.338:883): avc: denied { mounton } for pid=11412 comm="syz.1.1543" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 463.119937][ T30] audit: type=1400 audit(2000000299.458:884): avc: denied { write } for pid=11421 comm="syz.4.1545" path="socket:[33767]" dev="sockfs" ino=33767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 463.130142][T11429] UDF-fs: Scanning with blocksize 4096 failed [ 463.694051][ T43] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 463.694131][ T30] audit: type=1400 audit(2000000299.688:885): avc: denied { read } for pid=11412 comm="syz.1.1543" path="socket:[34359]" dev="sockfs" ino=34359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 463.863587][ T43] usb 6-1: device descriptor read/64, error -71 [ 463.980289][ T43] usb usb6-port1: attempt power cycle [ 464.062488][T11439] kAFS: No cell specified [ 464.225574][T11443] fuse: Unknown parameter '0x0000000000000008' [ 464.275220][ T5955] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 464.350060][ T43] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 464.661283][ T5897] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 464.671254][ T43] usb 6-1: device descriptor read/8, error -71 [ 464.731257][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.744869][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 464.757910][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 464.769964][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 464.779728][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 464.800511][ T5955] usb 2-1: New USB device found, idVendor=1784, idProduct=0001, bcdDevice=8c.04 [ 464.809628][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.854908][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 464.861495][ T5955] usb 2-1: config 0 descriptor?? [ 464.876720][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 464.890698][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 464.906287][ T5897] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 464.917729][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.919973][ T43] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 464.942849][ T5897] usb 5-1: Product: syz [ 464.947805][ T5897] usb 5-1: Manufacturer: syz [ 464.954640][ T5897] usb 5-1: SerialNumber: syz [ 464.964168][ T5897] usb 5-1: config 0 descriptor?? [ 465.031404][T11441] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 465.112726][T11441] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 465.305469][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1552'. [ 465.446018][ T43] usb 6-1: device not accepting address 21, error -71 [ 465.447048][ T43] usb usb6-port1: unable to enumerate USB device [ 465.621209][ T5897] usb 5-1: ucan: probing device on interface #0 [ 466.077592][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 466.198240][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1558'. [ 466.238249][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 466.273080][ T5955] usb 2-1: can't set config #0, error -71 [ 466.284202][ T5955] usb 2-1: USB disconnect, device number 14 [ 466.363202][ T5897] ucan 5-1:0.0: probe with driver ucan failed with error -22 [ 466.418043][T11476] geneve2: entered promiscuous mode [ 466.425128][T11476] geneve2: entered allmulticast mode [ 466.437132][T11479] netlink: 'syz.5.1561': attribute type 10 has an invalid length. [ 466.517065][ T5886] usb 5-1: USB disconnect, device number 31 [ 466.557030][T11483] vlan0: entered promiscuous mode [ 467.326862][T11495] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 467.338211][T11495] cramfs: wrong magic [ 467.348162][ T30] audit: type=1400 audit(2000000304.008:886): avc: denied { append } for pid=11491 comm="syz.2.1567" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 467.402710][ T30] audit: type=1400 audit(2000000304.008:887): avc: denied { ioctl } for pid=11491 comm="syz.2.1567" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 468.315215][T11495] lo speed is unknown, defaulting to 1000 [ 468.419812][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1572'. [ 468.531519][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1570'. [ 470.416299][T11543] afs: Unknown parameter 'dy' [ 470.642408][ T30] audit: type=1400 audit(2000000307.328:888): avc: denied { read write } for pid=11549 comm="syz.4.1584" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 470.679217][ T30] audit: type=1400 audit(2000000307.328:889): avc: denied { open } for pid=11549 comm="syz.4.1584" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 470.739397][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1586'. [ 471.193337][ T5886] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 471.302180][T11557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1585'. [ 471.602500][T11560] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 472.157329][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 474.438905][ T5886] usb 1-1: not running at top speed; connect to a high speed hub [ 474.651604][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 474.660297][ T5886] usb 1-1: can't read configurations, error -71 [ 474.766808][ T30] audit: type=1400 audit(2000000311.438:890): avc: denied { append } for pid=11573 comm="syz.5.1591" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 474.990659][ T5897] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 475.263707][ T5897] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 475.281812][ T5897] usb 2-1: config 0 has no interface number 0 [ 475.329202][ T5897] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 475.347625][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.480001][ T5897] usb 2-1: Product: syz [ 475.489707][ T5897] usb 2-1: Manufacturer: syz [ 475.503100][ T5897] usb 2-1: SerialNumber: syz [ 475.986880][ T5897] usb 2-1: config 0 descriptor?? [ 476.145967][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 476.231150][T11601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.243390][ T5897] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 476.262513][T11601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.283816][ T5897] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 476.307943][ T5897] asix 2-1:0.251: probe with driver asix failed with error -5 [ 476.396214][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1599'. [ 477.202786][ T30] audit: type=1400 audit(2000000313.868:891): avc: denied { setopt } for pid=11607 comm="syz.2.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 477.450087][ T30] audit: type=1400 audit(2000000314.128:892): avc: denied { append } for pid=11615 comm="syz.5.1602" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 477.489901][ T30] audit: type=1400 audit(2000000314.158:893): avc: denied { map } for pid=11615 comm="syz.5.1602" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 477.570932][ T43] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 477.685067][ T30] audit: type=1400 audit(2000000314.158:894): avc: denied { execute } for pid=11615 comm="syz.5.1602" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 477.741651][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 477.757440][ T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 477.778092][ T43] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 477.789074][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.804787][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 477.813982][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.838984][ T43] usbtmc 5-1:16.0: bulk endpoints not found [ 477.998284][ T43] usb 2-1: USB disconnect, device number 15 [ 479.025216][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1606'. [ 479.147225][T11636] binder: Bad value for 'max' [ 479.158006][ T30] audit: type=1400 audit(2000000315.828:895): avc: denied { mounton } for pid=11635 comm="syz.1.1607" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.531778][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1610'. [ 479.778021][ T30] audit: type=1400 audit(2000000316.458:896): avc: denied { getopt } for pid=11647 comm="syz.2.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 479.924833][T11658] geneve2: entered promiscuous mode [ 479.930234][T11658] geneve2: entered allmulticast mode [ 479.942420][ T43] usb 5-1: USB disconnect, device number 32 [ 479.945289][T11657] tmpfs: Unknown parameter 'usrquotaƳVLhaìqÈ»*“–š“ [ 479.945289][T11657] ½„Ëê\_aàZò—ñ™“| ÿMîíw»¤ÊeÖ¦¥õ`é3&ZÔD)ÐPt' [ 480.006271][T11660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1612'. [ 481.175427][ T912] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 481.570444][ T912] usb 6-1: device descriptor read/64, error -71 [ 481.830169][ T912] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 482.080052][ T912] usb 6-1: device descriptor read/64, error -71 [ 482.209029][ T912] usb usb6-port1: attempt power cycle [ 482.458741][ T30] audit: type=1400 audit(2000000319.138:897): avc: denied { connect } for pid=11695 comm="syz.4.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 482.560765][ T912] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 482.591320][ T912] usb 6-1: device descriptor read/8, error -71 [ 482.661688][ T30] audit: type=1400 audit(2000000319.338:898): avc: denied { mount } for pid=11703 comm="syz.4.1627" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 482.730324][ T30] audit: type=1400 audit(2000000319.398:899): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 482.873654][ T912] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 482.911766][ T912] usb 6-1: device descriptor read/8, error -71 [ 483.021726][ T912] usb usb6-port1: unable to enumerate USB device [ 483.374517][ T30] audit: type=1400 audit(2000000320.058:900): avc: denied { create } for pid=11722 comm="syz.0.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 483.500528][T11726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11726 comm=syz.2.1632 [ 483.614269][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1635'. [ 484.019186][T11741] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1636'. [ 484.819520][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1640'. [ 485.382974][T11761] netlink: 'syz.0.1642': attribute type 8 has an invalid length. [ 485.394376][T11761] 9pnet: Unknown protocol version 9p20\++} [ 486.400387][ T30] audit: type=1400 audit(2000000323.078:901): avc: denied { open } for pid=11763 comm="syz.1.1645" path="/dev/ttyq6" dev="devtmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 486.423955][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.841237][ T30] audit: type=1400 audit(2000000323.288:903): avc: denied { watch watch_reads } for pid=11763 comm="syz.1.1645" path="pipe:[36140]" dev="pipefs" ino=36140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 486.870662][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.990276][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1647'. [ 487.068953][T11776] bond1: entered promiscuous mode [ 487.081402][ T30] audit: type=1400 audit(2000000323.288:902): avc: denied { watch watch_reads } for pid=11763 comm="syz.1.1645" path="pipe:[36140]" dev="pipefs" ino=36140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 487.082259][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 487.105375][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.129188][T11776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.138418][T11781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11781 comm=syz.0.1647 [ 487.235069][ T30] audit: type=1400 audit(2000000323.768:904): avc: denied { ioctl } for pid=11774 comm="syz.0.1647" path="/dev/ttyq5" dev="devtmpfs" ino=379 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 487.260097][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.535897][T11777] geneve2: entered promiscuous mode [ 487.541244][T11777] geneve2: entered allmulticast mode [ 487.779750][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1650'. [ 488.698548][T11795] lo speed is unknown, defaulting to 1000 [ 488.710084][ T5897] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 489.162939][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 489.180141][ T5897] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 489.189792][ T5897] usb 5-1: config 0 has no interface number 0 [ 489.204772][ T5897] usb 5-1: config 0 interface 209 has no altsetting 0 [ 489.275227][ T5897] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 489.660622][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.710573][ T5897] usb 5-1: Product: syz [ 489.735059][ T5897] usb 5-1: Manufacturer: syz [ 489.774032][ T5897] usb 5-1: SerialNumber: syz [ 489.864259][ T5897] usb 5-1: config 0 descriptor?? [ 490.497535][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 491.045724][T11839] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1666'. [ 492.242810][ T30] audit: type=1400 audit(2000000328.928:905): avc: denied { bind } for pid=11850 comm="syz.5.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 492.901300][ T30] audit: type=1400 audit(2000000329.588:906): avc: denied { create } for pid=11856 comm="syz.5.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 493.144240][ T30] audit: type=1400 audit(2000000329.608:907): avc: denied { read } for pid=11856 comm="syz.5.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 493.643208][ T30] audit: type=1400 audit(2000000330.318:908): avc: denied { unmount } for pid=6280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 494.237328][ T30] audit: type=1400 audit(2000000330.918:909): avc: denied { mount } for pid=11872 comm="syz.1.1674" name="/" dev="autofs" ino=37232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 494.318407][ T30] audit: type=1400 audit(2000000330.998:910): avc: denied { setopt } for pid=11872 comm="syz.1.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 494.345412][ T5897] usb 5-1: USB disconnect, device number 33 [ 494.579301][T11870] tty tty31: ldisc open failed (-12), clearing slot 30 [ 494.731295][ T30] audit: type=1400 audit(2000000331.418:911): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 495.266245][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'. [ 495.329597][T11878] geneve2: entered promiscuous mode [ 495.336343][T11878] geneve2: entered allmulticast mode [ 496.022574][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 496.048527][T11897] dummy0: entered promiscuous mode [ 496.083296][T11897] dummy0: left promiscuous mode [ 496.120992][ T30] audit: type=1400 audit(2000000332.798:912): avc: denied { create } for pid=11898 comm="syz.1.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 496.233381][ T30] audit: type=1400 audit(2000000332.798:913): avc: denied { write } for pid=11898 comm="syz.1.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 496.280330][ T30] audit: type=1400 audit(2000000332.898:914): avc: denied { lock } for pid=11898 comm="syz.1.1681" path="socket:[37294]" dev="sockfs" ino=37294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 497.358756][ T30] audit: type=1400 audit(2000000334.018:915): avc: denied { mount } for pid=11914 comm="syz.5.1683" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 498.476852][ T30] audit: type=1400 audit(2000000335.158:916): avc: denied { write } for pid=11927 comm="syz.5.1687" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 499.251889][ T30] audit: type=1400 audit(2000000335.158:917): avc: denied { open } for pid=11927 comm="syz.5.1687" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 499.276319][ T30] audit: type=1400 audit(2000000335.158:918): avc: denied { ioctl } for pid=11927 comm="syz.5.1687" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 499.499286][T11933] vlan3: entered promiscuous mode [ 499.720005][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 499.858047][ T30] audit: type=1400 audit(2000000336.538:919): avc: denied { create } for pid=11934 comm="syz.4.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 499.890013][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 499.911254][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 499.966819][T11948] trusted_key: syz.2.1692 sent an empty control message without MSG_MORE. [ 499.977817][ T30] audit: type=1400 audit(2000000336.538:920): avc: denied { bind } for pid=11934 comm="syz.4.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 500.183212][ T10] usb 6-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config [ 500.213228][ T10] usb 6-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 500.321355][T11952] netlink: 'syz.2.1693': attribute type 8 has an invalid length. [ 500.334876][T11952] 9pnet: Unknown protocol version 9p20\++} [ 500.962532][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.119911][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.179955][ T10] usb 6-1: Product: syz [ 501.184134][ T10] usb 6-1: Manufacturer: syz [ 501.219892][ T30] audit: type=1400 audit(2000000337.878:921): avc: denied { name_bind 0x1000000 } for pid=11953 comm="syz.0.1694" path="socket:[37355]" dev="sockfs" ino=37355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 501.251329][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 501.260259][ T10] usb 6-1: SerialNumber: syz [ 501.289799][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'. [ 501.311027][T11958] netlink: 'syz.1.1696': attribute type 18 has an invalid length. [ 501.318891][ T30] audit: type=1400 audit(2000000337.898:922): avc: denied { getopt } for pid=11953 comm="syz.0.1694" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 501.368894][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 501.378364][T10927] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.395928][ T30] audit: type=1400 audit(2000000337.898:923): avc: denied { read } for pid=11953 comm="syz.0.1694" path="socket:[37354]" dev="sockfs" ino=37354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 501.438723][T10927] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.455519][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'. [ 501.510739][T11958] netlink: 'syz.1.1696': attribute type 18 has an invalid length. [ 501.549933][ T5886] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 501.570865][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.579506][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.632267][T10927] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.690813][T10927] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.730007][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 501.787714][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.865025][T11953] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 501.874669][ T5886] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 501.908603][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.969293][ T5886] usb 2-1: config 0 descriptor?? [ 501.980483][T11965] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1697'. [ 502.167104][T11968] geneve2: entered promiscuous mode [ 502.193890][T11971] FAULT_INJECTION: forcing a failure. [ 502.193890][T11971] name failslab, interval 1, probability 0, space 0, times 0 [ 502.206764][T11968] geneve2: entered allmulticast mode [ 502.214609][T11971] CPU: 1 UID: 0 PID: 11971 Comm: syz.2.1700 Not tainted syzkaller #0 PREEMPT(full) [ 502.214631][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.214641][T11971] Call Trace: [ 502.214647][T11971] [ 502.214653][T11971] dump_stack_lvl+0x16c/0x1f0 [ 502.214684][T11971] should_fail_ex+0x512/0x640 [ 502.214708][T11971] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 502.214729][T11971] should_failslab+0xc2/0x120 [ 502.214750][T11971] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 502.214768][T11971] ? sk_prot_alloc+0x60/0x2a0 [ 502.214789][T11971] sk_prot_alloc+0x60/0x2a0 [ 502.214808][T11971] sk_alloc+0x36/0xc20 [ 502.214833][T11971] unix_create1+0xa6/0x700 [ 502.214859][T11971] unix_stream_connect+0x282/0x1a20 [ 502.214876][T11971] ? find_held_lock+0x2b/0x80 [ 502.214900][T11971] ? __local_bh_enable_ip+0xa4/0x120 [ 502.214922][T11971] ? lockdep_hardirqs_on+0x7c/0x110 [ 502.214951][T11971] ? __pfx_unix_stream_connect+0x10/0x10 [ 502.214969][T11971] ? selinux_socket_connect+0x6b/0x80 [ 502.214994][T11971] ? __pfx_unix_stream_connect+0x10/0x10 [ 502.215010][T11971] __sys_connect_file+0x141/0x1a0 [ 502.215035][T11971] __sys_connect+0x13b/0x160 [ 502.215056][T11971] ? __pfx___sys_connect+0x10/0x10 [ 502.215087][T11971] ? __pfx_ksys_write+0x10/0x10 [ 502.215110][T11971] __x64_sys_connect+0x72/0xb0 [ 502.215129][T11971] ? lockdep_hardirqs_on+0x7c/0x110 [ 502.215153][T11971] do_syscall_64+0xcd/0x4e0 [ 502.215182][T11971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.215199][T11971] RIP: 0033:0x7f6bb218eec9 [ 502.215212][T11971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.215229][T11971] RSP: 002b:00007f6bb30e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 502.215245][T11971] RAX: ffffffffffffffda RBX: 00007f6bb23e5fa0 RCX: 00007f6bb218eec9 [ 502.215255][T11971] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000003 [ 502.215265][T11971] RBP: 00007f6bb30e7090 R08: 0000000000000000 R09: 0000000000000000 [ 502.215274][T11971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.215284][T11971] R13: 00007f6bb23e6038 R14: 00007f6bb23e5fa0 R15: 00007ffd03169398 [ 502.215306][T11971] [ 502.446695][ T5149] Bluetooth: hci2: unexpected event for opcode 0x0002 [ 502.455287][T11975] FAULT_INJECTION: forcing a failure. [ 502.455287][T11975] name failslab, interval 1, probability 0, space 0, times 0 [ 502.475834][ T5886] mcp2200 0003:04D8:00DF.0005: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 502.490649][T11975] CPU: 1 UID: 0 PID: 11975 Comm: syz.4.1699 Not tainted syzkaller #0 PREEMPT(full) [ 502.490672][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 502.490682][T11975] Call Trace: [ 502.490688][T11975] [ 502.490695][T11975] dump_stack_lvl+0x16c/0x1f0 [ 502.490726][T11975] should_fail_ex+0x512/0x640 [ 502.490751][T11975] ? fs_reclaim_acquire+0xae/0x150 [ 502.490777][T11975] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 502.490793][T11975] should_failslab+0xc2/0x120 [ 502.490813][T11975] __kmalloc_noprof+0xd2/0x510 [ 502.490837][T11975] tomoyo_realpath_from_path+0xc2/0x6e0 [ 502.490856][T11975] ? tomoyo_profile+0x47/0x60 [ 502.490877][T11975] tomoyo_path_number_perm+0x245/0x580 [ 502.490899][T11975] ? tomoyo_path_number_perm+0x237/0x580 [ 502.490925][T11975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 502.490948][T11975] ? find_held_lock+0x2b/0x80 [ 502.490998][T11975] ? find_held_lock+0x2b/0x80 [ 502.491018][T11975] ? hook_file_ioctl_common+0x145/0x410 [ 502.491043][T11975] ? __fget_files+0x20e/0x3c0 [ 502.491067][T11975] security_file_ioctl+0x9b/0x240 [ 502.491094][T11975] __x64_sys_ioctl+0xb7/0x210 [ 502.491123][T11975] do_syscall_64+0xcd/0x4e0 [ 502.491152][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.491170][T11975] RIP: 0033:0x7f31f1d8eec9 [ 502.491184][T11975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.491199][T11975] RSP: 002b:00007f31f2b92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.491215][T11975] RAX: ffffffffffffffda RBX: 00007f31f1fe6180 RCX: 00007f31f1d8eec9 [ 502.491226][T11975] RDX: 0000200000000040 RSI: 000000004020ae76 RDI: 0000000000000006 [ 502.491236][T11975] RBP: 00007f31f2b92090 R08: 0000000000000000 R09: 0000000000000000 [ 502.491246][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.491257][T11975] R13: 00007f31f1fe6218 R14: 00007f31f1fe6180 R15: 00007ffd2178ac38 [ 502.491281][T11975] [ 502.491287][T11975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 502.772872][ T10] comedi comedi5: Wrong number of endpoints [ 502.820224][ T10] dt9812 6-1:244.0: driver 'dt9812' failed to auto-configure device. [ 502.879839][ T10] usb 6-1: USB disconnect, device number 26 [ 504.260169][ T912] usb 2-1: USB disconnect, device number 16 [ 504.400043][ T5897] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 504.540969][T12004] Bluetooth: hci0: unexpected cc 0x0809 length: 68 > 4 [ 504.547835][T12004] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 504.572954][ T5897] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 504.587125][ T5897] usb 1-1: config 0 has no interface number 0 [ 504.595578][ T5897] usb 1-1: New USB device found, idVendor=1f4d, idProduct=3000, bcdDevice=41.68 [ 504.614988][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.624344][ T5897] usb 1-1: Product: syz [ 504.628553][ T5897] usb 1-1: Manufacturer: syz [ 504.637154][ T5897] usb 1-1: SerialNumber: syz [ 504.644769][ T5897] usb 1-1: config 0 descriptor?? [ 504.656289][ T5897] dvb-usb: found a 'SU3000HD DVB-S USB2.0' in warm state. [ 504.664040][ T5897] dw2102: su3000_power_ctrl: 1, initialized 0 [ 504.673709][ T5897] dvb-usb: bulk message failed: -22 (2/0) [ 504.681500][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.776469][ T5897] dvbdev: DVB: registering new adapter (SU3000HD DVB-S USB2.0) [ 504.784136][ T5897] usb 1-1: media controller created [ 504.789314][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 504.798789][ T5897] dw2102: i2c transfer failed. [ 504.803615][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 504.809313][ T5897] dw2102: i2c transfer failed. [ 504.814139][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 504.819832][ T5897] dw2102: i2c transfer failed. [ 504.824615][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 504.831506][ T5897] dw2102: i2c transfer failed. [ 504.836316][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 504.842066][ T5897] dw2102: i2c transfer failed. [ 504.846817][ T5897] dvb-usb: bulk message failed: -22 (6/0) [ 504.852672][ T5897] dw2102: i2c transfer failed. [ 504.857448][ T5897] dvb-usb: MAC address: 02:02:02:02:02:02 [ 504.877445][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.896945][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 504.902696][ T5897] dw2102: command 0x0e transfer failed. [ 504.908230][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 504.914088][ T5897] dw2102: command 0x0e transfer failed. [ 505.010086][ T912] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 505.079261][T12001] lo speed is unknown, defaulting to 1000 [ 505.169943][ T912] usb 6-1: Using ep0 maxpacket: 8 [ 505.177843][ T912] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 505.186962][ T912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.194958][ T912] usb 6-1: Product: syz [ 505.199100][ T912] usb 6-1: Manufacturer: syz [ 505.203770][ T912] usb 6-1: SerialNumber: syz [ 505.209592][ T912] usb 6-1: config 0 descriptor?? [ 505.239972][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 505.245738][ T5897] dw2102: command 0x0e transfer failed. [ 505.251389][ T5897] dvb-usb: bulk message failed: -22 (3/0) [ 505.257100][ T5897] dw2102: command 0x0e transfer failed. [ 505.262681][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 505.268390][ T5897] dw2102: command 0x51 transfer failed. [ 505.299163][ T5897] DVB: Unable to find symbol ds3000_attach() [ 505.308581][ T5897] dvb-usb: no frontend was attached by 'SU3000HD DVB-S USB2.0' [ 505.400096][ T5897] rc_core: IR keymap rc-su3000 not found [ 505.405966][ T5897] Registered IR keymap rc-empty [ 505.413850][ T5897] rc rc0: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 505.427111][ T5897] input: SU3000HD DVB-S USB2.0 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input21 [ 505.429012][ T912] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 505.449303][ T5897] dvb-usb: schedule remote query interval to 150 msecs. [ 505.457334][ T5897] dw2102: su3000_power_ctrl: 0, initialized 1 [ 505.463568][ T5897] dvb-usb: SU3000HD DVB-S USB2.0 successfully initialized and connected. [ 505.475159][ T5897] usb 1-1: USB disconnect, device number 20 [ 505.578722][ T30] audit: type=1400 audit(2000000342.258:924): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 505.676874][ T5897] dvb-usb: SU3000HD DVB-S USB2.0 successfully deinitialized and disconnected. [ 506.240795][ T30] audit: type=1800 audit(2000000342.448:925): pid=12031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1714" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 506.280234][T12032] input: syz0 as /devices/virtual/input/input22 [ 506.310295][ T5149] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 506.481102][ T912] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 506.500447][ T912] usb 6-1: USB disconnect, device number 27 [ 506.823991][T12047] Driver unsupported XDP return value 0 on prog (id 322) dev N/A, expect packet loss! [ 507.110053][ T5954] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 507.137817][ T30] audit: type=1400 audit(2000000343.818:926): avc: denied { create } for pid=12054 comm="syz.4.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 507.194972][ T30] audit: type=1400 audit(2000000343.818:927): avc: denied { ioctl } for pid=12054 comm="syz.4.1725" path="socket:[37521]" dev="sockfs" ino=37521 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 507.220006][ T30] audit: type=1400 audit(2000000343.878:928): avc: denied { unmount } for pid=6280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 507.272267][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.283256][ T5954] usb 2-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 507.335190][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.376699][ T5954] usb 2-1: config 0 descriptor?? [ 507.399902][ T30] audit: type=1400 audit(2000000344.078:929): avc: denied { ioctl } for pid=12064 comm="syz.0.1731" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 507.424685][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.915264][ T5954] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 507.922607][ T5954] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 507.929666][ T5954] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 507.941906][ T5954] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 507.949357][ T5954] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 507.962595][ T5954] gembird 0003:11FF:3331.0006: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.1-1/input0 [ 508.220571][ T5886] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 508.319681][ T5897] usb 2-1: USB disconnect, device number 17 [ 508.382194][ T5886] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 508.390662][ T5886] usb 1-1: config 0 has no interface number 0 [ 508.396792][ T5886] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 508.412199][ T5886] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 508.438559][ T5886] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 508.458105][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.516807][ T5886] usb 1-1: config 0 descriptor?? [ 508.544576][ T5886] ttusbir 1-1:0.83: cannot find expected altsetting [ 508.766336][ T912] usb 1-1: USB disconnect, device number 21 [ 509.190159][ T30] audit: type=1400 audit(2000000345.758:930): avc: denied { mount } for pid=12083 comm="syz.1.1738" name="/" dev="hugetlbfs" ino=38007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 509.213111][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.509978][T12004] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 509.516223][ T5149] Bluetooth: hci6: command 0x1003 tx timeout [ 509.906297][ T30] audit: type=1400 audit(2000000346.538:931): avc: denied { connect } for pid=12092 comm="syz.4.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 510.146184][ T30] audit: type=1400 audit(2000000346.538:932): avc: denied { write } for pid=12092 comm="syz.4.1740" laddr=fe80::13 lport=1 faddr=fe80::aa fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 510.298877][ T30] audit: type=1400 audit(2000000346.568:933): avc: denied { sqpoll } for pid=12092 comm="syz.4.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 512.576369][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 512.576383][ T30] audit: type=1400 audit(2000000349.258:935): avc: denied { connect } for pid=12141 comm="syz.4.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 512.775280][T12004] Bluetooth: hci3: unexpected event for opcode 0x203d [ 512.784558][ T30] audit: type=1400 audit(2000000349.458:936): avc: denied { ioctl } for pid=12145 comm="syz.4.1759" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 512.938358][ T30] audit: type=1400 audit(2000000349.608:937): avc: denied { write } for pid=12153 comm="syz.2.1762" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 514.403115][T12004] Bluetooth: hci3: unexpected event for opcode 0x203b [ 514.463319][T12178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12178 comm=syz.4.1770 [ 516.510473][ T5954] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 516.559922][ T5830] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 516.638340][ T30] audit: type=1400 audit(2000000353.318:938): avc: denied { name_bind } for pid=12205 comm="syz.0.1781" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 516.849962][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 516.858619][ T5954] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 516.874232][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.874747][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.959547][T12210] geneve2: entered promiscuous mode [ 516.964851][T12210] geneve2: entered allmulticast mode [ 516.998918][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 517.304159][ T5954] usb 3-1: Product: syz [ 517.323554][ T5954] usb 3-1: Manufacturer: syz [ 517.328219][ T5954] usb 3-1: SerialNumber: syz [ 517.362624][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.367705][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 517.420306][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 517.443954][ T5954] usb 3-1: config 0 descriptor?? [ 517.540293][ T5830] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 517.571026][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.611171][ T5830] usb 5-1: config 0 descriptor?? [ 517.768251][ T30] audit: type=1400 audit(2000000354.448:939): avc: denied { create } for pid=12192 comm="syz.2.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 517.788524][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 517.813236][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 517.816418][ T5954] peak_usb 3-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 518.020201][ T5954] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 518.040797][ T5954] peak_usb 3-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 518.066338][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.085503][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.095877][T12226] ------------[ cut here ]------------ [ 518.101794][T12226] verifier bug: scc exit: no visit info for call chain (1)(1) [ 518.105949][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.121943][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.129661][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.137996][T12226] WARNING: CPU: 0 PID: 12226 at kernel/bpf/verifier.c:1949 maybe_exit_scc+0x768/0x8d0 [ 518.138809][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.148306][T12226] Modules linked in: [ 518.148325][T12226] CPU: 0 UID: 0 PID: 12226 Comm: syz.1.1788 Not tainted syzkaller #0 PREEMPT(full) [ 518.148349][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 518.148362][T12226] RIP: 0010:maybe_exit_scc+0x768/0x8d0 [ 518.148395][T12226] Code: ff ff e8 db 8d e7 ff c6 05 ba 22 74 0e 01 90 48 89 ee 48 89 df e8 f8 41 fb ff 48 c7 c7 80 83 75 8b 48 89 c6 e8 c9 1d a6 ff 90 <0f> 0b 90 90 e9 4e ff ff ff e8 5a fb 4d 00 e9 7f f9 ff ff 4c 8b 4c [ 518.148415][T12226] RSP: 0018:ffffc9000c2d7500 EFLAGS: 00010282 [ 518.148433][T12226] RAX: 0000000000000000 RBX: ffff888053238000 RCX: ffffc900048e2000 [ 518.148446][T12226] RDX: 0000000000080000 RSI: ffffffff81796e95 RDI: 0000000000000001 [ 518.148459][T12226] RBP: ffff88805323e328 R08: 0000000000000001 R09: 0000000000000000 [ 518.148471][T12226] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200185aea7 [ 518.148492][T12226] R13: 0000000000000000 R14: ffff88804966ea00 R15: dffffc0000000000 [ 518.148506][T12226] FS: 00007fc6048796c0(0000) GS:ffff888124e81000(0000) knlGS:0000000000000000 [ 518.148526][T12226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.148539][T12226] CR2: 00007fa756068d58 CR3: 00000000744be000 CR4: 00000000003526f0 [ 518.148552][T12226] Call Trace: [ 518.148559][T12226] [ 518.148573][T12226] ? __pfx_maybe_exit_scc+0x10/0x10 [ 518.148603][T12226] ? check_atomic_rmw+0xa26/0x1100 [ 518.148622][T12226] ? check_atomic_rmw+0x81/0x1100 [ 518.148644][T12226] do_check_common+0x20cc/0xb410 [ 518.148692][T12226] ? __pfx_do_check_common+0x10/0x10 [ 518.148711][T12226] ? __pfx_lockdep_hardirqs_on+0x1/0x10 [ 518.148741][T12226] ? kfree+0x2b4/0x4d0 [ 518.148770][T12226] ? bpf_check+0x7c34/0xc670 [ 518.148793][T12226] bpf_check+0x869f/0xc670 [ 518.148835][T12226] ? __pfx_bpf_check+0x10/0x10 [ 518.148877][T12226] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 518.148903][T12226] bpf_prog_load+0xe41/0x2490 [ 518.148934][T12226] ? __pfx_bpf_prog_load+0x10/0x10 [ 518.148961][T12226] ? avc_has_perm+0x144/0x1f0 [ 518.148997][T12226] ? selinux_bpf+0xde/0x130 [ 518.149018][T12226] ? bpf_lsm_bpf+0x9/0x10 [ 518.149048][T12226] __sys_bpf+0x4a3f/0x4de0 [ 518.149078][T12226] ? __pfx___sys_bpf+0x10/0x10 [ 518.149102][T12226] ? sctp_setsockopt+0x173/0xb870 [ 518.149123][T12226] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 518.158257][ T5954] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 518.160708][T12226] ? do_futex+0x122/0x350 [ 518.160731][T12226] ? __pfx_do_futex+0x10/0x10 [ 518.160776][T12226] ? xfd_validate_state+0x61/0x180 [ 518.160795][T12226] ? __sys_setsockopt+0x1c0/0x230 [ 518.160826][T12226] __x64_sys_bpf+0x78/0xc0 [ 518.173323][ T5954] usb 3-1: USB disconnect, device number 36 [ 518.180766][T12226] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.187336][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.205594][T12226] do_syscall_64+0xcd/0x4e0 [ 518.211840][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.219640][T12226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.227798][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.235562][T12226] RIP: 0033:0x7fc60398eec9 [ 518.235579][T12226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.235597][T12226] RSP: 002b:00007fc604879038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.235616][T12226] RAX: ffffffffffffffda RBX: 00007fc603be5fa0 RCX: 00007fc60398eec9 [ 518.235629][T12226] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 518.235641][T12226] RBP: 00007fc603a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.235653][T12226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.290016][ T5830] hid-multitouch 0003:0457:07DA.0007: unknown main item tag 0x0 [ 518.292236][T12226] R13: 00007fc603be6038 R14: 00007fc603be5fa0 R15: 00007ffe8c274a28 [ 518.309261][ T5830] hid-multitouch 0003:0457:07DA.0007: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 518.312999][T12226] [ 518.313011][T12226] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 518.313024][T12226] CPU: 0 UID: 0 PID: 12226 Comm: syz.1.1788 Not tainted syzkaller #0 PREEMPT(full) [ 518.313044][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 518.313055][T12226] Call Trace: [ 518.313061][T12226] [ 518.313068][T12226] dump_stack_lvl+0x3d/0x1f0 [ 518.313099][T12226] vpanic+0x6e8/0x7a0 [ 518.313127][T12226] ? __pfx_vpanic+0x10/0x10 [ 518.313157][T12226] ? maybe_exit_scc+0x768/0x8d0 [ 518.313184][T12226] panic+0xca/0xd0 [ 518.313208][T12226] ? __pfx_panic+0x10/0x10 [ 518.313241][T12226] check_panic_on_warn+0xab/0xb0 [ 518.313265][T12226] __warn+0xf6/0x3c0 [ 518.313277][T12226] ? preempt_schedule_notrace+0x62/0xe0 [ 518.313299][T12226] ? maybe_exit_scc+0x768/0x8d0 [ 518.313322][T12226] report_bug+0x3c3/0x580 [ 518.313342][T12226] ? maybe_exit_scc+0x768/0x8d0 [ 518.313366][T12226] handle_bug+0x184/0x210 [ 518.313381][T12226] exc_invalid_op+0x17/0x50 [ 518.313396][T12226] asm_exc_invalid_op+0x1a/0x20 [ 518.313411][T12226] RIP: 0010:maybe_exit_scc+0x768/0x8d0 [ 518.313433][T12226] Code: ff ff e8 db 8d e7 ff c6 05 ba 22 74 0e 01 90 48 89 ee 48 89 df e8 f8 41 fb ff 48 c7 c7 80 83 75 8b 48 89 c6 e8 c9 1d a6 ff 90 <0f> 0b 90 90 e9 4e ff ff ff e8 5a fb 4d 00 e9 7f f9 ff ff 4c 8b 4c [ 518.313448][T12226] RSP: 0018:ffffc9000c2d7500 EFLAGS: 00010282 [ 518.313471][T12226] RAX: 0000000000000000 RBX: ffff888053238000 RCX: ffffc900048e2000 [ 518.313482][T12226] RDX: 0000000000080000 RSI: ffffffff81796e95 RDI: 0000000000000001 [ 518.313492][T12226] RBP: ffff88805323e328 R08: 0000000000000001 R09: 0000000000000000 [ 518.313501][T12226] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200185aea7 [ 518.313511][T12226] R13: 0000000000000000 R14: ffff88804966ea00 R15: dffffc0000000000 [ 518.313528][T12226] ? __warn_printk+0x1a5/0x350 [ 518.313557][T12226] ? __pfx_maybe_exit_scc+0x10/0x10 [ 518.313578][T12226] ? check_atomic_rmw+0xa26/0x1100 [ 518.313593][T12226] ? check_atomic_rmw+0x81/0x1100 [ 518.313611][T12226] do_check_common+0x20cc/0xb410 [ 518.313649][T12226] ? __pfx_do_check_common+0x10/0x10 [ 518.313664][T12226] ? __pfx_lockdep_hardirqs_on+0x1/0x10 [ 518.313689][T12226] ? kfree+0x2b4/0x4d0 [ 518.313711][T12226] ? bpf_check+0x7c34/0xc670 [ 518.313730][T12226] bpf_check+0x869f/0xc670 [ 518.313764][T12226] ? __pfx_bpf_check+0x10/0x10 [ 518.313798][T12226] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 518.313820][T12226] bpf_prog_load+0xe41/0x2490 [ 518.313844][T12226] ? __pfx_bpf_prog_load+0x10/0x10 [ 518.313866][T12226] ? avc_has_perm+0x144/0x1f0 [ 518.313895][T12226] ? selinux_bpf+0xde/0x130 [ 518.313911][T12226] ? bpf_lsm_bpf+0x9/0x10 [ 518.313934][T12226] __sys_bpf+0x4a3f/0x4de0 [ 518.313957][T12226] ? __pfx___sys_bpf+0x10/0x10 [ 518.313976][T12226] ? sctp_setsockopt+0x173/0xb870 [ 518.313993][T12226] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 518.314021][T12226] ? do_futex+0x122/0x350 [ 518.314035][T12226] ? __pfx_do_futex+0x10/0x10 [ 518.314070][T12226] ? xfd_validate_state+0x61/0x180 [ 518.314085][T12226] ? __sys_setsockopt+0x1c0/0x230 [ 518.314111][T12226] __x64_sys_bpf+0x78/0xc0 [ 518.314131][T12226] ? lockdep_hardirqs_on+0x7c/0x110 [ 518.314152][T12226] do_syscall_64+0xcd/0x4e0 [ 518.314176][T12226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.314191][T12226] RIP: 0033:0x7fc60398eec9 [ 518.314204][T12226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.314218][T12226] RSP: 002b:00007fc604879038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.314232][T12226] RAX: ffffffffffffffda RBX: 00007fc603be5fa0 RCX: 00007fc60398eec9 [ 518.314242][T12226] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 518.314251][T12226] RBP: 00007fc603a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.314261][T12226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.314270][T12226] R13: 00007fc603be6038 R14: 00007fc603be5fa0 R15: 00007ffe8c274a28 [ 518.314291][T12226] [ 518.317427][T12226] Kernel Offset: disabled