last executing test programs: 9.491980166s ago: executing program 1 (id=335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004480)=[{{&(0x7f00000000c0)={0xa, 0x4e1c, 0xe0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000a00)="4b60a810374e248a30a6014953e08ab968ffb33bb26740f6452a4dc04f20ed4ed94b2bcd00ac409dc682ccbed4cb68383e24e7e98a4168abc74a9efb3b344bd12e5a3e4b3ca7b9991802397039", 0x4d}, {&(0x7f00000036c0)="eeb41d3163459180b939d3b21a231638c26e4278edc6a835d12e797f50fac140f8addc2bc67c241b98dce6477fe8e4cc96361072c7d0446d0a1720071c42062e7e5d5571ce5548f65b39ba180422655f73b6a858199e504b6c770576aeebd06b10aa711c8a6122d500bc7545ba59282c62a83ca98aae16433d37481ef39e209626cb943a239542d0ceb39fdbe67f63e69716082b38d57ce85f9611dc228df763ba14286fc5a4df09c1ce610beab7cc3b239f983c2e99674e0d05a6f3423659541e02", 0xc2}, {&(0x7f00000037c0)="023ef93694ab52b5f533a63cef89", 0xe}, {&(0x7f0000003800)="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", 0xfa}], 0x4}}, {{&(0x7f0000003980)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x278}}, {{&(0x7f0000004100)={0xa, 0x4e22, 0x0, @private1, 0x6}, 0x1c, &(0x7f00000043c0), 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="80000000000000002900000036000000620c0000008000000748000000021003feffba030000000000000900000000000000080000000008"], 0x80}}], 0x3, 0x800) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) r3 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, &(0x7f0000000100)) write$binfmt_script(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000980)=ANY=[@ANYBLOB="18e791e6f691af6354618107482f8eb4d066b8f0b33194bc9d3272aea3f0d8e6e587ea4c3950e836249a5de47dd7aef5713d2bedd8d032d9aec1ebf6c8a4f4a8fb2b644846c1da72bd16e664d3213892f42c1678a2ab8a1e1745ed170dc5a054"], 0x18}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) write$binfmt_script(r4, &(0x7f0000001b00), 0xfffffd9d) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.978924323s ago: executing program 3 (id=340): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) io_uring_setup(0x7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xbc) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000180)={0x356, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, {0x10, 0x4}, {0xc0, 0xb, 0x40020000}, {0x0, 0x8}, {0x4, 0xb}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0xb, 0x400009, 0x3, 0x0, 0x3f, 0x1, 0x0, 0x7}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d080)=ANY=[@ANYBLOB="3000000041bda49e5f406ca8335a00010029bd7000040000000100000004004880100001800c0010800500", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x4040, &(0x7f0000019300)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 7.565466489s ago: executing program 3 (id=341): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000004, 0x28010, r0, 0x70ff0000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x181081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'veth1_to_team\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) ioctl$COMEDI_RANGEINFO(r5, 0x80106408, &(0x7f0000000280)={0xfffffffc, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) openat$hwrng(0xffffffffffffff9c, 0x0, 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000002600)=""/4096, 0xfff, 0x0, 0x1a, 0xde, &(0x7f0000003600)="16c66ad813ddc0658a773fd590c0c56a9103da2dff52ac06df05", &(0x7f0000003640)="229659ccd6f855f1bd40fd739fde0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913d47292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f204da7c2eb0ff4276ef0f673fc3e0daa8a633c74a34e82949b401a6f5649f683612afb19668bedd2eec7ed2766b9f69557646f981aeb9342e4fbd9ee239c7e20caa8beb6b9a56f39c059b4723325cfee09e5c09269845ea686525461429559d4b3dcbb51aeda91ac9e4287b6403281f3", 0x2, 0x0, 0x3}, 0x50) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000240)={0x23, 0x30, 0x0, 0x36}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000100)={0x23, 0x30}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.504016579s ago: executing program 1 (id=344): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x6c6882, 0x13d) landlock_restrict_self(0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6.349144398s ago: executing program 0 (id=345): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (fail_nth: 2) 5.885595196s ago: executing program 0 (id=347): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44050}, 0x1800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="1200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000380)={"58581617e1b3740343000000000000fdebf57e00", 0x2, 0x1, 0x1, 0x1, 0x80a, 0x0, 0xfffffffa, 0x5, [0x21d1, 0x401, 0x5, 0x3, 0x7ff, 0x101, 0x9, 0xd, 0x7fff, 0x5, 0x0, 0x7, 0x2, 0x204, 0x8, 0x7, 0x43, 0xfffffffc, 0x4]}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000080)={0xc7b}) syz_usb_disconnect(r4) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) 5.845052414s ago: executing program 3 (id=348): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000340)='./config\x00', 0xdd) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="f209000038c0bacc7e2057b0"], 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000052000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_io_uring_setup(0x5f9b, 0x0, &(0x7f0000000780), &(0x7f0000000240), &(0x7f0000000180)) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a30000000000800034000"], 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)='\\', 0x1) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) 4.827752252s ago: executing program 4 (id=349): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 4.81748438s ago: executing program 3 (id=350): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000004500), 0x40, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0xfec7fd7514a6c3ca, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f00000000c0)) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x400001, 0x0) ioctl$VIDIOC_G_SELECTION(r6, 0xc040565e, &(0x7f00000002c0)={0xe, 0x102, 0x6, {0x9, 0x81, 0xd, 0x2}}) fdatasync(r4) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x80000}}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, &(0x7f00000001c0)=0x4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r11}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x428, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}, 0x1, 0x0, 0x0, 0x2406c055}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.281779102s ago: executing program 2 (id=351): fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000040)=0x10000) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$char_usb(r1, &(0x7f00000001c0)='d', 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) (fail_nth: 1) 3.976892107s ago: executing program 1 (id=352): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000180), 0x1004002, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000?000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002a00)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x4, 0x1, 0x0, {0xffdfffffffffffff, 0x0, 0x8000000000000001, 0x80000001, 0x0, 0x80200000000001, 0x9e9, 0xc9, 0x3, 0x8000, 0x3, 0xffffffffffffffff, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.965035324s ago: executing program 2 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdff0000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000007500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2}, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x0, 0x4}) read$msr(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xd, 0x9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 3.851550477s ago: executing program 4 (id=354): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="20000000150a0102cfc6cb2c"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msgget$private(0x0, 0x60) prlimit64(0x0, 0xe, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 3.617390284s ago: executing program 2 (id=355): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001140)={0x0, @initdev, @broadcast}, &(0x7f0000001080)=0xfffffffffffffe20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000000000001801b10020646c2500000000002020207b1af8ff00000000bfa100006595e181424009c50000000007010000f8ffffffb702000008000000b7010000000000008500000006000000850000000700000095000000000000005c2c73682246ed229f0031e0a4680eb2fbfb90c608f5be8ed99cac51edb7e6449be1a64719df35804f991826edc3392c2139f5fdf51c76d34f16c4469b72ab5b472609760c84adb0869309d153c88876eda9317368b62f97eee8691d1d0b42c9a6a961d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) preadv(r4, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) (async) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x80}}, 0x10, 0x0}, 0x3000c085) (async) r11 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r13, 0x0, r12, 0x0, 0x7, 0x2) (async) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008000) 3.600919762s ago: executing program 3 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x93, 0x1, 0x0, 0x5f, 0x3, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0x8, 0x0, 0x4, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0xb, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffdfff}, {0x15, 0x1, 0x6, 0xe7, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1004, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capget(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r4, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.88158461s ago: executing program 4 (id=357): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x7, 0x810000, 0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x6, {0x4, 0x5, 0x7, 0x6, 0x8003, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, 0x0, r4, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000001, {0x5, 0x5, 0x34, 0x0, 0x8, 0xffff672b, {0x2, 0x7, 0x101, 0xffff, 0xffffffffffffffff, 0x8, 0x7, 0xce90cbb, 0xffffff4a, 0xa000, 0x3, r3, r4, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.879427803s ago: executing program 2 (id=358): openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x4680, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'batadv_slave_0\x00', 0x2}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000000905"], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="040002e9a347"], 0xa) 2.830329281s ago: executing program 0 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02", 0x0, 0x10000001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x2, 0x3, {0x0}, {0xffffffffffffffff}, 0x101, 0x2}) move_pages(r1, 0x4, &(0x7f0000000180)=[&(0x7f0000493000/0x1000)=nil, &(0x7f0000788000/0x2000)=nil, &(0x7f00007ba000/0x3000)=nil, &(0x7f000095f000/0x1000)=nil], &(0x7f00000001c0)=[0xbcd], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x29, 0x0, 0x1, 0x0, 0x0, 0xd, 0x64}, 0x8) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) 1.962758906s ago: executing program 4 (id=360): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x3417000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') exit(0xffff) fstat(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.5498958s ago: executing program 3 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000840)=[{0x63, 0x1000, 0x0, 0x0}, {0x4, 0x2200, 0x0, 0x0}], 0x2}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x810000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f00000003c0)="bf000000d2f2e2bd2196b42ac337cf384e6da4f75a6135071155d01b129ba8269417f7031869c7fd2b626c7778356f9ec7dd14fa01d3fe9a6be50ac940e2036803811f4ea472fe0bce3d1bfca817c19ad633d21589aacd21e2a60208463df0ea44924413c9695a4556a00203d0d7eff6e2d815e53ce839d2ea17929148551b242d398b17e1f4cce8c14a423dd29243c8f2389b9aa26006a2e79bce3300c15a4b", 0xa0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='8\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) close_range(r2, 0xffffffffffffffff, 0x0) 1.518713649s ago: executing program 0 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x17e) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0) syz_open_dev$video4linux(0x0, 0x205d, 0x0) lsetxattr$security_evm(&(0x7f0000000140)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="f92c"], 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c0007800800064000000000050005000200000005000400010000001200030068060000000000000016edc4823a311740db893d8db02c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) gettid() r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000c00000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/222], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$MSR(&(0x7f0000000000), 0x10000, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0xfffffff9, 0x5, '\x00', 0x10}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x800, 0x10000, '\x00', 0x4000000}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x7, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000021d80)={0x6cb941, 0x108, 0x6}, 0x18) 1.492956116s ago: executing program 2 (id=363): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) syz_usb_connect$uac3(0x1, 0x11a, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x3, 0x1, 0x7, 0x20, 0x9, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0xf9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x33, 0x101}, [@extension_unit={0x1d, 0x24, 0xa, 0x4, 0x2, [0x0, 0x3, 0x2, 0x2, 0x2, 0x3]}, @source_unit={0xc, 0x24, 0xb, 0x80, 0x0, 0x3, 0x7, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x2}, @as_header={0x17, 0x24, 0x1, 0x5, 0x3, 0x2, 0x3, 0x4, 0x7, 0x7, 0x82}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x66, 0x2, 0x0, 0x9, "00ebc0"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xff, 0xc, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x89, 0xff, 0x40, 0x8}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x4, 0xf9, 0xb5, "d51d67"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe, 0x7f, 0x0, {0xa, 0x25, 0x25, 0x5, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x5, 0xb, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x5, 0x4f, 0xd}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x4, 0x40, 0x0, "5dbbace8b4728663f8"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0xff, 0xe0, {0xa, 0x25, 0x25, 0x0, 0x8, 0xf}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x5c, 0x9, 0x3, 0x0, 0x1}, 0x146, &(0x7f00000002c0)={0x5, 0xf, 0x146, 0x6, [@generic={0xac, 0x10, 0xa, "ee251df2e10077ea5695c48a87f38ac42dd9b4b0aded05cd73c4d3114f57e8985e17e03db8b82618942ef14f02c2dabbeafc65e85475444eb374d2cae2f811e6425e0ffa3fc80fcf4e436fb93cd04159be2dc0289eb279d5977984b9245d11d78283eac5226cc328f2228102f4cb370ac9ffe15cf946cc595b0e689ca94055bad504c4c93cdacac7456bc3811eb97558e9edf6cf8436188e3816678c39cedcbe75dfa469d8c7fb0f90"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x10, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xa, 0x1, 0x1}, @generic={0x5e, 0x10, 0x1, "f14437df751fbe577e5f6f572d7d734aa5ccb9a5c2df2e6d1c0a9a7aa36bcf2dd3185687b3cbf686557f07a1be0c33694a5c85555cf8642c66228df679bd8e0f270354f4b6ac899fe9ffed9a71e0efb7d512fa6698be29eff4d24f"}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0xf3f, 0x0, 0x7, [0xc0, 0xc00f, 0xff0000, 0xf, 0xc00f]}]}, 0x1, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x421}}]}) (async) syz_usb_ep_write(r0, 0x1, 0x27, &(0x7f0000000040)="c2f4e3517edf13f8e66722fdafd799daf5d39947c48a8a55f3bad1d7ac2ce698db57f6353dde54") (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$uac3(0x1, 0xd0, &(0x7f0000000000)=ANY=[], &(0x7f0000000900)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x9, 0x2, 0xe, 0x10, 0x9}, 0x0, 0x0}) 1.361343022s ago: executing program 0 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0xeeee8000, 0x2000, &(0x7f0000001000/0x2000)=nil}) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r6, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0) syz_io_uring_setup(0xeff, &(0x7f0000000000)={0x0, 0x60000000, 0x2000, 0x1, 0x2f8}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3ed763469f8f58dc}) 1.139295448s ago: executing program 1 (id=365): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 945.481771ms ago: executing program 1 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(0xffffffffffffffff, 0x8000000000000000) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, &(0x7f0000000340)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@delchain={0x3d0, 0x65, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xffee, 0x3}, {0x9, 0x6}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x10}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @filter_kind_options=@f_cgroup={{0xb}, {0x304, 0x2, [@TCA_CGROUP_EMATCHES={0x24c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff, 0x3, 0x94}, {0x9, 0x5, 0xb, 0x18000}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xa24b, 0x1, 0x8c9d}, {0x7, 0xe, 0x800, 0x4, 0xc, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd0, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x1}, "37d8dd2fee2e539a0bd485be07cc629c556439e2a15bacbaf8a44ee1e9d0069d89245383c1b32c31ee5433ba3dcc95c8aa40f0e1514e22b9c913fb15c8c4171d16a3316202ce25212780ddeeb0918c5f6b6ae6d94953a67c70993ed2986095c341f244ee3e07fe09bfd6ecd11eda86d352a0ce783f899c7a88a62ab94f5092debca9243ff28ba9d6caa4af830dac11893c7d63afa34eefaf0920d347b1cf1e0c91811c603868c6fe0dec596f29fff72aa496e564846a67618d1097813b863bf8664f15a3"}}]}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x108, 0x3, 0x0, 0x0, {{0x32a3, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xfc, 0x5, "6916213377fe7f5ac31be817a786adaed5eb1b5ab96a427013f6d4ce91a9b5f6af8c2c6ea9c13816b82f73223a82fd878cd49cf72064cce8414c2d90e9529df823148333d6376d2918fbe116a46e03d4d07b2c9fdfb1f3e34909c447d2625f738e05ac9cab95f234efb753161aca12cd941d433409087a6ab490ab5dac4a72cedc8a26608890335ac5d31e56c276cde2f154a85163933619e1548bb673062a30ab510a470ad7afd2b8b9b7a1bad8405f0a5618b9bb4379ef7df73e722d343dd9a323008c4f08b269442918d0201d281f90a21248f0146c3bebff2531cf8761edc720f0824087d9a6c7b70da11cf7eda41a41fef13915daa6"}]}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1fe, 0x3, 0x1}, {0x27, 0xfc, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0x6}, {0x9, 0x5, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5]}]}}]}]}, @TCA_CGROUP_ACT={0xb4, 0x1, [@m_bpf={0xb0, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0x6, 0x6, '.\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2ee6ad98, 0x8001, 0xfffffffffffffff8, 0xf1cb}}]}, {0x66, 0x6, "d97c39e13c2167a00e849ede971b1622f7c97cfde9468401a4bedc121361165d98a01c08c6013e59c585f8846f56d92c51bd6a0be6b192f6184aeb5ec61b2c97a6ebd5bcddc55eb4cdaf24e9dbce947679e0aac5b8418cfe284ef999d7eda1888434"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe01}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfe01}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0xc}}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x7fffffff}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x3d0}}, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x40014) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x19, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x8080, 0x800, 0x0, 0x440000, 0x0, 0x0, 0x400000, 0x0, 0xfffffffd, 0x20000, 0x0, 0x7}}) connect$inet(r9, 0x0, 0x0) setgroups(0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x24000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0xfffffbff, 0xfffffffd, 0x22, 0x5, 0x1101, 0x1}) 928.439939ms ago: executing program 4 (id=367): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfd, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') preadv(r2, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfd, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) (async) syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') (async) preadv(r2, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) (async) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) 151.563165ms ago: executing program 2 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_usb_connect(0x1, 0x4a, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], 0x0) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) sendmsg$inet(r7, 0x0, 0x4040051) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20c40, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r11, 0x4020aed2, &(0x7f0000000040)={0x10d000, 0x104000, 0x8}) syz_ublk_setup_io_uring(0x3651, &(0x7f0000000440)={0x0, 0xa1bc, 0x4, 0x8000003, 0x3a0}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f00000001c0)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0xa720, 0x10001, 0x0, 0x1f1}, &(0x7f00000009c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b6c, 0x1000, 0x3, 0x12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbf35, 0x1000, 0x3, 0x3c1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x404c, 0x2000, 0x3, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x73e7, 0x2, 0x0, 0x279}}], 0x4, &(0x7f0000001c80)={0x2e, 0x88, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xd7}, 0x0, 0x0, '\x00', {0x1, 0xa17, 0x0, &(0x7f0000000c80)=@buf_1k="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"}}, &(0x7f0000001d00)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$UBLK_U_CMD_START_USER_RECOVERY(0xffffffffffffffff, 0xc0207510, &(0x7f0000001d40)) 45.657406ms ago: executing program 4 (id=369): syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x200100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) process_madvise(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="0a6ecb2d20", 0x5}, {&(0x7f0000000100)="b72d2ecd21fdaa464e6e8c57d19945ea5707232e4d093c309292b82296a5fd7e8e933026fd33b7", 0x27}], 0x2, 0x64, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007e40), 0x40000000000005e, 0x4040040) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0xffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f00000001c0)='$)**>\x00', 0x355081, &(0x7f0000000240)={@_ha_fsid={[0x0, 0x5a60]}, {0x101, 0x9, 0xcf98ade, 0x67}}, 0xeb, &(0x7f0000000280), &(0x7f00000002c0)=0x49}) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3fb, 0xe, 0x70bd28, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000005080), 0x0, 0x8001) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, 0x0, 0x0) 21.044975ms ago: executing program 1 (id=370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000, 0xfffffffffffffffe}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x2, 0x2b}, 0x0, @in6=@remote, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f0000000080)) write(r2, &(0x7f0000000180)='100', 0x3) write(0xffffffffffffffff, &(0x7f0000000280)='8\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) sched_getaffinity(r1, 0x0, 0x0) timer_settime(r2, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_voice_setting={{0x5}, {0x0, 0xaa5}}}}, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="611085000000000095", @ANYRESDEC], &(0x7f0000000200)='GPL\x00'}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x3, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x49cd3b5778efb988}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) r8 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x80000000}) write$sndseq(r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000001140)={0x80, 0x21, 0x3, 0x7}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000010000000401009581667f00"], 0x4a0d83) ioctl$VIDIOC_S_AUDOUT(r9, 0x40345632, &(0x7f0000000040)={0x6ee24dc8, "e0af5b811173fa99006ae5f5902f7fb9486bfa5e6aeb608f99fa465394aa607b", 0x2, 0x1}) lseek(r9, 0x7, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) kernel console output (not intermixed with test programs): 54919][ T5342] usb 4-1: Product: syz [ 110.823137][ T5342] usb 4-1: Manufacturer: syz [ 110.847969][ T5342] usb 4-1: SerialNumber: syz [ 110.959160][ T5798] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.024989][ T29] audit: type=1400 audit(1785302028.479:398): avc: denied { getopt } for pid=6328 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 111.101905][ T29] audit: type=1400 audit(1785302028.559:399): avc: denied { write } for pid=6310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.139726][ T5798] usb 1-1: Using ep0 maxpacket: 8 [ 111.158925][ T5798] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.173719][ T5798] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 111.225239][ T5798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 118, changing to 10 [ 111.367211][ T5798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 24940, setting to 1024 [ 111.408806][ T29] audit: type=1400 audit(1785302028.859:400): avc: denied { getopt } for pid=6308 comm="syz.3.105" lport=129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.430075][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.446924][ T5798] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.495932][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.502438][ T5798] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 111.529193][ T29] audit: type=1400 audit(1785302028.939:401): avc: denied { write } for pid=6352 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.558544][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.603189][ T5798] usb 1-1: Product: syz [ 111.615558][ T5798] usb 1-1: Manufacturer: syz [ 111.635203][ T5798] usb 1-1: SerialNumber: syz [ 111.684633][ T6325] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 111.692255][ T29] audit: type=1400 audit(1785302029.149:402): avc: denied { shutdown } for pid=6308 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.734824][ T5798] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 111.769932][ T5798] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 111.776213][ T29] audit: type=1400 audit(1785302029.229:403): avc: denied { getopt } for pid=6362 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.800489][ T5798] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 111.933739][ T5798] usb 1-1: USB disconnect, device number 4 [ 112.028765][ T5743] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 112.099375][ T5342] dvb-usb: found a 'Genpix SkyWalker-2 DVB-S receiver' in warm state. [ 112.121046][ T5342] gp8psk: usb in 128 operation failed. [ 112.128046][ T5342] gp8psk: usb in 137 operation failed. [ 112.139369][ T5342] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 112.158202][ T5342] dvb-usb: Genpix SkyWalker-2 DVB-S receiver error while loading driver (-19) [ 112.160730][ T5743] usb 2-1: device descriptor read/64, error -71 [ 112.222380][ T5342] usb 4-1: USB disconnect, device number 4 [ 112.307595][ T6378] netlink: 68 bytes leftover after parsing attributes in process `syz.2.121'. [ 112.769539][ T6380] xt_hashlimit: size too large, truncated to 1048576 [ 113.181140][ T5743] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 113.319166][ T5743] usb 2-1: device descriptor read/64, error -71 [ 113.439410][ T5743] usb usb2-port1: attempt power cycle [ 113.760198][ T6403] atomic_op ffff88804ca7a198 conn xmit_atomic 0000000000000000 [ 114.292052][ T6406] FAULT_INJECTION: forcing a failure. [ 114.292052][ T6406] name failslab, interval 1, probability 0, space 0, times 0 [ 114.347755][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.3.128 Not tainted syzkaller #0 PREEMPT(full) [ 114.347778][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.347787][ T6406] Call Trace: [ 114.347793][ T6406] [ 114.347799][ T6406] dump_stack_lvl+0x100/0x190 [ 114.347826][ T6406] should_fail_ex.cold+0x5/0xa [ 114.347848][ T6406] should_failslab+0xc2/0x120 [ 114.347872][ T6406] __kmalloc_noprof+0xfc/0x820 [ 114.347893][ T6406] ? tomoyo_encode2+0xfb/0x3c0 [ 114.347915][ T6406] tomoyo_encode2+0xfb/0x3c0 [ 114.347936][ T6406] tomoyo_encode+0x29/0x50 [ 114.347951][ T6406] tomoyo_realpath_from_path+0x18c/0x690 [ 114.347975][ T6406] tomoyo_path_number_perm+0x23c/0x580 [ 114.347999][ T6406] ? tomoyo_path_number_perm+0x22e/0x580 [ 114.348025][ T6406] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.348076][ T6406] ? find_held_lock+0x2b/0x80 [ 114.348103][ T6406] ? __fget_files+0x215/0x3d0 [ 114.348120][ T6406] ? hook_file_ioctl_common+0x140/0x440 [ 114.348138][ T6406] ? __fget_files+0x215/0x3d0 [ 114.348160][ T6406] ? __fget_files+0x21f/0x3d0 [ 114.348188][ T6406] security_file_ioctl+0xd3/0x230 [ 114.348216][ T6406] __x64_sys_ioctl+0xb7/0x210 [ 114.348244][ T6406] do_syscall_64+0x115/0x870 [ 114.348263][ T6406] ? clear_bhb_loop+0x40/0x90 [ 114.348284][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.348302][ T6406] RIP: 0033:0x7f472b79de99 [ 114.348317][ T6406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.348332][ T6406] RSP: 002b:00007f47299f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.348350][ T6406] RAX: ffffffffffffffda RBX: 00007f472ba25fa0 RCX: 00007f472b79de99 [ 114.348361][ T6406] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 114.348371][ T6406] RBP: 00007f47299f6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.348381][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.348391][ T6406] R13: 00007f472ba26038 R14: 00007f472ba25fa0 R15: 00007ffee1b9a3f8 [ 114.348414][ T6406] [ 114.348429][ T6406] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.349169][ T5743] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 114.470771][ T5743] usb 2-1: device descriptor read/8, error -71 [ 114.680726][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 114.680737][ T29] audit: type=1400 audit(1785302032.119:409): avc: denied { watch } for pid=6410 comm="syz.0.130" path="/25" dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 114.709614][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 115.377202][ T29] audit: type=1400 audit(1785302032.829:410): avc: denied { write } for pid=6422 comm="syz.0.134" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 115.578868][ T29] audit: type=1400 audit(1785302033.029:411): avc: denied { read } for pid=6424 comm="syz.1.135" dev="sockfs" ino=10013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.690000][ T5733] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.889494][ T5733] usb 4-1: Using ep0 maxpacket: 8 [ 115.906829][ T5733] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 115.918552][ T5733] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 115.937003][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.955666][ T6431] FAULT_INJECTION: forcing a failure. [ 115.955666][ T6431] name failslab, interval 1, probability 0, space 0, times 0 [ 115.956705][ T5733] usb 4-1: Product: syz [ 115.981026][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: syz.1.137 Not tainted syzkaller #0 PREEMPT(full) [ 115.981047][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 115.981057][ T6431] Call Trace: [ 115.981062][ T6431] [ 115.981068][ T6431] dump_stack_lvl+0x100/0x190 [ 115.981093][ T6431] should_fail_ex.cold+0x5/0xa [ 115.981115][ T6431] should_failslab+0xc2/0x120 [ 115.981138][ T6431] __kmalloc_cache_noprof+0x91/0x6c0 [ 115.981167][ T6431] ? alloc_pipe_info+0x10e/0x590 [ 115.981190][ T6431] alloc_pipe_info+0x10e/0x590 [ 115.981211][ T6431] splice_direct_to_actor+0x78f/0xa30 [ 115.981234][ T6431] ? __pfx_direct_splice_actor+0x10/0x10 [ 115.981253][ T6431] ? inode_has_perm+0x16d/0x1d0 [ 115.981276][ T6431] ? __file_has_perm+0x336/0x460 [ 115.981299][ T6431] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 115.981319][ T6431] ? __pfx___file_has_perm+0x10/0x10 [ 115.981348][ T6431] do_splice_direct+0x174/0x240 [ 115.981369][ T6431] ? __pfx_do_splice_direct+0x10/0x10 [ 115.981389][ T6431] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 115.981410][ T6431] ? bpf_lsm_file_permission+0x9/0x10 [ 115.981435][ T6431] ? security_file_permission+0x76/0x210 [ 115.981453][ T6431] ? rw_verify_area+0xce/0x6d0 [ 115.981479][ T6431] do_sendfile+0xadc/0xe20 [ 115.981509][ T6431] ? __pfx_do_sendfile+0x10/0x10 [ 115.981543][ T6431] __x64_sys_sendfile64+0x154/0x220 [ 115.981563][ T6431] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 115.981591][ T6431] do_syscall_64+0x115/0x870 [ 115.981610][ T6431] ? clear_bhb_loop+0x40/0x90 [ 115.981631][ T6431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.981648][ T6431] RIP: 0033:0x7f82e3f9de99 [ 115.981662][ T6431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.981678][ T6431] RSP: 002b:00007f82e4ee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 115.981694][ T6431] RAX: ffffffffffffffda RBX: 00007f82e4225fa0 RCX: 00007f82e3f9de99 [ 115.981705][ T6431] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 115.981715][ T6431] RBP: 00007f82e4ee1090 R08: 0000000000000000 R09: 0000000000000000 [ 115.981725][ T6431] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001 [ 115.981734][ T6431] R13: 00007f82e4226038 R14: 00007f82e4225fa0 R15: 00007ffe835c2828 [ 115.981757][ T6431] [ 115.995971][ T5733] usb 4-1: Manufacturer: syz [ 116.207391][ T29] audit: type=1400 audit(1785302033.659:412): avc: denied { append } for pid=6432 comm="syz.1.138" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 116.228997][ T5733] usb 4-1: SerialNumber: syz [ 116.302367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 116.404653][ T6435] atomic_op ffff888030c9f198 conn xmit_atomic 0000000000000000 [ 116.987683][ T6434] FAULT_INJECTION: forcing a failure. [ 116.987683][ T6434] name failslab, interval 1, probability 0, space 0, times 0 [ 117.050551][ T6434] CPU: 1 UID: 0 PID: 6434 Comm: syz.1.138 Not tainted syzkaller #0 PREEMPT(full) [ 117.050574][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 117.050584][ T6434] Call Trace: [ 117.050589][ T6434] [ 117.050596][ T6434] dump_stack_lvl+0x100/0x190 [ 117.050623][ T6434] should_fail_ex.cold+0x5/0xa [ 117.050646][ T6434] should_failslab+0xc2/0x120 [ 117.050670][ T6434] __kmalloc_noprof+0xfc/0x820 [ 117.050691][ T6434] ? tomoyo_encode2+0xfb/0x3c0 [ 117.050712][ T6434] tomoyo_encode2+0xfb/0x3c0 [ 117.050733][ T6434] tomoyo_encode+0x29/0x50 [ 117.050748][ T6434] tomoyo_realpath_from_path+0x18c/0x690 [ 117.050771][ T6434] tomoyo_path_number_perm+0x23c/0x580 [ 117.050795][ T6434] ? tomoyo_path_number_perm+0x22e/0x580 [ 117.050821][ T6434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.050870][ T6434] ? find_held_lock+0x2b/0x80 [ 117.050896][ T6434] ? __fget_files+0x215/0x3d0 [ 117.050914][ T6434] ? hook_file_ioctl_common+0x140/0x440 [ 117.050932][ T6434] ? __fget_files+0x215/0x3d0 [ 117.050954][ T6434] ? __fget_files+0x21f/0x3d0 [ 117.050976][ T6434] security_file_ioctl+0xd3/0x230 [ 117.051003][ T6434] __x64_sys_ioctl+0xb7/0x210 [ 117.051030][ T6434] do_syscall_64+0x115/0x870 [ 117.051049][ T6434] ? clear_bhb_loop+0x40/0x90 [ 117.051071][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.051089][ T6434] RIP: 0033:0x7f82e3f9de99 [ 117.051104][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.051119][ T6434] RSP: 002b:00007f82e4ee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.051136][ T6434] RAX: ffffffffffffffda RBX: 00007f82e4225fa0 RCX: 00007f82e3f9de99 [ 117.051147][ T6434] RDX: 0000000000000000 RSI: 0000000040044590 RDI: 0000000000000003 [ 117.051157][ T6434] RBP: 00007f82e4ee1090 R08: 0000000000000000 R09: 0000000000000000 [ 117.051167][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.051177][ T6434] R13: 00007f82e4226038 R14: 00007f82e4225fa0 R15: 00007ffe835c2828 [ 117.051207][ T6434] [ 117.051222][ T6434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.064733][ T5733] usb 4-1: config 0 descriptor?? [ 117.285524][ T5733] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 117.294545][ T5733] usb 4-1: setting power ON [ 117.299310][ T5733] dvb-usb: bulk message failed: -22 (2/0) [ 117.393005][ T5733] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.424939][ T5733] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 117.454791][ T5733] usb 4-1: media controller created [ 117.485342][ T6421] dvb-usb: bulk message failed: -22 (3/0) [ 117.493310][ T5342] kernel read not supported for file /dummy_udc (pid: 5342 comm: kworker/0:3) [ 117.530076][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.607007][ T5733] usb 4-1: selecting invalid altsetting 6 [ 117.625582][ T5733] usb 4-1: digital interface selection failed (-22) [ 117.646423][ T5733] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 117.674830][ T5733] usb 4-1: setting power OFF [ 117.685588][ T5733] dvb-usb: bulk message failed: -22 (2/0) [ 117.699720][ T5733] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 117.720370][ T5733] (NULL device *): no alternate interface [ 117.798182][ T5733] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 117.881686][ T5733] usb 4-1: USB disconnect, device number 5 [ 118.673885][ T6469] FAULT_INJECTION: forcing a failure. [ 118.673885][ T6469] name failslab, interval 1, probability 0, space 0, times 0 [ 118.687817][ T6469] CPU: 0 UID: 0 PID: 6469 Comm: syz.1.149 Not tainted syzkaller #0 PREEMPT(full) [ 118.687839][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 118.687848][ T6469] Call Trace: [ 118.687854][ T6469] [ 118.687860][ T6469] dump_stack_lvl+0x100/0x190 [ 118.687885][ T6469] should_fail_ex.cold+0x5/0xa [ 118.687907][ T6469] should_failslab+0xc2/0x120 [ 118.687930][ T6469] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 118.687951][ T6469] ? __alloc_skb+0x5b7/0x710 [ 118.687971][ T6469] ? __alloc_skb+0x140/0x710 [ 118.687994][ T6469] __alloc_skb+0x140/0x710 [ 118.688012][ T6469] ? __alloc_skb+0x5b7/0x710 [ 118.688030][ T6469] ? __pfx___alloc_skb+0x10/0x10 [ 118.688057][ T6469] netlink_alloc_large_skb+0x69/0x150 [ 118.688077][ T6469] netlink_sendmsg+0x680/0xda0 [ 118.688098][ T6469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.688117][ T6469] ? selinux_socket_sendmsg+0x198/0x2f0 [ 118.688147][ T6469] ____sys_sendmsg+0xa4d/0xbe0 [ 118.688171][ T6469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.688190][ T6469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.688225][ T6469] ___sys_sendmsg+0x190/0x1e0 [ 118.688253][ T6469] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.688278][ T6469] ? __lock_acquire+0x49f/0x1a40 [ 118.688300][ T6469] ? get_pid_task+0x106/0x250 [ 118.688351][ T6469] __sys_sendmsg+0x160/0x210 [ 118.688369][ T6469] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.688397][ T6469] do_syscall_64+0x115/0x870 [ 118.688412][ T6469] ? clear_bhb_loop+0x40/0x90 [ 118.688430][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.688444][ T6469] RIP: 0033:0x7f82e3f9de99 [ 118.688456][ T6469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.688469][ T6469] RSP: 002b:00007f82e4ee1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.688483][ T6469] RAX: ffffffffffffffda RBX: 00007f82e4225fa0 RCX: 00007f82e3f9de99 [ 118.688492][ T6469] RDX: 00000000040080c0 RSI: 0000200000000080 RDI: 0000000000000003 [ 118.688500][ T6469] RBP: 00007f82e4ee1090 R08: 0000000000000000 R09: 0000000000000000 [ 118.688508][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.688516][ T6469] R13: 00007f82e4226038 R14: 00007f82e4225fa0 R15: 00007ffe835c2828 [ 118.688536][ T6469] [ 119.655225][ T6476] FAULT_INJECTION: forcing a failure. [ 119.655225][ T6476] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.679588][ T6476] CPU: 0 UID: 0 PID: 6476 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(full) [ 119.679610][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 119.679620][ T6476] Call Trace: [ 119.679626][ T6476] [ 119.679632][ T6476] dump_stack_lvl+0x100/0x190 [ 119.679658][ T6476] should_fail_ex.cold+0x5/0xa [ 119.679679][ T6476] _copy_from_user+0x2e/0xd0 [ 119.679706][ T6476] core_sys_select+0x2d0/0xbb0 [ 119.679730][ T6476] ? __pfx_core_sys_select+0x10/0x10 [ 119.679745][ T6476] ? find_held_lock+0x2b/0x80 [ 119.679770][ T6476] ? get_pid_task+0xfc/0x250 [ 119.679820][ T6476] ? __pfx_set_user_sigmask+0x10/0x10 [ 119.679841][ T6476] ? __mutex_unlock_slowpath+0x35d/0x930 [ 119.679866][ T6476] do_pselect.constprop.0+0x238/0x270 [ 119.679886][ T6476] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 119.679908][ T6476] ? ksys_write+0x1ac/0x250 [ 119.679938][ T6476] __x64_sys_pselect6+0x149/0x1c0 [ 119.679959][ T6476] do_syscall_64+0x115/0x870 [ 119.679977][ T6476] ? clear_bhb_loop+0x40/0x90 [ 119.679999][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.680017][ T6476] RIP: 0033:0x7f472b79de99 [ 119.680032][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.680047][ T6476] RSP: 002b:00007f47299d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 119.680063][ T6476] RAX: ffffffffffffffda RBX: 00007f472ba26090 RCX: 00007f472b79de99 [ 119.680074][ T6476] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 119.680085][ T6476] RBP: 00007f47299d5090 R08: 0000000000000000 R09: 0000000000000000 [ 119.680094][ T6476] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 119.680104][ T6476] R13: 00007f472ba26128 R14: 00007f472ba26090 R15: 00007ffee1b9a3f8 [ 119.680126][ T6476] [ 120.068805][ T6483] atomic_op ffff8880353ea998 conn xmit_atomic 0000000000000000 [ 121.032182][ T29] audit: type=1400 audit(1785302038.479:413): avc: denied { mount } for pid=6487 comm="syz.3.155" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.114027][ T29] audit: type=1400 audit(1785302038.549:414): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 121.601499][ T6499] syz.3.158 uses obsolete (PF_INET,SOCK_PACKET) [ 121.625365][ T6499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 121.729123][ T187] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.879860][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 121.892258][ T29] audit: type=1400 audit(1785302039.349:415): avc: denied { append } for pid=6500 comm="syz.4.159" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.926812][ T187] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 121.959431][ T187] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 121.980657][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.002130][ T187] usb 2-1: Product: syz [ 122.012111][ T187] usb 2-1: Manufacturer: syz [ 122.029135][ T187] usb 2-1: SerialNumber: syz [ 122.035911][ T187] usb 2-1: config 0 descriptor?? [ 122.047410][ T187] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 122.066114][ T187] usb 2-1: setting power ON [ 122.078626][ T187] dvb-usb: bulk message failed: -22 (2/0) [ 122.107864][ T187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.129261][ T187] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 122.148474][ T187] usb 2-1: media controller created [ 122.177517][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.218472][ T187] usb 2-1: selecting invalid altsetting 6 [ 122.227224][ T187] usb 2-1: digital interface selection failed (-22) [ 122.246380][ T187] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 122.263930][ T6495] dvb-usb: bulk message failed: -22 (3/0) [ 122.284487][ T10] kernel read not supported for file /dummy_udc (pid: 10 comm: kworker/0:1) [ 122.314825][ T187] usb 2-1: setting power OFF [ 122.338845][ T187] dvb-usb: bulk message failed: -22 (2/0) [ 122.355362][ T187] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 122.374714][ T187] (NULL device *): no alternate interface [ 122.400882][ T187] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 122.449990][ T187] usb 2-1: USB disconnect, device number 8 [ 122.599168][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.751312][ T6525] FAULT_INJECTION: forcing a failure. [ 122.751312][ T6525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.773475][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.788199][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz.4.166 Not tainted syzkaller #0 PREEMPT(full) [ 122.788221][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.788231][ T6525] Call Trace: [ 122.788236][ T6525] [ 122.788245][ T6525] dump_stack_lvl+0x100/0x190 [ 122.788272][ T6525] should_fail_ex.cold+0x5/0xa [ 122.788295][ T6525] _copy_from_user+0x2e/0xd0 [ 122.788319][ T6525] move_addr_to_kernel+0x65/0x170 [ 122.788346][ T6525] __sys_sendto+0x1b8/0x4e0 [ 122.788366][ T6525] ? __pfx___sys_sendto+0x10/0x10 [ 122.788385][ T6525] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 122.788409][ T6525] __x64_sys_sendto+0xe0/0x1c0 [ 122.788421][ T6525] ? do_syscall_64+0x90/0x870 [ 122.788434][ T6525] ? lockdep_hardirqs_on+0x78/0x100 [ 122.788446][ T6525] do_syscall_64+0x115/0x870 [ 122.788458][ T6525] ? clear_bhb_loop+0x40/0x90 [ 122.788471][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.788483][ T6525] RIP: 0033:0x7f1ef135e6ce [ 122.788492][ T6525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.788502][ T6525] RSP: 002b:00007f1ef233fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 122.788513][ T6525] RAX: ffffffffffffffda RBX: 00007f1ef23416c0 RCX: 00007f1ef135e6ce [ 122.788520][ T6525] RDX: 0000000000000020 RSI: 00007f1ef2340000 RDI: 0000000000000003 [ 122.788526][ T6525] RBP: 0000000000000000 R08: 00007f1ef233ff04 R09: 000000000000000c [ 122.788533][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 122.788539][ T6525] R13: 00007f1ef233ff58 R14: 00007f1ef2340000 R15: 0000000000000000 [ 122.788552][ T6525] [ 122.965677][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 123.057257][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=81a1, bcdDevice= 0.40 [ 123.066360][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.074394][ T10] usb 1-1: Product: syz [ 123.078556][ T10] usb 1-1: Manufacturer: syz [ 123.083179][ T10] usb 1-1: SerialNumber: syz [ 123.115686][ T10] usb 1-1: selecting invalid altsetting 1 [ 123.575003][ T10] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 123.608850][ T10] cdc_ncm 1-1:1.0: bind() failure [ 123.621548][ T6538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.641165][ T10] usb 1-1: USB disconnect, device number 5 [ 123.660413][ T6538] FAULT_INJECTION: forcing a failure. [ 123.660413][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 123.713957][ T6538] CPU: 0 UID: 0 PID: 6538 Comm: syz.1.170 Not tainted syzkaller #0 PREEMPT(full) [ 123.713978][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.713988][ T6538] Call Trace: [ 123.713993][ T6538] [ 123.714000][ T6538] dump_stack_lvl+0x100/0x190 [ 123.714025][ T6538] should_fail_ex.cold+0x5/0xa [ 123.714047][ T6538] should_failslab+0xc2/0x120 [ 123.714069][ T6538] __kmalloc_noprof+0xfc/0x820 [ 123.714088][ T6538] ? tomoyo_encode2+0xfb/0x3c0 [ 123.714108][ T6538] tomoyo_encode2+0xfb/0x3c0 [ 123.714127][ T6538] tomoyo_encode+0x29/0x50 [ 123.714141][ T6538] tomoyo_realpath_from_path+0x18c/0x690 [ 123.714172][ T6538] tomoyo_path_number_perm+0x23c/0x580 [ 123.714196][ T6538] ? tomoyo_path_number_perm+0x22e/0x580 [ 123.714221][ T6538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.714273][ T6538] ? find_held_lock+0x2b/0x80 [ 123.714300][ T6538] ? __fget_files+0x215/0x3d0 [ 123.714317][ T6538] ? hook_file_ioctl_common+0x140/0x440 [ 123.714336][ T6538] ? __fget_files+0x215/0x3d0 [ 123.714357][ T6538] ? __fget_files+0x21f/0x3d0 [ 123.714378][ T6538] security_file_ioctl+0xd3/0x230 [ 123.714405][ T6538] __x64_sys_ioctl+0xb7/0x210 [ 123.714430][ T6538] do_syscall_64+0x115/0x870 [ 123.714450][ T6538] ? clear_bhb_loop+0x40/0x90 [ 123.714471][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.714488][ T6538] RIP: 0033:0x7f82e3f9de99 [ 123.714502][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.714517][ T6538] RSP: 002b:00007f82e4ee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.714533][ T6538] RAX: ffffffffffffffda RBX: 00007f82e4225fa0 RCX: 00007f82e3f9de99 [ 123.714544][ T6538] RDX: 0000200000000640 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 123.714553][ T6538] RBP: 00007f82e4ee1090 R08: 0000000000000000 R09: 0000000000000000 [ 123.714563][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.714572][ T6538] R13: 00007f82e4226038 R14: 00007f82e4225fa0 R15: 00007ffe835c2828 [ 123.714595][ T6538] [ 123.714617][ T6538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.759151][ T5897] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 123.781127][ T6544] FAULT_INJECTION: forcing a failure. [ 123.781127][ T6544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.952738][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.3.173 Not tainted syzkaller #0 PREEMPT(full) [ 123.952758][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.952766][ T6544] Call Trace: [ 123.952771][ T6544] [ 123.952776][ T6544] dump_stack_lvl+0x100/0x190 [ 123.952799][ T6544] should_fail_ex.cold+0x5/0xa [ 123.952818][ T6544] _copy_from_user+0x2e/0xd0 [ 123.952840][ T6544] do_ip6t_set_ctl+0x9b8/0xd00 [ 123.952856][ T6544] ? nf_sockopt_find.isra.0+0x222/0x290 [ 123.952875][ T6544] ? nf_sockopt_find.isra.0+0x222/0x290 [ 123.952897][ T6544] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 123.952916][ T6544] ? __mutex_unlock_slowpath+0x35d/0x930 [ 123.952940][ T6544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 123.952970][ T6544] ? nf_sockopt_find.isra.0+0x222/0x290 [ 123.952992][ T6544] nf_setsockopt+0x8d/0xf0 [ 123.953013][ T6544] ipv6_setsockopt+0x135/0x170 [ 123.953035][ T6544] tcp_setsockopt+0xa7/0x100 [ 123.953059][ T6544] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 123.953086][ T6544] do_sock_setsockopt+0xf3/0x1d0 [ 123.953113][ T6544] __sys_setsockopt+0x195/0x220 [ 123.953138][ T6544] __x64_sys_setsockopt+0xbd/0x160 [ 123.953165][ T6544] ? do_syscall_64+0x90/0x870 [ 123.953180][ T6544] ? lockdep_hardirqs_on+0x78/0x100 [ 123.953195][ T6544] do_syscall_64+0x115/0x870 [ 123.953210][ T6544] ? clear_bhb_loop+0x40/0x90 [ 123.953229][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.953244][ T6544] RIP: 0033:0x7f472b79de99 [ 123.953257][ T6544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.953271][ T6544] RSP: 002b:00007f47299f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 123.953286][ T6544] RAX: ffffffffffffffda RBX: 00007f472ba25fa0 RCX: 00007f472b79de99 [ 123.953295][ T6544] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 123.953304][ T6544] RBP: 00007f47299f6090 R08: 00000000000003c8 R09: 0000000000000000 [ 123.953312][ T6544] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 123.953321][ T6544] R13: 00007f472ba26038 R14: 00007f472ba25fa0 R15: 00007ffee1b9a3f8 [ 123.953341][ T6544] [ 123.964008][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.192864][ T5897] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 124.202061][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.220797][ T5897] usb 5-1: config 0 descriptor?? [ 124.270032][ T5342] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 124.394499][ T29] audit: type=1400 audit(1785302041.849:416): avc: denied { accept } for pid=6559 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.418473][ T29] audit: type=1400 audit(1785302041.869:417): avc: denied { sqpoll } for pid=6559 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 124.437616][ T5342] usb 2-1: device descriptor read/64, error -71 [ 124.480218][ T6532] netlink: 48 bytes leftover after parsing attributes in process `syz.4.169'. [ 124.497341][ T29] audit: type=1400 audit(1785302041.949:418): avc: denied { name_bind } for pid=6556 comm="syz.3.177" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 124.583093][ T29] audit: type=1400 audit(1785302041.949:419): avc: denied { read } for pid=6556 comm="syz.3.177" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.633410][ T29] audit: type=1400 audit(1785302041.949:420): avc: denied { open } for pid=6556 comm="syz.3.177" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.689249][ T5798] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.780596][ T5342] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.800014][ T6569] overlayfs: missing 'lowerdir' [ 124.860544][ T5798] usb 3-1: Using ep0 maxpacket: 8 [ 125.011826][ T5798] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 125.033278][ T5798] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 125.043333][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.058914][ T6535] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 125.068597][ T5798] usb 3-1: Product: syz [ 125.069137][ T5342] usb 2-1: device descriptor read/64, error -71 [ 125.090994][ T5798] usb 3-1: Manufacturer: syz [ 125.095897][ T6535] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 125.103173][ T5798] usb 3-1: SerialNumber: syz [ 125.113693][ T5798] usb 3-1: config 0 descriptor?? [ 125.135962][ T5798] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 125.150711][ T5798] usb 3-1: setting power ON [ 125.156056][ T5798] dvb-usb: bulk message failed: -22 (2/0) [ 125.168588][ T5798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.178268][ T5897] usb 5-1: string descriptor 0 read error: -71 [ 125.185722][ T5798] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 125.195487][ T5897] cypress_m8 5-1:0.0: DeLorme Earthmate USB converter detected [ 125.204808][ T5798] usb 3-1: media controller created [ 125.215629][ T5342] usb usb2-port1: attempt power cycle [ 125.223409][ T5897] earthmate ttyUSB0: required endpoint is missing [ 125.232061][ T5798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.252448][ T5897] usb 5-1: USB disconnect, device number 4 [ 125.280853][ T5897] cypress_m8 5-1:0.0: device disconnected [ 125.287435][ T5798] usb 3-1: selecting invalid altsetting 6 [ 125.300034][ T5798] usb 3-1: digital interface selection failed (-22) [ 125.307205][ T5798] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 125.325964][ T5798] usb 3-1: setting power OFF [ 125.335878][ T6560] dvb-usb: bulk message failed: -22 (3/0) [ 125.348158][ T5798] dvb-usb: bulk message failed: -22 (2/0) [ 125.357378][ T5743] kernel read not supported for file /dummy_udc (pid: 5743 comm: kworker/1:4) [ 125.450042][ T5798] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 125.466111][ T5798] (NULL device *): no alternate interface [ 125.491946][ T5798] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 125.516263][ T5798] usb 3-1: USB disconnect, device number 5 [ 125.589153][ T5743] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 125.744439][ T5743] usb 4-1: config 96 has an invalid interface number: 91 but max is 2 [ 125.753021][ T5743] usb 4-1: config 96 has an invalid descriptor of length 0, skipping remainder of the config [ 125.763510][ T5743] usb 4-1: config 96 has 1 interface, different from the descriptor's value: 3 [ 125.772824][ T5743] usb 4-1: config 96 has no interface number 0 [ 125.780745][ T5743] usb 4-1: config 96 interface 91 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 125.800307][ T5743] usb 4-1: config 96 interface 91 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 125.821526][ T5743] usb 4-1: config 96 interface 91 altsetting 9 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 125.860125][ T5743] usb 4-1: config 96 interface 91 altsetting 9 endpoint 0x4 has invalid maxpacket 1024, setting to 1023 [ 125.893163][ T6584] FAULT_INJECTION: forcing a failure. [ 125.893163][ T6584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.909191][ T29] audit: type=1400 audit(1785302043.349:421): avc: denied { ioctl } for pid=6583 comm="syz.4.185" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 125.936958][ T5743] usb 4-1: config 96 interface 91 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 125.949531][ T5743] usb 4-1: config 96 interface 91 altsetting 9 has 8 endpoint descriptors, different from the interface descriptor's value: 11 [ 125.967147][ T6584] CPU: 1 UID: 0 PID: 6584 Comm: syz.4.185 Not tainted syzkaller #0 PREEMPT(full) [ 125.967168][ T6584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.967178][ T6584] Call Trace: [ 125.967184][ T6584] [ 125.967191][ T6584] dump_stack_lvl+0x100/0x190 [ 125.967217][ T6584] should_fail_ex.cold+0x5/0xa [ 125.967240][ T6584] _copy_from_user+0x2e/0xd0 [ 125.967264][ T6584] core_sys_select+0x472/0xbb0 [ 125.967288][ T6584] ? __pfx_core_sys_select+0x10/0x10 [ 125.967304][ T6584] ? find_held_lock+0x2b/0x80 [ 125.967329][ T6584] ? get_pid_task+0xfc/0x250 [ 125.967379][ T6584] ? __pfx_set_user_sigmask+0x10/0x10 [ 125.967400][ T6584] ? __mutex_unlock_slowpath+0x35d/0x930 [ 125.967425][ T6584] do_pselect.constprop.0+0x238/0x270 [ 125.967445][ T6584] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 125.967467][ T6584] ? ksys_write+0x1ac/0x250 [ 125.967496][ T6584] __x64_sys_pselect6+0x149/0x1c0 [ 125.967517][ T6584] do_syscall_64+0x115/0x870 [ 125.967535][ T6584] ? clear_bhb_loop+0x40/0x90 [ 125.967556][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.967573][ T6584] RIP: 0033:0x7f1ef139de99 [ 125.967587][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.967603][ T6584] RSP: 002b:00007f1ef2341028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 125.967620][ T6584] RAX: ffffffffffffffda RBX: 00007f1ef1625fa0 RCX: 00007f1ef139de99 [ 125.967631][ T6584] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000040 [ 125.967646][ T6584] RBP: 00007f1ef2341090 R08: 0000000000000000 R09: 0000000000000000 [ 125.967656][ T6584] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 125.967666][ T6584] R13: 00007f1ef1626038 R14: 00007f1ef1625fa0 R15: 00007ffd3a586978 [ 125.967690][ T6584] [ 125.979016][ T5342] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 126.021538][ T5743] usb 4-1: config 96 interface 91 has no altsetting 0 [ 126.021695][ T29] audit: type=1400 audit(1785302043.429:422): avc: denied { mounton } for pid=6583 comm="syz.4.185" path="/40/file0" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 126.177095][ T5342] usb 2-1: device descriptor read/8, error -71 [ 126.214825][ T5743] usb 4-1: New USB device found, idVendor=2040, idProduct=5590, bcdDevice=99.6b [ 126.224461][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.246152][ T5743] usb 4-1: Product: syz [ 126.253573][ T5743] usb 4-1: Manufacturer: Ñ‹ [ 126.265536][ T5743] usb 4-1: SerialNumber: syz [ 126.274023][ T6574] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 126.334219][ T29] audit: type=1400 audit(1785302043.789:423): avc: denied { search } for pid=6591 comm="syz.2.188" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.356991][ T6590] capability: warning: `syz.0.186' uses 32-bit capabilities (legacy support in use) [ 126.366477][ T29] audit: type=1400 audit(1785302043.789:424): avc: denied { search } for pid=6591 comm="syz.2.188" name="usb_gadget" dev="configfs" ino=3154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.389600][ T29] audit: type=1400 audit(1785302043.789:425): avc: denied { search } for pid=6591 comm="syz.2.188" name="g1" dev="configfs" ino=9161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.412948][ T29] audit: type=1400 audit(1785302043.789:426): avc: denied { search } for pid=6591 comm="syz.2.188" name="functions" dev="configfs" ino=9162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.436024][ T29] audit: type=1400 audit(1785302043.829:427): avc: denied { getopt } for pid=6586 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.455366][ T29] audit: type=1400 audit(1785302043.839:428): avc: denied { ioctl } for pid=6586 comm="syz.0.186" path="socket:[11155]" dev="sockfs" ino=11155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.455391][ T5342] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.489663][ T5342] usb 2-1: device descriptor read/8, error -71 [ 126.501963][ T5743] smsusb:smsusb_probe: board id=8, interface number 91 [ 126.600040][ T5342] usb usb2-port1: unable to enumerate USB device [ 126.756433][ T5342] usb 4-1: USB disconnect, device number 6 [ 126.803179][ T6600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.816900][ T6600] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 126.828050][ T6600] netlink: zone id is out of range [ 126.833285][ T6600] netlink: zone id is out of range [ 126.838422][ T6600] netlink: zone id is out of range [ 126.844027][ T6600] netlink: zone id is out of range [ 126.849188][ T6600] netlink: zone id is out of range [ 126.854305][ T6600] netlink: zone id is out of range [ 126.859437][ T6600] netlink: zone id is out of range [ 126.864572][ T6600] netlink: zone id is out of range [ 126.912224][ T6598] bond1: (slave bridge0): Device is not bonding slave [ 126.919015][ T6598] bond1: option active_slave: invalid value (bridge0) [ 126.942833][ T6598] bond1 (unregistering): Released all slaves [ 127.194630][ T6605] overlayfs: missing 'lowerdir' [ 127.628683][ T29] audit: type=1400 audit(1785302045.079:429): avc: denied { create } for pid=6609 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 127.898886][ T29] audit: type=1400 audit(1785302045.349:430): avc: denied { append } for pid=6610 comm="syz.3.192" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 127.951894][ T6622] netlink: 88 bytes leftover after parsing attributes in process `syz.0.196'. [ 128.037943][ T29] audit: type=1400 audit(1785302045.489:431): avc: denied { name_bind } for pid=6623 comm="syz.2.195" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 128.040527][ T6624] FAULT_INJECTION: forcing a failure. [ 128.040527][ T6624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.120976][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.2.195 Not tainted syzkaller #0 PREEMPT(full) [ 128.120999][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 128.121008][ T6624] Call Trace: [ 128.121012][ T6624] [ 128.121016][ T6624] dump_stack_lvl+0x100/0x190 [ 128.121033][ T6624] should_fail_ex.cold+0x5/0xa [ 128.121048][ T6624] _copy_from_user+0x2e/0xd0 [ 128.121064][ T6624] copy_msghdr_from_user+0x9f/0x4c0 [ 128.121083][ T6624] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 128.121104][ T6624] ? rcu_is_watching+0x12/0xc0 [ 128.121121][ T6624] ? ___sys_recvmsg+0x177/0x1a0 [ 128.121142][ T6624] ? kfree+0x1e5/0x6c0 [ 128.121162][ T6624] ___sys_recvmsg+0xdd/0x1a0 [ 128.121180][ T6624] ? __pfx____sys_recvmsg+0x10/0x10 [ 128.121206][ T6624] ? __pfx___might_resched+0x10/0x10 [ 128.121222][ T6624] do_recvmmsg+0x2f3/0x740 [ 128.121242][ T6624] ? __pfx_do_recvmmsg+0x10/0x10 [ 128.121263][ T6624] ? __mutex_unlock_slowpath+0x35d/0x930 [ 128.121280][ T6624] ? __fget_files+0x21f/0x3d0 [ 128.121294][ T6624] __x64_sys_recvmmsg+0x22a/0x280 [ 128.121310][ T6624] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 128.121329][ T6624] do_syscall_64+0x115/0x870 [ 128.121341][ T6624] ? clear_bhb_loop+0x40/0x90 [ 128.121355][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.121367][ T6624] RIP: 0033:0x7f1510f9de99 [ 128.121376][ T6624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.121386][ T6624] RSP: 002b:00007f1511e88028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 128.121398][ T6624] RAX: ffffffffffffffda RBX: 00007f1511225fa0 RCX: 00007f1510f9de99 [ 128.121405][ T6624] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 128.121412][ T6624] RBP: 00007f1511e88090 R08: 0000000000000000 R09: 0000000000000000 [ 128.121418][ T6624] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 128.121424][ T6624] R13: 00007f1511226038 R14: 00007f1511225fa0 R15: 00007ffde72b32c8 [ 128.121438][ T6624] [ 128.509142][ T5798] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.638694][ T29] audit: type=1400 audit(1785302046.089:432): avc: denied { setopt } for pid=6631 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.689148][ T5798] usb 1-1: Using ep0 maxpacket: 8 [ 128.695670][ T5798] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 128.710228][ T5798] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 128.719849][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.727852][ T5798] usb 1-1: Product: syz [ 128.732612][ T5798] usb 1-1: Manufacturer: syz [ 128.741599][ T5798] usb 1-1: SerialNumber: syz [ 128.756502][ T5798] usb 1-1: config 0 descriptor?? [ 128.778277][ T5798] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 128.788192][ T5798] usb 1-1: setting power ON [ 128.793242][ T5798] dvb-usb: bulk message failed: -22 (2/0) [ 128.816790][ T5798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.834873][ T5798] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 128.854338][ T5798] usb 1-1: media controller created [ 128.878847][ T5798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.955443][ T5798] usb 1-1: selecting invalid altsetting 6 [ 128.977380][ T5798] usb 1-1: digital interface selection failed (-22) [ 128.992365][ T6626] dvb-usb: bulk message failed: -22 (3/0) [ 128.998472][ T5798] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 129.016701][ T5743] kernel read not supported for file /dummy_udc (pid: 5743 comm: kworker/1:4) [ 129.039289][ T5798] usb 1-1: setting power OFF [ 129.055723][ T5798] dvb-usb: bulk message failed: -22 (2/0) [ 129.066402][ T5798] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 129.077185][ T5798] (NULL device *): no alternate interface [ 129.842503][ T6654] overlayfs: missing 'lowerdir' [ 130.018166][ T6652] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 130.135229][ T5798] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 130.191936][ T5798] usb 1-1: USB disconnect, device number 6 [ 130.632218][ T6677] atomic_op ffff88802ab0a998 conn xmit_atomic 0000000000000000 [ 131.250131][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 131.269370][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 131.294906][ T6687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.217'. [ 131.426233][ T6689] netlink: 192 bytes leftover after parsing attributes in process `syz.2.215'. [ 131.864345][ T6701] overlay: Unknown parameter 'permit_directio' [ 132.373433][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.383902][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.162857][ T6719] atomic_op ffff888056da8998 conn xmit_atomic 0000000000000000 [ 134.568516][ T5798] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 134.682329][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 134.682343][ T29] audit: type=1400 audit(1785302052.139:438): avc: denied { map } for pid=6725 comm="syz.0.228" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 134.936649][ T5798] usb 2-1: Using ep0 maxpacket: 8 [ 135.007029][ T5733] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.033261][ T29] audit: type=1400 audit(1785302052.479:439): avc: denied { read write } for pid=6728 comm="syz.4.229" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.130335][ T5798] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 135.140212][ T5798] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 135.149462][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.157470][ T5798] usb 2-1: Product: syz [ 135.160399][ T29] audit: type=1400 audit(1785302052.479:440): avc: denied { open } for pid=6728 comm="syz.4.229" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.161652][ T5798] usb 2-1: Manufacturer: syz [ 135.190902][ T5798] usb 2-1: SerialNumber: syz [ 135.290953][ T5733] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 135.309094][ T29] audit: type=1400 audit(1785302052.489:441): avc: denied { ioctl } for pid=6728 comm="syz.4.229" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 135.360080][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.398968][ T5733] usb 3-1: Product: syz [ 135.428118][ T5733] usb 3-1: Manufacturer: syz [ 135.453690][ T5733] usb 3-1: SerialNumber: syz [ 135.959682][ T6734] mmap: syz.4.229 (6734) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.043614][ T5798] usb 2-1: config 0 descriptor?? [ 136.049531][ T5733] usb 3-1: config 0 descriptor?? [ 136.061798][ T5798] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 136.079196][ T5798] usb 2-1: setting power ON [ 136.083755][ T5798] dvb-usb: bulk message failed: -22 (2/0) [ 136.094886][ T5798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.108159][ T5798] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 136.116741][ T5798] usb 2-1: media controller created [ 136.131401][ T5798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.151370][ T5798] usb 2-1: selecting invalid altsetting 6 [ 136.157115][ T5798] usb 2-1: digital interface selection failed (-22) [ 136.165421][ T5798] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 136.174581][ T5798] usb 2-1: setting power OFF [ 136.179249][ T5798] dvb-usb: bulk message failed: -22 (2/0) [ 136.184982][ T5798] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 136.198824][ T5798] (NULL device *): no alternate interface [ 136.233959][ T6739] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 136.270129][ T6714] dvb-usb: bulk message failed: -22 (3/0) [ 136.298110][ T1220] kernel read not supported for file /dummy_udc (pid: 1220 comm: kworker/1:2) [ 136.317526][ T5733] usb 3-1: ignoring: probably an ADSL modem [ 136.519970][ T5798] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 136.797669][ T5733] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 137.267392][ T5798] usb 2-1: USB disconnect, device number 13 [ 137.779819][ T6752] hsr0: entered promiscuous mode [ 138.428779][ T6764] hsr0: entered promiscuous mode [ 138.446559][ T6764] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 139.153209][ T187] usb 3-1: USB disconnect, device number 6 [ 139.344702][ T29] audit: type=1400 audit(1785302056.799:442): avc: denied { load_policy } for pid=6777 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 139.420178][ T6778] SELinux: invalid class [ 139.458178][ T6778] SELinux: failed to load policy [ 139.579200][ T187] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.769150][ T6790] siw: device registration error -23 [ 140.075192][ T187] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 140.089545][ T187] usb 3-1: config 0 has no interface number 0 [ 140.209524][ T187] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 140.274171][ T187] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.287124][ T187] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 140.297015][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.305066][ T187] usb 3-1: Product: syz [ 140.310090][ T187] usb 3-1: Manufacturer: syz [ 140.314766][ T187] usb 3-1: SerialNumber: syz [ 140.325961][ T187] usb 3-1: config 0 descriptor?? [ 140.333410][ T6776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.342595][ T187] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 140.363157][ T187] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 140.533935][ T6793] FAULT_INJECTION: forcing a failure. [ 140.533935][ T6793] name failslab, interval 1, probability 0, space 0, times 0 [ 140.547332][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 140.565742][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(full) [ 140.565764][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.565775][ T6793] Call Trace: [ 140.565781][ T6793] [ 140.565790][ T6793] dump_stack_lvl+0x100/0x190 [ 140.565816][ T6793] should_fail_ex.cold+0x5/0xa [ 140.565839][ T6793] should_failslab+0xc2/0x120 [ 140.565862][ T6793] __kmalloc_noprof+0xfc/0x820 [ 140.565884][ T6793] ? tomoyo_encode2+0xfb/0x3c0 [ 140.565906][ T6793] tomoyo_encode2+0xfb/0x3c0 [ 140.565927][ T6793] tomoyo_encode+0x29/0x50 [ 140.565943][ T6793] tomoyo_realpath_from_path+0x18c/0x690 [ 140.565967][ T6793] tomoyo_path_number_perm+0x23c/0x580 [ 140.565990][ T6793] ? tomoyo_path_number_perm+0x22e/0x580 [ 140.566017][ T6793] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.566066][ T6793] ? find_held_lock+0x2b/0x80 [ 140.566101][ T6793] ? __fget_files+0x215/0x3d0 [ 140.566118][ T6793] ? hook_file_ioctl_common+0x140/0x440 [ 140.566137][ T6793] ? __fget_files+0x215/0x3d0 [ 140.566160][ T6793] ? __fget_files+0x21f/0x3d0 [ 140.566182][ T6793] security_file_ioctl+0xd3/0x230 [ 140.566209][ T6793] __x64_sys_ioctl+0xb7/0x210 [ 140.566236][ T6793] do_syscall_64+0x115/0x870 [ 140.566256][ T6793] ? clear_bhb_loop+0x40/0x90 [ 140.566278][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.566296][ T6793] RIP: 0033:0x7fc505f9de99 [ 140.566311][ T6793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.566328][ T6793] RSP: 002b:00007fc506f0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.566345][ T6793] RAX: ffffffffffffffda RBX: 00007fc506225fa0 RCX: 00007fc505f9de99 [ 140.566356][ T6793] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 140.566367][ T6793] RBP: 00007fc506f0a090 R08: 0000000000000000 R09: 0000000000000000 [ 140.566377][ T6793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.566387][ T6793] R13: 00007fc506226038 R14: 00007fc506225fa0 R15: 00007ffe0e6d0ab8 [ 140.566412][ T6793] [ 140.567008][ T6793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.596270][ T5897] usb 3-1: USB disconnect, device number 7 [ 140.821916][ T6798] binder: BINDER_SET_CONTEXT_MGR already set [ 140.833754][ T6798] binder: 6797:6798 ioctl 4018620d 200000000100 returned -16 [ 140.846712][ T5897] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 140.861557][ T5897] cyberjack 3-1:0.69: device disconnected [ 140.993553][ T6806] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 141.013421][ T29] audit: type=1400 audit(1785302058.469:443): avc: denied { setopt } for pid=6807 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.768064][ T29] audit: type=1400 audit(1785302059.179:444): avc: denied { write } for pid=6805 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.031673][ T29] audit: type=1400 audit(1785302059.179:445): avc: denied { read } for pid=6805 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.097195][ T6804] FAULT_INJECTION: forcing a failure. [ 142.097195][ T6804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.163113][ T29] audit: type=1400 audit(1785302059.619:446): avc: denied { checkpoint_restore } for pid=6815 comm="syz.1.250" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.214455][ T6804] CPU: 1 UID: 0 PID: 6804 Comm: syz.2.247 Not tainted syzkaller #0 PREEMPT(full) [ 142.214476][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 142.214487][ T6804] Call Trace: [ 142.214493][ T6804] [ 142.214500][ T6804] dump_stack_lvl+0x100/0x190 [ 142.214527][ T6804] should_fail_ex.cold+0x5/0xa [ 142.214550][ T6804] _copy_from_iter+0x1f4/0x1690 [ 142.214580][ T6804] ? __pfx__copy_from_iter+0x10/0x10 [ 142.214602][ T6804] ? trace_kmalloc+0xeb/0x110 [ 142.214624][ T6804] ? __kasan_kmalloc+0xaa/0xb0 [ 142.214646][ T6804] ? __kmalloc_noprof+0x343/0x820 [ 142.214667][ T6804] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 142.214694][ T6804] kernfs_fop_write_iter+0x186/0x5f0 [ 142.214721][ T6804] vfs_write+0x6ac/0x1050 [ 142.214749][ T6804] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 142.214775][ T6804] ? __pfx_vfs_write+0x10/0x10 [ 142.214817][ T6804] ksys_write+0x12a/0x250 [ 142.214843][ T6804] ? __pfx_ksys_write+0x10/0x10 [ 142.214877][ T6804] do_syscall_64+0x115/0x870 [ 142.214897][ T6804] ? clear_bhb_loop+0x40/0x90 [ 142.214919][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.214938][ T6804] RIP: 0033:0x7f1510f9de99 [ 142.214953][ T6804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.214970][ T6804] RSP: 002b:00007f1511e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 142.214987][ T6804] RAX: ffffffffffffffda RBX: 00007f1511225fa0 RCX: 00007f1510f9de99 [ 142.214998][ T6804] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000003 [ 142.215008][ T6804] RBP: 00007f1511e88090 R08: 0000000000000000 R09: 0000000000000000 [ 142.215020][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.215030][ T6804] R13: 00007f1511226038 R14: 00007f1511225fa0 R15: 00007ffde72b32c8 [ 142.215054][ T6804] [ 142.529467][ T6826] FAULT_INJECTION: forcing a failure. [ 142.529467][ T6826] name failslab, interval 1, probability 0, space 0, times 0 [ 142.536246][ T6820] netlink: 276 bytes leftover after parsing attributes in process `syz.2.253'. [ 142.542107][ T6826] CPU: 1 UID: 0 PID: 6826 Comm: syz.3.252 Not tainted syzkaller #0 PREEMPT(full) [ 142.542126][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 142.542135][ T6826] Call Trace: [ 142.542141][ T6826] [ 142.542147][ T6826] dump_stack_lvl+0x100/0x190 [ 142.542170][ T6826] should_fail_ex.cold+0x5/0xa [ 142.542187][ T6826] ? __lock_acquire+0x49f/0x1a40 [ 142.542208][ T6826] should_failslab+0xc2/0x120 [ 142.542229][ T6826] kmem_cache_alloc_noprof+0x91/0x6a0 [ 142.542249][ T6826] ? dst_alloc+0x99/0x1a0 [ 142.542269][ T6826] dst_alloc+0x99/0x1a0 [ 142.542284][ T6826] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 142.542309][ T6826] rt_dst_alloc+0x35/0x3a0 [ 142.542327][ T6826] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 142.542355][ T6826] ip_route_output_key_hash+0x118/0x2b0 [ 142.542377][ T6826] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 142.542404][ T6826] ? find_held_lock+0x2b/0x80 [ 142.542431][ T6826] ip_route_output_flow+0x27/0x150 [ 142.542453][ T6826] udp_sendmsg+0x198a/0x2720 [ 142.542475][ T6826] ? __pfx_udp_sendmsg+0x10/0x10 [ 142.542503][ T6826] ? reacquire_held_locks+0xce/0x1e0 [ 142.542521][ T6826] ? release_sock+0x21/0x280 [ 142.542543][ T6826] ? inet_autobind+0x145/0x1a0 [ 142.542558][ T6826] ? find_held_lock+0x2b/0x80 [ 142.542590][ T6826] ? lockdep_hardirqs_on+0x78/0x100 [ 142.542607][ T6826] ? inet_autobind+0x145/0x1a0 [ 142.542621][ T6826] ? __local_bh_enable_ip+0x9e/0x120 [ 142.542642][ T6826] ? inet_autobind+0x14a/0x1a0 [ 142.542658][ T6826] ? __pfx_udp_sendmsg+0x10/0x10 [ 142.542674][ T6826] inet_sendmsg+0x105/0x140 [ 142.542694][ T6826] __sys_sendto+0x453/0x4e0 [ 142.542710][ T6826] ? __pfx_inet_sendmsg+0x10/0x10 [ 142.542730][ T6826] ? __pfx___sys_sendto+0x10/0x10 [ 142.542754][ T6826] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.542780][ T6826] ? ksys_write+0x1ac/0x250 [ 142.542804][ T6826] ? __pfx_ksys_write+0x10/0x10 [ 142.542830][ T6826] __x64_sys_sendto+0xe0/0x1c0 [ 142.542846][ T6826] ? do_syscall_64+0x90/0x870 [ 142.542863][ T6826] ? lockdep_hardirqs_on+0x78/0x100 [ 142.542879][ T6826] do_syscall_64+0x115/0x870 [ 142.542895][ T6826] ? clear_bhb_loop+0x40/0x90 [ 142.542914][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.542930][ T6826] RIP: 0033:0x7f472b79de99 [ 142.542943][ T6826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.542958][ T6826] RSP: 002b:00007f47299f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 142.542973][ T6826] RAX: ffffffffffffffda RBX: 00007f472ba25fa0 RCX: 00007f472b79de99 [ 142.542983][ T6826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 142.542992][ T6826] RBP: 00007f47299f6090 R08: 0000200000000700 R09: 0000000000000010 [ 142.543001][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.543010][ T6826] R13: 00007f472ba26038 R14: 00007f472ba25fa0 R15: 00007ffee1b9a3f8 [ 142.543031][ T6826] [ 142.953940][ T29] audit: type=1400 audit(1785302060.409:447): avc: denied { read write } for pid=6839 comm="syz.0.256" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 142.983240][ T6841] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 142.996637][ T6842] openvswitch: netlink: Key type 153 is out of range max 32 [ 143.004754][ T29] audit: type=1400 audit(1785302060.439:448): avc: denied { open } for pid=6839 comm="syz.0.256" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 143.033323][ T29] audit: type=1400 audit(1785302060.459:449): avc: denied { bind } for pid=6827 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.145256][ T6850] veth1_macvtap: left promiscuous mode [ 143.159166][ T5798] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 143.164603][ T6850] macsec0: entered promiscuous mode [ 143.172020][ T6850] macsec0: entered allmulticast mode [ 143.188370][ T29] audit: type=1400 audit(1785302060.639:450): avc: denied { create } for pid=6847 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.216402][ T29] audit: type=1400 audit(1785302060.639:451): avc: denied { connect } for pid=6847 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.229228][ T6850] veth1_macvtap: entered promiscuous mode [ 143.236257][ T29] audit: type=1400 audit(1785302060.669:452): avc: denied { write } for pid=6847 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.249023][ T6850] veth1_macvtap: entered allmulticast mode [ 143.267561][ T6850] macsec0: left promiscuous mode [ 143.274123][ T6850] macsec0: left allmulticast mode [ 143.279415][ T6850] veth1_macvtap: left allmulticast mode [ 143.319486][ T5798] usb 5-1: device descriptor read/64, error -71 [ 143.430090][ T1220] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 143.568916][ T6869] FAULT_INJECTION: forcing a failure. [ 143.568916][ T6869] name failslab, interval 1, probability 0, space 0, times 0 [ 143.582271][ T6869] CPU: 1 UID: 0 PID: 6869 Comm: syz.0.265 Not tainted syzkaller #0 PREEMPT(full) [ 143.582293][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 143.582303][ T6869] Call Trace: [ 143.582309][ T6869] [ 143.582316][ T6869] dump_stack_lvl+0x100/0x190 [ 143.582342][ T6869] should_fail_ex.cold+0x5/0xa [ 143.582364][ T6869] should_failslab+0xc2/0x120 [ 143.582386][ T6869] __kmalloc_noprof+0xfc/0x820 [ 143.582404][ T6869] ? rcu_is_watching+0x12/0xc0 [ 143.582428][ T6869] ? tomoyo_realpath_from_path+0xb6/0x690 [ 143.582449][ T6869] tomoyo_realpath_from_path+0xb6/0x690 [ 143.582468][ T6869] tomoyo_path_number_perm+0x23c/0x580 [ 143.582488][ T6869] ? tomoyo_path_number_perm+0x22e/0x580 [ 143.582510][ T6869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 143.582553][ T6869] ? find_held_lock+0x2b/0x80 [ 143.582590][ T6869] ? __fget_files+0x215/0x3d0 [ 143.582605][ T6869] ? hook_file_ioctl_common+0x140/0x440 [ 143.582620][ T6869] ? __fget_files+0x215/0x3d0 [ 143.582638][ T6869] ? __fget_files+0x21f/0x3d0 [ 143.582657][ T6869] security_file_ioctl+0xd3/0x230 [ 143.582681][ T6869] __x64_sys_ioctl+0xb7/0x210 [ 143.582705][ T6869] do_syscall_64+0x115/0x870 [ 143.582721][ T6869] ? clear_bhb_loop+0x40/0x90 [ 143.582742][ T6869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.582760][ T6869] RIP: 0033:0x7fc505f9de99 [ 143.582773][ T6869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.582789][ T6869] RSP: 002b:00007fc506f0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.582805][ T6869] RAX: ffffffffffffffda RBX: 00007fc506225fa0 RCX: 00007fc505f9de99 [ 143.582841][ T6869] RDX: 0000200000000240 RSI: 00000000c0185500 RDI: 0000000000000004 [ 143.582848][ T6869] RBP: 00007fc506f0a090 R08: 0000000000000000 R09: 0000000000000000 [ 143.582854][ T6869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.582860][ T6869] R13: 00007fc506226038 R14: 00007fc506225fa0 R15: 00007ffe0e6d0ab8 [ 143.582875][ T6869] [ 143.582968][ T6869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.602852][ T5798] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.620326][ T1220] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.620355][ T1220] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 143.620379][ T1220] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 143.621852][ T1220] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 143.852513][ T6873] Mount JFS Failure: -22 [ 143.857676][ T6873] jfs_mount failed w/return code = -22 [ 143.871847][ T1220] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 143.880731][ T1220] usb 2-1: Manufacturer: syz [ 143.885340][ T1220] usb 2-1: SerialNumber: syz [ 143.919321][ T5798] usb 5-1: device descriptor read/64, error -71 [ 144.030346][ T5798] usb usb5-port1: attempt power cycle [ 144.109368][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.251160][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.347492][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.370737][ T5798] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 144.403508][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.466389][ T5798] usb 5-1: device descriptor read/8, error -71 [ 144.522933][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.597163][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.849181][ T5798] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 144.913529][ T1220] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 144.949296][ T5798] usb 5-1: device descriptor read/8, error -71 [ 144.986720][ T1220] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input5 [ 145.029944][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 145.036932][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 145.044328][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 145.051537][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 145.058477][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 145.065425][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 145.072421][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 145.079415][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 145.086174][ C1] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 145.097106][ T5798] usb usb5-port1: unable to enumerate USB device [ 145.138539][ T1220] usb 2-1: USB disconnect, device number 14 [ 145.342039][ T6892] FAULT_INJECTION: forcing a failure. [ 145.342039][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.357824][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.2.271 Not tainted syzkaller #0 PREEMPT(full) [ 145.357846][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 145.357857][ T6892] Call Trace: [ 145.357862][ T6892] [ 145.357869][ T6892] dump_stack_lvl+0x100/0x190 [ 145.357894][ T6892] should_fail_ex.cold+0x5/0xa [ 145.357918][ T6892] _copy_to_user+0x32/0xd0 [ 145.357943][ T6892] copy_siginfo_to_user+0x27/0xc0 [ 145.357969][ T6892] x64_setup_rt_frame+0xa03/0xce0 [ 145.357994][ T6892] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 145.358020][ T6892] arch_do_signal_or_restart+0x5ee/0x7e0 [ 145.358041][ T6892] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 145.358067][ T6892] ? fput+0x79/0x100 [ 145.358098][ T6892] exit_to_user_mode_loop+0x139/0x6f0 [ 145.358122][ T6892] ? rcu_is_watching+0x12/0xc0 [ 145.358150][ T6892] do_syscall_64+0x666/0x870 [ 145.358169][ T6892] ? clear_bhb_loop+0x40/0x90 [ 145.358190][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.358208][ T6892] RIP: 0033:0x7f1510f5e6ce [ 145.358222][ T6892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 145.358237][ T6892] RSP: 002b:00007f1511e66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 145.358255][ T6892] RAX: 0000000000000001 RBX: 00007f1511e676c0 RCX: 00007f1510f5e6ce [ 145.358265][ T6892] RDX: 0000000000000001 RSI: 00007f1511e67090 RDI: 0000000000000005 [ 145.358276][ T6892] RBP: 00007f1511e67090 R08: 0000000000000000 R09: 0000000000000000 [ 145.358285][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.358295][ T6892] R13: 00007f1511226128 R14: 00007f1511226090 R15: 00007ffde72b32c8 [ 145.358318][ T6892] [ 145.645792][ T6896] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 145.675085][ T6896] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 145.737190][ T6905] syzkaller0: entered promiscuous mode [ 145.755013][ T6905] syzkaller0: entered allmulticast mode [ 146.738898][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 146.940962][ T6916] atomic_op ffff888037033998 conn xmit_atomic 0000000000000000 [ 147.464372][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 147.464386][ T29] audit: type=1400 audit(1785302064.919:460): avc: denied { mount } for pid=6917 comm="syz.0.281" name="/" dev="hugetlbfs" ino=11981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 147.621375][ T6923] netlink: 68 bytes leftover after parsing attributes in process `syz.0.281'. [ 147.631086][ T6923] netlink: 48 bytes leftover after parsing attributes in process `syz.0.281'. [ 148.394296][ T29] audit: type=1400 audit(1785302065.839:461): avc: denied { mounton } for pid=6936 comm="syz.4.288" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 149.090415][ T6957] FAULT_INJECTION: forcing a failure. [ 149.090415][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 149.095661][ T6959] FAULT_INJECTION: forcing a failure. [ 149.095661][ T6959] name failslab, interval 1, probability 0, space 0, times 0 [ 149.139141][ T6959] CPU: 0 UID: 0 PID: 6959 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 149.139161][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 149.139170][ T6959] Call Trace: [ 149.139175][ T6959] [ 149.139180][ T6959] dump_stack_lvl+0x100/0x190 [ 149.139202][ T6959] should_fail_ex.cold+0x5/0xa [ 149.139222][ T6959] should_failslab+0xc2/0x120 [ 149.139241][ T6959] __kmalloc_noprof+0xfc/0x820 [ 149.139259][ T6959] ? tomoyo_encode2+0xfb/0x3c0 [ 149.139277][ T6959] tomoyo_encode2+0xfb/0x3c0 [ 149.139294][ T6959] tomoyo_encode+0x29/0x50 [ 149.139307][ T6959] tomoyo_realpath_from_path+0x18c/0x690 [ 149.139326][ T6959] tomoyo_path_number_perm+0x23c/0x580 [ 149.139346][ T6959] ? tomoyo_path_number_perm+0x22e/0x580 [ 149.139368][ T6959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.139409][ T6959] ? find_held_lock+0x2b/0x80 [ 149.139431][ T6959] ? __fget_files+0x215/0x3d0 [ 149.139446][ T6959] ? hook_file_ioctl_common+0x140/0x440 [ 149.139462][ T6959] ? __fget_files+0x215/0x3d0 [ 149.139480][ T6959] ? __fget_files+0x21f/0x3d0 [ 149.139501][ T6959] security_file_ioctl+0xd3/0x230 [ 149.139525][ T6959] __x64_sys_ioctl+0xb7/0x210 [ 149.139548][ T6959] do_syscall_64+0x115/0x870 [ 149.139569][ T6959] ? clear_bhb_loop+0x40/0x90 [ 149.139587][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.139602][ T6959] RIP: 0033:0x7fc505f9de99 [ 149.139614][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.139628][ T6959] RSP: 002b:00007fc506f0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.139642][ T6959] RAX: ffffffffffffffda RBX: 00007fc506225fa0 RCX: 00007fc505f9de99 [ 149.139651][ T6959] RDX: 0000200000000580 RSI: 00000000c03864bc RDI: 0000000000000003 [ 149.139660][ T6959] RBP: 00007fc506f0a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.139669][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.139677][ T6959] R13: 00007fc506226038 R14: 00007fc506225fa0 R15: 00007ffe0e6d0ab8 [ 149.139697][ T6959] [ 149.139704][ T6957] CPU: 1 UID: 0 PID: 6957 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(full) [ 149.139724][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 149.139726][ T6959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 149.139733][ T6957] Call Trace: [ 149.139739][ T6957] [ 149.139745][ T6957] dump_stack_lvl+0x100/0x190 [ 149.139764][ T6957] should_fail_ex.cold+0x5/0xa [ 149.139784][ T6957] should_failslab+0xc2/0x120 [ 149.139803][ T6957] __kmalloc_noprof+0xfc/0x820 [ 149.139822][ T6957] ? io_cache_alloc_new+0x45/0xe0 [ 149.139844][ T6957] io_cache_alloc_new+0x45/0xe0 [ 149.139862][ T6957] __io_prep_rw+0x21d/0xfb0 [ 149.139883][ T6957] ? __pfx___io_prep_rw+0x10/0x10 [ 149.139905][ T6957] ? __io_alloc_req_refill+0x2e1/0x330 [ 149.139932][ T6957] io_prep_rw+0x76/0x2c0 [ 149.139950][ T6957] ? __pfx_io_prep_rw+0x10/0x10 [ 149.139976][ T6957] io_submit_sqes+0xa03/0x2480 [ 149.140009][ T6957] __do_sys_io_uring_enter+0xa88/0x1b10 [ 149.140035][ T6957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.140062][ T6957] ? __fget_files+0x21f/0x3d0 [ 149.140077][ T6957] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 149.140103][ T6957] ? fput+0x79/0x100 [ 149.140121][ T6957] ? ksys_write+0x1ac/0x250 [ 149.140144][ T6957] ? __pfx_ksys_write+0x10/0x10 [ 149.140173][ T6957] do_syscall_64+0x115/0x870 [ 149.140189][ T6957] ? clear_bhb_loop+0x40/0x90 [ 149.140208][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.140223][ T6957] RIP: 0033:0x7f1ef139de99 [ 149.140235][ T6957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.140250][ T6957] RSP: 002b:00007f1ef2341028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 149.140263][ T6957] RAX: ffffffffffffffda RBX: 00007f1ef1625fa0 RCX: 00007f1ef139de99 [ 149.140273][ T6957] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 149.140282][ T6957] RBP: 00007f1ef2341090 R08: 0000000000000000 R09: 0000000000000000 [ 149.140291][ T6957] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 149.140300][ T6957] R13: 00007f1ef1626038 R14: 00007f1ef1625fa0 R15: 00007ffd3a586978 [ 149.140321][ T6957] [ 149.203761][ T6963] sctp: [Deprecated]: syz.3.294 (pid 6963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.203761][ T6963] Use struct sctp_sack_info instead [ 149.747509][ T6979] binder: 6978:6979 ioctl c0306201 0 returned -14 [ 149.754577][ T29] audit: type=1400 audit(1785302067.159:462): avc: denied { map } for pid=6978 comm="syz.0.298" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 149.778383][ T29] audit: type=1400 audit(1785302067.169:463): avc: denied { call } for pid=6978 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 149.797179][ T29] audit: type=1400 audit(1785302067.169:464): avc: denied { transfer } for pid=6978 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 149.927178][ T6981] siw: device registration error -23 [ 150.209119][ T187] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 151.001908][ T187] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 151.024664][ T187] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.043330][ T187] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.055700][ T187] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.068147][ T187] usb 2-1: Product: syz [ 151.074282][ T187] usb 2-1: Manufacturer: syz [ 151.143696][ T6998] netlink: 68 bytes leftover after parsing attributes in process `syz.3.303'. [ 151.958769][ T187] usb 2-1: SerialNumber: syz [ 151.965939][ T187] usb 2-1: config 0 descriptor?? [ 151.987375][ T187] usb 2-1: selecting invalid altsetting 0 [ 152.177752][ T6986] FAULT_INJECTION: forcing a failure. [ 152.177752][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 152.217686][ T6986] CPU: 0 UID: 0 PID: 6986 Comm: syz.1.300 Not tainted syzkaller #0 PREEMPT(full) [ 152.217708][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.217718][ T6986] Call Trace: [ 152.217724][ T6986] [ 152.217731][ T6986] dump_stack_lvl+0x100/0x190 [ 152.217758][ T6986] should_fail_ex.cold+0x5/0xa [ 152.217781][ T6986] should_failslab+0xc2/0x120 [ 152.217804][ T6986] __kmalloc_cache_noprof+0x91/0x6c0 [ 152.217833][ T6986] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 152.217867][ T6986] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 152.217896][ T6986] ? rcu_is_watching+0x12/0xc0 [ 152.217922][ T6986] ? trace_contention_end+0x126/0x160 [ 152.217947][ T6986] ? __mutex_lock+0x26d/0x1bd0 [ 152.217967][ T6986] ? snd_pcm_oss_write+0x49a/0xa30 [ 152.217995][ T6986] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 152.218025][ T6986] ? __pfx___mutex_lock+0x10/0x10 [ 152.218052][ T6986] ? get_pid_task+0xfc/0x250 [ 152.218079][ T6986] ? get_pid_task+0xfc/0x250 [ 152.218109][ T6986] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 152.218138][ T6986] snd_pcm_oss_write+0x4bb/0xa30 [ 152.218166][ T6986] ? bpf_lsm_file_permission+0x9/0x10 [ 152.218192][ T6986] ? security_file_permission+0x76/0x210 [ 152.218216][ T6986] vfs_write+0x2aa/0x1050 [ 152.218243][ T6986] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 152.218273][ T6986] ? __pfx_vfs_write+0x10/0x10 [ 152.218297][ T6986] ? find_held_lock+0x2b/0x80 [ 152.218323][ T6986] ? __fget_files+0x215/0x3d0 [ 152.218340][ T6986] ? __fget_files+0x215/0x3d0 [ 152.218361][ T6986] ? __fget_files+0x21f/0x3d0 [ 152.218386][ T6986] ksys_write+0x12a/0x250 [ 152.218412][ T6986] ? __pfx_ksys_write+0x10/0x10 [ 152.218445][ T6986] do_syscall_64+0x115/0x870 [ 152.218464][ T6986] ? clear_bhb_loop+0x40/0x90 [ 152.218485][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.218504][ T6986] RIP: 0033:0x7f82e3f9de99 [ 152.218519][ T6986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.218535][ T6986] RSP: 002b:00007f82e4ee1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.218558][ T6986] RAX: ffffffffffffffda RBX: 00007f82e4225fa0 RCX: 00007f82e3f9de99 [ 152.218569][ T6986] RDX: 00000000fffffcd9 RSI: 0000200000002200 RDI: 0000000000000007 [ 152.218580][ T6986] RBP: 00007f82e4ee1090 R08: 0000000000000000 R09: 0000000000000000 [ 152.218590][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.218601][ T6986] R13: 00007f82e4226038 R14: 00007f82e4225fa0 R15: 00007ffe835c2828 [ 152.218625][ T6986] [ 152.505519][ T1220] usb 2-1: USB disconnect, device number 15 [ 152.958386][ T7008] syzkaller0: entered promiscuous mode [ 152.967477][ T7008] syzkaller0: entered allmulticast mode [ 152.976431][ T7008] FAULT_INJECTION: forcing a failure. [ 152.976431][ T7008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.991539][ T7008] CPU: 1 UID: 0 PID: 7008 Comm: syz.4.308 Not tainted syzkaller #0 PREEMPT(full) [ 152.991560][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.991570][ T7008] Call Trace: [ 152.991576][ T7008] [ 152.991583][ T7008] dump_stack_lvl+0x100/0x190 [ 152.991608][ T7008] should_fail_ex.cold+0x5/0xa [ 152.991630][ T7008] _copy_from_user+0x2e/0xd0 [ 152.991655][ T7008] move_addr_to_kernel+0x65/0x170 [ 152.991688][ T7008] copy_msghdr_from_user+0x3f0/0x4c0 [ 152.991716][ T7008] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 152.991755][ T7008] ___sys_sendmsg+0x106/0x1e0 [ 152.991783][ T7008] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.991809][ T7008] ? __lock_acquire+0x49f/0x1a40 [ 152.991830][ T7008] ? get_pid_task+0x106/0x250 [ 152.991884][ T7008] __sys_sendmsg+0x160/0x210 [ 152.991906][ T7008] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.991938][ T7008] do_syscall_64+0x115/0x870 [ 152.991957][ T7008] ? clear_bhb_loop+0x40/0x90 [ 152.991977][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.991995][ T7008] RIP: 0033:0x7f1ef139de99 [ 152.992009][ T7008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.992025][ T7008] RSP: 002b:00007f1ef2341028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.992047][ T7008] RAX: ffffffffffffffda RBX: 00007f1ef1625fa0 RCX: 00007f1ef139de99 [ 152.992058][ T7008] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 152.992068][ T7008] RBP: 00007f1ef2341090 R08: 0000000000000000 R09: 0000000000000000 [ 152.992077][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.992087][ T7008] R13: 00007f1ef1626038 R14: 00007f1ef1625fa0 R15: 00007ffd3a586978 [ 152.992110][ T7008] [ 153.059205][ T187] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.106568][ T7011] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 153.206152][ T7012] CIFS: VFS: UNC: path must begin with // or \\ [ 153.212449][ T7012] Malformed UNC in devname [ 153.212449][ T7012] [ 153.219186][ T7012] CIFS: VFS: Malformed UNC in devname [ 153.327614][ T7013] netlink: 36 bytes leftover after parsing attributes in process `syz.1.309'. [ 153.339228][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.392938][ T29] audit: type=1400 audit(1785302070.649:465): avc: denied { create } for pid=7001 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 153.433960][ T29] audit: type=1400 audit(1785302070.659:466): avc: denied { getopt } for pid=7001 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 153.517765][ T7016] lo speed is unknown, defaulting to 1000 [ 153.519289][ T5897] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.561235][ T187] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.571087][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 153.571476][ T187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.577405][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 153.587183][ T187] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.595024][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 153.604042][ T187] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.615546][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 153.627473][ T187] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.637356][ T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 153.637383][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 153.639702][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 153.646831][ T187] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.661100][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 153.666257][ T187] usb 4-1: Product: syz [ 153.675622][ T24] usb 3-1: Product: syz [ 153.700359][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 153.702925][ T187] usb 4-1: Manufacturer: syz [ 153.706044][ T24] usb 3-1: Manufacturer: syz [ 153.714985][ T24] usb 3-1: SerialNumber: syz [ 153.718799][ T187] cdc_wdm 4-1:1.0: skipping garbage [ 153.719921][ T5897] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 153.726925][ T187] cdc_wdm 4-1:1.0: skipping garbage [ 153.734064][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.746483][ T187] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 153.750321][ T5897] usb 1-1: config 0 has no interface number 0 [ 153.755574][ T187] cdc_wdm 4-1:1.0: Unknown control protocol [ 153.761995][ T24] usb 3-1: config 0 descriptor?? [ 153.777459][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 153.788693][ T5897] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 153.799745][ T1220] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 153.809315][ T5897] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 153.819211][ T5897] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 153.830616][ T24] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 153.839151][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 153.847218][ T5897] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 153.857237][ T5897] usb 1-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 153.872125][ T5897] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 153.881184][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.889195][ T5897] usb 1-1: Product: syz [ 153.893350][ T5897] usb 1-1: Manufacturer: syz [ 153.897912][ T5897] usb 1-1: SerialNumber: syz [ 153.903997][ T5897] usb 1-1: config 0 descriptor?? [ 153.909575][ T7012] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 153.930182][ T29] audit: type=1400 audit(1785302071.389:467): avc: denied { getopt } for pid=6999 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 153.952348][ T29] audit: type=1400 audit(1785302071.389:468): avc: denied { read write } for pid=6999 comm="syz.3.304" name="cdc-wdm0" dev="devtmpfs" ino=2902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 153.976887][ T29] audit: type=1400 audit(1785302071.389:469): avc: denied { open } for pid=6999 comm="syz.3.304" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 153.989320][ T24] usb 3-1: USB disconnect, device number 8 [ 154.005839][ T29] audit: type=1400 audit(1785302071.389:470): avc: denied { module_request } for pid=6999 comm="syz.3.304" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 154.028950][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.034528][ T1220] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.038374][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.046355][ T1220] usb 5-1: not running at top speed; connect to a high speed hub [ 154.059815][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 154.063906][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.080701][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.081149][ T24] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 154.090981][ T9] usb 2-1: config 0 descriptor?? [ 154.106432][ T1220] usb 5-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 154.110127][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 154.131217][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 154.131353][ T187] usb 4-1: USB disconnect, device number 7 [ 154.137892][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 154.149722][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 154.181218][ T1220] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.193635][ T1220] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 154.202977][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.211158][ T1220] usb 5-1: Product: syz [ 154.212966][ T7004] netlink: zone id is out of range [ 154.215356][ T1220] usb 5-1: Manufacturer: syz [ 154.222029][ T7004] netlink: zone id is out of range [ 154.225154][ T1220] usb 5-1: SerialNumber: syz [ 154.308171][ T7016] FAULT_INJECTION: forcing a failure. [ 154.308171][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 154.321793][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.1.310 Not tainted syzkaller #0 PREEMPT(full) [ 154.321814][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 154.321825][ T7016] Call Trace: [ 154.321830][ T7016] [ 154.321836][ T7016] dump_stack_lvl+0x100/0x190 [ 154.321862][ T7016] should_fail_ex.cold+0x5/0xa [ 154.321885][ T7016] should_failslab+0xc2/0x120 [ 154.321908][ T7016] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 154.321930][ T7016] ? __alloc_skb+0x5b7/0x710 [ 154.321950][ T7016] ? __alloc_skb+0x140/0x710 [ 154.321973][ T7016] __alloc_skb+0x140/0x710 [ 154.321992][ T7016] ? __alloc_skb+0x5b7/0x710 [ 154.322011][ T7016] ? __pfx___alloc_skb+0x10/0x10 [ 154.322044][ T7016] netlink_alloc_large_skb+0x69/0x150 [ 154.322064][ T7016] netlink_sendmsg+0x680/0xda0 [ 154.322085][ T7016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.322105][ T7016] ? selinux_socket_sendmsg+0x198/0x2f0 [ 154.322135][ T7016] ____sys_sendmsg+0xa4d/0xbe0 [ 154.322159][ T7016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.322178][ T7016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.322214][ T7016] ___sys_sendmsg+0x190/0x1e0 [ 154.322243][ T7016] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.322269][ T7016] ? __lock_acquire+0x49f/0x1a40 [ 154.322290][ T7016] ? get_pid_task+0x106/0x250 [ 154.322344][ T7016] __sys_sendmsg+0x160/0x210 [ 154.322366][ T7016] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.322401][ T7016] do_syscall_64+0x115/0x870 [ 154.322421][ T7016] ? clear_bhb_loop+0x40/0x90 [ 154.322443][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.322461][ T7016] RIP: 0033:0x7f82e3f9de99 [ 154.322475][ T7016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.322491][ T7016] RSP: 002b:00007f82e4ee1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.322507][ T7016] RAX: ffffffffffffffda RBX: 00007f82e4225fa0 RCX: 00007f82e3f9de99 [ 154.322519][ T7016] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 154.322529][ T7016] RBP: 00007f82e4ee1090 R08: 0000000000000000 R09: 0000000000000000 [ 154.322538][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.322548][ T7016] R13: 00007f82e4226038 R14: 00007f82e4225fa0 R15: 00007ffe835c2828 [ 154.322572][ T7016] [ 154.323892][ T5743] usb 2-1: USB disconnect, device number 16 [ 154.559028][ T1220] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 154.574255][ T1220] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 154.614101][ T1220] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 154.633015][ T1220] usb 5-1: USB disconnect, device number 9 [ 154.647611][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.924497][ T29] audit: type=1400 audit(1785302072.379:471): avc: denied { create } for pid=7035 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 154.956155][ T29] audit: type=1400 audit(1785302072.409:472): avc: denied { bind } for pid=7035 comm="syz.1.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 155.847536][ T5897] usb 1-1: NFC: intf ffff88807e926000 id ffffffff8fc68ae0 [ 155.961017][ T5897] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 155.975373][ T5897] usb 1-1: USB disconnect, device number 7 [ 155.984931][ T5897] usb 1-1: NFC: intf ffff88807e926000 [ 156.011589][ T187] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 156.126970][ T7054] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 156.158933][ T29] audit: type=1400 audit(1785302073.609:473): avc: denied { append } for pid=7055 comm="syz.2.321" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 156.176228][ T7056] warning: `syz.2.321' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 156.262245][ T29] audit: type=1400 audit(1785302073.609:474): avc: denied { ioctl } for pid=7055 comm="syz.2.321" path="socket:[12252]" dev="sockfs" ino=12252 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.527093][ T7064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.324'. [ 156.566033][ T7064] tipc: Invalid UDP bearer configuration [ 156.566074][ T7064] tipc: Enabling of bearer rejected, failed to enable media [ 156.719848][ T5342] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.727951][ T187] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.919095][ T5342] usb 3-1: Using ep0 maxpacket: 8 [ 156.934361][ T5342] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 157.031895][ T187] usb 1-1: Using ep0 maxpacket: 8 [ 157.043353][ T187] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 157.053235][ T5342] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.064418][ T187] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.077598][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 157.084598][ T5342] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.099536][ T187] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.122140][ T187] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 157.134807][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.143257][ T187] usb 1-1: Product: syz [ 157.147700][ T5342] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 157.157668][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.165890][ T187] usb 1-1: Manufacturer: syz [ 157.170665][ T5342] usb 3-1: Product: syz [ 157.175110][ T187] usb 1-1: SerialNumber: syz [ 157.184975][ T5342] usb 3-1: Manufacturer: syz [ 157.192675][ T7061] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.200691][ T5342] usb 3-1: SerialNumber: syz [ 157.220147][ T7062] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 157.227542][ T187] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 157.227961][ T7076] syzkaller0: entered promiscuous mode [ 157.241395][ T187] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 157.252821][ T187] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 157.265001][ T5342] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 157.266875][ T7076] syzkaller0: entered allmulticast mode [ 157.280143][ T7078] openvswitch: netlink: Duplicate or invalid key (type 0). [ 157.297754][ T5342] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 157.317282][ T5342] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 157.332652][ T7078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.456047][ T5897] usb 3-1: USB disconnect, device number 9 [ 157.456134][ T187] usb 1-1: USB disconnect, device number 8 [ 157.629542][ T5342] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 157.800694][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.818722][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.837872][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.874634][ T5342] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.887478][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.901713][ T5342] usb 4-1: config 0 descriptor?? [ 158.027629][ T7095] FAULT_INJECTION: forcing a failure. [ 158.027629][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 158.058489][ T7095] CPU: 1 UID: 0 PID: 7095 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(full) [ 158.058510][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.058519][ T7095] Call Trace: [ 158.058531][ T7095] [ 158.058537][ T7095] dump_stack_lvl+0x100/0x190 [ 158.058559][ T7095] should_fail_ex.cold+0x5/0xa [ 158.058574][ T7095] should_failslab+0xc2/0x120 [ 158.058589][ T7095] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 158.058609][ T7095] ? __get_vm_area_node+0x101/0x330 [ 158.058636][ T7095] __get_vm_area_node+0x101/0x330 [ 158.058661][ T7095] __vmalloc_node_range_noprof+0x228/0x1630 [ 158.058685][ T7095] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 158.058701][ T7095] ? find_held_lock+0x2b/0x80 [ 158.058720][ T7095] ? __lock_acquire+0x49f/0x1a40 [ 158.058737][ T7095] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 158.058761][ T7095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.058785][ T7095] ? find_held_lock+0x2b/0x80 [ 158.058808][ T7095] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 158.058827][ T7095] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 158.058843][ T7095] ? avc_has_perm_noaudit+0x145/0x3b0 [ 158.058857][ T7095] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 158.058871][ T7095] __vmalloc_node_noprof+0xad/0xf0 [ 158.058887][ T7095] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 158.058909][ T7095] __vmalloc_noprof+0xa3/0x120 [ 158.058932][ T7095] ? __pfx___vmalloc_noprof+0x10/0x10 [ 158.058957][ T7095] ? rcu_is_watching+0x12/0xc0 [ 158.058979][ T7095] ? cap_capable+0x107/0x430 [ 158.058994][ T7095] bpf_prog_alloc_no_stats+0x59/0x630 [ 158.059008][ T7095] ? security_capable+0x80/0x260 [ 158.059025][ T7095] bpf_prog_alloc+0x3b/0x200 [ 158.059041][ T7095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.059063][ T7095] bpf_prog_load+0x4a9/0x2fa0 [ 158.059086][ T7095] ? __pfx_bpf_prog_load+0x10/0x10 [ 158.059104][ T7095] ? avc_has_perm_noaudit+0x145/0x3b0 [ 158.059146][ T7095] __sys_bpf+0x18dc/0x4e80 [ 158.059171][ T7095] ? __pfx___sys_bpf+0x10/0x10 [ 158.059188][ T7095] ? find_held_lock+0x2b/0x80 [ 158.059213][ T7095] ? get_pid_task+0xfc/0x250 [ 158.059239][ T7095] ? get_pid_task+0xfc/0x250 [ 158.059273][ T7095] ? find_held_lock+0x2b/0x80 [ 158.059305][ T7095] ? rcu_read_lock_any_held+0x6a/0xa0 [ 158.059322][ T7095] ? find_held_lock+0x2b/0x80 [ 158.059347][ T7095] ? ksys_write+0x190/0x250 [ 158.059374][ T7095] ? ksys_write+0x190/0x250 [ 158.059417][ T7095] ? fput+0x79/0x100 [ 158.059441][ T7095] ? __x64_sys_bpf+0xce/0x140 [ 158.059458][ T7095] __x64_sys_bpf+0xce/0x140 [ 158.059476][ T7095] ? do_syscall_64+0x90/0x870 [ 158.059497][ T7095] do_syscall_64+0x115/0x870 [ 158.059515][ T7095] ? clear_bhb_loop+0x40/0x90 [ 158.059541][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.059559][ T7095] RIP: 0033:0x7f1510f9de99 [ 158.059574][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.059590][ T7095] RSP: 002b:00007f1511e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.059606][ T7095] RAX: ffffffffffffffda RBX: 00007f1511225fa0 RCX: 00007f1510f9de99 [ 158.059617][ T7095] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 158.059627][ T7095] RBP: 00007f1511e88090 R08: 0000000000000000 R09: 0000000000000000 [ 158.059636][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.059644][ T7095] R13: 00007f1511226038 R14: 00007f1511225fa0 R15: 00007ffde72b32c8 [ 158.059658][ T7095] [ 158.065569][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 158.412733][ T7095] syz.2.333: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 158.444555][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(full) [ 158.444570][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 158.444577][ T7095] Call Trace: [ 158.444580][ T7095] [ 158.444584][ T7095] dump_stack_lvl+0x100/0x190 [ 158.444603][ T7095] warn_alloc.cold+0x94/0xa8 [ 158.444614][ T7095] ? __pfx_warn_alloc+0x10/0x10 [ 158.444625][ T7095] ? __kasan_kmalloc+0x8a/0xb0 [ 158.444644][ T7095] ? __get_vm_area_node+0x208/0x330 [ 158.444662][ T7095] __vmalloc_node_range_noprof+0xccd/0x1630 [ 158.444678][ T7095] ? find_held_lock+0x2b/0x80 [ 158.444697][ T7095] ? __lock_acquire+0x49f/0x1a40 [ 158.444712][ T7095] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 158.444731][ T7095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 158.444747][ T7095] ? find_held_lock+0x2b/0x80 [ 158.444765][ T7095] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 158.444778][ T7095] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 158.444793][ T7095] ? avc_has_perm_noaudit+0x145/0x3b0 [ 158.444807][ T7095] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 158.444821][ T7095] __vmalloc_node_noprof+0xad/0xf0 [ 158.444837][ T7095] ? bpf_prog_alloc_no_stats+0x59/0x630 [ 158.444853][ T7095] __vmalloc_noprof+0xa3/0x120 [ 158.444869][ T7095] ? __pfx___vmalloc_noprof+0x10/0x10 [ 158.444886][ T7095] ? rcu_is_watching+0x12/0xc0 [ 158.444903][ T7095] ? cap_capable+0x107/0x430 [ 158.444919][ T7095] bpf_prog_alloc_no_stats+0x59/0x630 [ 158.444933][ T7095] ? security_capable+0x80/0x260 [ 158.444948][ T7095] bpf_prog_alloc+0x3b/0x200 [ 158.444961][ T7095] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 158.444976][ T7095] bpf_prog_load+0x4a9/0x2fa0 [ 158.444989][ T7095] ? __pfx_bpf_prog_load+0x10/0x10 [ 158.445000][ T7095] ? avc_has_perm_noaudit+0x145/0x3b0 [ 158.445027][ T7095] __sys_bpf+0x18dc/0x4e80 [ 158.445042][ T7095] ? __pfx___sys_bpf+0x10/0x10 [ 158.445053][ T7095] ? find_held_lock+0x2b/0x80 [ 158.445070][ T7095] ? get_pid_task+0xfc/0x250 [ 158.445088][ T7095] ? get_pid_task+0xfc/0x250 [ 158.445110][ T7095] ? find_held_lock+0x2b/0x80 [ 158.445130][ T7095] ? rcu_read_lock_any_held+0x6a/0xa0 [ 158.445141][ T7095] ? find_held_lock+0x2b/0x80 [ 158.445157][ T7095] ? ksys_write+0x190/0x250 [ 158.445174][ T7095] ? ksys_write+0x190/0x250 [ 158.445201][ T7095] ? fput+0x79/0x100 [ 158.445216][ T7095] ? __x64_sys_bpf+0xce/0x140 [ 158.445227][ T7095] __x64_sys_bpf+0xce/0x140 [ 158.445238][ T7095] ? do_syscall_64+0x90/0x870 [ 158.445252][ T7095] do_syscall_64+0x115/0x870 [ 158.445264][ T7095] ? clear_bhb_loop+0x40/0x90 [ 158.445277][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.445289][ T7095] RIP: 0033:0x7f1510f9de99 [ 158.445298][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.445309][ T7095] RSP: 002b:00007f1511e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.445320][ T7095] RAX: ffffffffffffffda RBX: 00007f1511225fa0 RCX: 00007f1510f9de99 [ 158.445327][ T7095] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 158.445334][ T7095] RBP: 00007f1511e88090 R08: 0000000000000000 R09: 0000000000000000 [ 158.445340][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.445346][ T7095] R13: 00007f1511226038 R14: 00007f1511225fa0 R15: 00007ffde72b32c8 [ 158.445360][ T7095] [ 158.445364][ T7095] Mem-Info: [ 158.796925][ T5342] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 158.807138][ T5342] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 158.817793][ T5342] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 158.831521][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 158.831535][ T29] audit: type=1400 audit(1785302076.289:479): avc: denied { ioctl } for pid=7097 comm="syz.0.334" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 158.866229][ T5342] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 158.879306][ T5342] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 158.886751][ T5342] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 158.919342][ T7095] active_anon:9337 inactive_anon:0 isolated_anon:0 [ 158.919342][ T7095] active_file:0 inactive_file:60091 isolated_file:0 [ 158.919342][ T7095] unevictable:768 dirty:205 writeback:0 [ 158.919342][ T7095] slab_reclaimable:11543 slab_unreclaimable:96820 [ 158.919342][ T7095] mapped:32181 shmem:1293 pagetables:1250 [ 158.919342][ T7095] sec_pagetables:0 bounce:0 [ 158.919342][ T7095] kernel_misc_reclaimable:0 [ 158.919342][ T7095] free:1284971 free_pcp:22610 free_cma:0 [ 158.992161][ T29] audit: type=1400 audit(1785302076.449:480): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 159.050952][ T5342] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.086331][ T7095] Node 0 active_anon:37348kB inactive_anon:0kB active_file:0kB inactive_file:240156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127976kB dirty:920kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12348kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 159.136101][ T7095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 159.169992][ T7095] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.171443][ T5342] usb 4-1: USB disconnect, device number 8 [ 159.200287][ T7095] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 159.212913][ T7095] Node 0 DMA32 free:1187816kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37448kB inactive_anon:0kB active_file:0kB inactive_file:240156kB unevictable:1536kB writepending:1020kB zspages:0kB present:3129332kB managed:2532168kB mlocked:0kB bounce:0kB free_pcp:89212kB local_pcp:29688kB free_cma:0kB [ 159.249571][ T7095] lowmem_reserve[]: 0 0 0 0 0 [ 159.256822][ T7095] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.332771][ T7095] lowmem_reserve[]: 0 0 0 0 0 [ 159.359739][ T7095] Node 1 Normal free:3938464kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:504kB local_pcp:500kB free_cma:0kB [ 159.474454][ T7095] lowmem_reserve[]: 0 0 0 0 0 [ 159.492776][ T7095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.521425][ T7095] Node 0 DMA32: 582*4kB (UME) 1110*8kB (UME) 542*16kB (UME) 616*32kB (UME) 221*64kB (UME) 144*128kB (UME) 56*256kB (UM) 31*512kB (M) 11*1024kB (UME) 9*2048kB (UM) 260*4096kB (UM) = 1197032kB [ 159.557445][ T7095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 159.705920][ T7095] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 6*128kB (UM) 5*256kB (UM) 2*512kB (M) 3*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3938464kB [ 159.722532][ T7095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.732510][ T7095] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 159.741832][ T7095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 159.752006][ T7095] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 159.768463][ T7095] 64254 total pagecache pages [ 159.916464][ T7095] 0 pages in swap cache [ 160.275267][ T7095] Free swap = 124996kB [ 160.291048][ T7095] Total swap = 124996kB [ 160.299125][ T7095] 2097051 pages RAM [ 160.302954][ T7095] 0 pages HighMem/MovableOnly [ 160.315110][ T7095] 432300 pages reserved [ 160.335179][ T7095] 0 pages cma reserved [ 160.589542][ T7125] overlayfs: missing 'lowerdir' [ 160.811563][ T7124] netlink: 240 bytes leftover after parsing attributes in process `syz.0.338'. [ 160.982172][ T29] audit: type=1400 audit(1785302078.439:481): avc: denied { execute } for pid=7129 comm="syz.3.341" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 161.087072][ T29] audit: type=1400 audit(1785302078.539:482): avc: denied { bind } for pid=7129 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 162.191136][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 162.224973][ T29] audit: type=1400 audit(1785302079.649:483): avc: denied { write } for pid=7134 comm="syz.4.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.246531][ T7145] FAULT_INJECTION: forcing a failure. [ 162.246531][ T7145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.286663][ T7145] CPU: 0 UID: 0 PID: 7145 Comm: syz.0.345 Not tainted syzkaller #0 PREEMPT(full) [ 162.286679][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 162.286686][ T7145] Call Trace: [ 162.286690][ T7145] [ 162.286694][ T7145] dump_stack_lvl+0x100/0x190 [ 162.286711][ T7145] should_fail_ex.cold+0x5/0xa [ 162.286726][ T7145] _copy_from_iter+0x1f4/0x1690 [ 162.286746][ T7145] ? __pfx__copy_from_iter+0x10/0x10 [ 162.286762][ T7145] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 162.286783][ T7145] copy_page_from_iter+0x238/0x300 [ 162.286801][ T7145] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 162.286818][ T7145] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 162.286830][ T7145] ? unwind_get_return_address+0x59/0xa0 [ 162.286842][ T7145] ? arch_stack_walk+0xa6/0xf0 [ 162.286867][ T7145] ? _kstrtoull+0x13c/0x1f0 [ 162.286878][ T7145] ? __pfx__kstrtoull+0x10/0x10 [ 162.286890][ T7145] tun_get_user+0x16d6/0x3c20 [ 162.286907][ T7145] ? __pfx_tun_get_user+0x10/0x10 [ 162.286919][ T7145] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 162.286940][ T7145] ? find_held_lock+0x2b/0x80 [ 162.286959][ T7145] ? tun_get+0x191/0x370 [ 162.286975][ T7145] ? tun_get+0x191/0x370 [ 162.286995][ T7145] tun_chr_write_iter+0xdc/0x200 [ 162.287011][ T7145] vfs_write+0x6ac/0x1050 [ 162.287030][ T7145] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.287043][ T7145] ? __pfx_vfs_write+0x10/0x10 [ 162.287059][ T7145] ? find_held_lock+0x2b/0x80 [ 162.287085][ T7145] ksys_write+0x12a/0x250 [ 162.287102][ T7145] ? __pfx_ksys_write+0x10/0x10 [ 162.287124][ T7145] do_syscall_64+0x115/0x870 [ 162.287137][ T7145] ? clear_bhb_loop+0x40/0x90 [ 162.287150][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.287162][ T7145] RIP: 0033:0x7fc505f5e6ce [ 162.287171][ T7145] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.287182][ T7145] RSP: 002b:00007fc506f09fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.287193][ T7145] RAX: ffffffffffffffda RBX: 00007fc506f0a6c0 RCX: 00007fc505f5e6ce [ 162.287200][ T7145] RDX: 000000000000004e RSI: 00002000000006c0 RDI: 00000000000000c8 [ 162.287207][ T7145] RBP: 00007fc506f0a090 R08: 0000000000000000 R09: 0000000000000000 [ 162.287213][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.287220][ T7145] R13: 00007fc506226038 R14: 00007fc506225fa0 R15: 00007ffe0e6d0ab8 [ 162.287233][ T7145] [ 162.584234][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'. [ 162.668996][ T7151] bridge: RTM_NEWNEIGH with invalid ether address [ 162.703701][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'. [ 162.753684][ T29] audit: type=1400 audit(1785302080.209:484): avc: denied { write } for pid=7154 comm="syz.3.348" name="functions" dev="configfs" ino=9162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.776902][ T29] audit: type=1400 audit(1785302080.239:485): avc: denied { add_name } for pid=7154 comm="syz.3.348" name="uvc.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.805869][ T7153] bridge: RTM_NEWNEIGH with invalid ether address [ 163.504181][ T187] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.640192][ T187] usb 1-1: device descriptor read/64, error -71 [ 163.909378][ T187] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.969072][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 164.049158][ T187] usb 1-1: device descriptor read/64, error -71 [ 164.171597][ T187] usb usb1-port1: attempt power cycle [ 164.241688][ T7171] FAULT_INJECTION: forcing a failure. [ 164.241688][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 164.254631][ T7171] CPU: 1 UID: 0 PID: 7171 Comm: syz.2.351 Not tainted syzkaller #0 PREEMPT(full) [ 164.254653][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 164.254663][ T7171] Call Trace: [ 164.254668][ T7171] [ 164.254674][ T7171] dump_stack_lvl+0x100/0x190 [ 164.254692][ T7171] should_fail_ex.cold+0x5/0xa [ 164.254707][ T7171] should_failslab+0xc2/0x120 [ 164.254723][ T7171] kmem_cache_alloc_noprof+0x91/0x6a0 [ 164.254736][ T7171] ? rcu_read_lock_any_held+0x6a/0xa0 [ 164.254747][ T7171] ? do_getname+0x35/0x390 [ 164.254764][ T7171] do_getname+0x35/0x390 [ 164.254780][ T7171] do_sys_openat2+0xc7/0x1e0 [ 164.254794][ T7171] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.254808][ T7171] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.254822][ T7171] ? __fget_files+0x21f/0x3d0 [ 164.254837][ T7171] __x64_sys_creat+0xcc/0x120 [ 164.254852][ T7171] ? __pfx___x64_sys_creat+0x10/0x10 [ 164.254866][ T7171] ? __pfx_ksys_write+0x10/0x10 [ 164.254887][ T7171] ? do_syscall_64+0x90/0x870 [ 164.254900][ T7171] do_syscall_64+0x115/0x870 [ 164.254912][ T7171] ? clear_bhb_loop+0x40/0x90 [ 164.254926][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.254938][ T7171] RIP: 0033:0x7f1510f9de99 [ 164.254948][ T7171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.254958][ T7171] RSP: 002b:00007f1511e88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 164.254969][ T7171] RAX: ffffffffffffffda RBX: 00007f1511225fa0 RCX: 00007f1510f9de99 [ 164.254976][ T7171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 164.254983][ T7171] RBP: 00007f1511e88090 R08: 0000000000000000 R09: 0000000000000000 [ 164.254989][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.254997][ T7171] R13: 00007f1511226038 R14: 00007f1511225fa0 R15: 00007ffde72b32c8 [ 164.255012][ T7171] [ 164.518841][ T29] audit: type=1400 audit(1785302081.969:486): avc: denied { unmount } for pid=5624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.519938][ T187] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.777017][ T187] usb 1-1: device descriptor read/8, error -71 [ 164.956667][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 164.968937][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 165.281460][ T1220] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 165.292438][ T187] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 165.334530][ T187] usb 1-1: device descriptor read/8, error -71 [ 165.341112][ T29] audit: type=1400 audit(1785302082.789:487): avc: denied { append } for pid=7184 comm="syz.2.355" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.500819][ T187] usb usb1-port1: unable to enumerate USB device [ 165.510143][ T1220] usb 2-1: Using ep0 maxpacket: 8 [ 165.567575][ T1220] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 165.603839][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.644897][ T1220] usb 2-1: Product: syz [ 165.664256][ T1220] usb 2-1: Manufacturer: syz [ 165.674941][ T1220] usb 2-1: SerialNumber: syz [ 165.688308][ T1220] usb 2-1: config 0 descriptor?? [ 165.708281][ T1220] gspca_main: se401-2.14.0 probing 047d:5003 [ 165.879132][ T5342] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 166.050517][ T5342] usb 3-1: Using ep0 maxpacket: 8 [ 166.061964][ T5342] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 166.084645][ T5342] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 166.116736][ T5342] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 118, changing to 10 [ 166.141293][ T5342] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 24940, setting to 1024 [ 166.152916][ T5342] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.168246][ T5342] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 166.179105][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.187679][ T5342] usb 3-1: Product: syz [ 166.193640][ T5342] usb 3-1: Manufacturer: syz [ 166.198884][ T5342] usb 3-1: SerialNumber: syz [ 166.209824][ T7195] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 166.226698][ T5342] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 166.238817][ T5342] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 166.246884][ T5342] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 166.358040][ T1220] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 166.447448][ T1220] usb 3-1: USB disconnect, device number 10 [ 166.615101][ T29] audit: type=1400 audit(1785302084.069:488): avc: denied { create } for pid=7172 comm="syz.1.352" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 166.652432][ T7173] fuse: Bad value for 'rootmode' [ 166.673216][ T29] audit: type=1400 audit(1785302084.109:489): avc: denied { mounton } for pid=7172 comm="syz.1.352" path="/69/file0" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 166.680606][ T5342] usb 2-1: USB disconnect, device number 17 [ 166.742650][ T29] audit: type=1400 audit(1785302084.139:490): avc: denied { write } for pid=7172 comm="syz.1.352" name="file0" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 167.169368][ T5342] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.319201][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.529666][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 167.529835][ T5342] usb 4-1: Using ep0 maxpacket: 8 [ 167.540137][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 167.552222][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 167.638248][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.668460][ T24] usb 3-1: config 0 descriptor?? [ 167.685512][ T5342] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 167.693555][ T24] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 167.697049][ T5342] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 167.747032][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 168.201608][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.211997][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.231351][ T5342] usb 4-1: Product: syz [ 168.237275][ T5342] usb 4-1: Manufacturer: syz [ 168.248767][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.261375][ T5342] usb 4-1: SerialNumber: syz [ 168.281302][ T24] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 168.293380][ T5342] usb 4-1: config 0 descriptor?? [ 168.302037][ T24] usb 3-1: media controller created [ 168.318045][ T5342] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 168.347938][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.357451][ T5342] usb 4-1: setting power ON [ 168.373992][ T5342] dvb-usb: bulk message failed: -22 (2/0) [ 168.391064][ T5342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.554199][ T7208] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 168.566284][ T7208] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 168.574692][ T7208] CPU: 0 UID: 0 PID: 7208 Comm: syz.3.361 Not tainted syzkaller #0 PREEMPT(full) [ 168.583881][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 168.593929][ T7208] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 168.599306][ T7208] Code: 08 84 d2 0f 85 67 14 00 00 44 8b 3d 1d da b6 0f 45 85 ff 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 14 00 00 48 3b 5b 58 0f 85 8b 07 00 00 bf 01 [ 168.618894][ T7208] RSP: 0018:ffffc9000321f7b0 EFLAGS: 00010206 [ 168.624944][ T7208] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 168.632891][ T7208] RDX: 0000000000000018 RSI: ffffffff8e18006a RDI: 00000000000000c0 [ 168.640842][ T7208] RBP: ffffc9000321f920 R08: ffffffff88330f75 R09: 0000000000000000 [ 168.648791][ T7208] R10: ffffc9000321f940 R11: 0000000000000000 R12: 0000000000000000 [ 168.656739][ T7208] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 168.664688][ T7208] FS: 00007f47299f66c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 168.673599][ T7208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.680162][ T7208] CR2: 0000001b33610ff8 CR3: 0000000076a94000 CR4: 00000000003526f0 [ 168.688115][ T7208] Call Trace: [ 168.691374][ T7208] [ 168.694285][ T7208] ? trace_contention_end+0x126/0x160 [ 168.699656][ T7208] ? dvb_usbv2_generic_write+0x25/0x50 [ 168.705100][ T7208] ? __mutex_lock+0x26d/0x1bd0 [ 168.709846][ T7208] ? mxl111sf_ctrl_msg+0xb8/0x2b0 [ 168.714854][ T7208] ? __pfx___mutex_lock+0x10/0x10 [ 168.719860][ T7208] ? __pfx___mutex_lock+0x10/0x10 [ 168.724865][ T7208] ? lock_acquire+0x1b9/0x370 [ 168.729527][ T7208] ? dvb_usbv2_generic_write+0x25/0x50 [ 168.734970][ T7208] dvb_usbv2_generic_write+0x25/0x50 [ 168.740242][ T7208] mxl111sf_ctrl_msg+0x179/0x2b0 [ 168.745163][ T7208] mxl111sf_write_reg+0x96/0x130 [ 168.750082][ T7208] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 168.755611][ T7208] mxl111sf_i2c_start+0x6e/0x220 [ 168.760532][ T7208] mxl111sf_i2c_xfer+0x178e/0x3240 [ 168.765628][ T7208] ? kasan_save_stack+0x3f/0x50 [ 168.770458][ T7208] ? kasan_save_stack+0x30/0x50 [ 168.775306][ T7208] ? kasan_save_track+0x14/0x30 [ 168.780135][ T7208] ? __kasan_kmalloc+0xaa/0xb0 [ 168.784882][ T7208] ? __kmalloc_noprof+0x322/0x820 [ 168.789887][ T7208] ? i2cdev_ioctl+0x19d/0x830 [ 168.794547][ T7208] ? __x64_sys_ioctl+0x18e/0x210 [ 168.799469][ T7208] ? do_syscall_64+0x115/0x870 [ 168.804217][ T7208] ? look_up_lock_class+0x55/0x120 [ 168.809308][ T7208] ? register_lock_class+0x40/0x560 [ 168.814489][ T7208] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 168.819929][ T7208] ? look_up_lock_class+0x55/0x120 [ 168.825021][ T7208] ? __lock_acquire+0x49f/0x1a40 [ 168.829942][ T7208] ? __lock_acquire+0x49f/0x1a40 [ 168.834863][ T7208] __i2c_transfer+0x5d9/0x1740 [ 168.839611][ T7208] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 168.845395][ T7208] ? __pfx___i2c_transfer+0x10/0x10 [ 168.850576][ T7208] ? rt_mutex_slowtrylock+0x93/0x100 [ 168.855846][ T7208] i2c_transfer+0x15f/0x380 [ 168.860335][ T7208] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 168.865259][ T7208] i2cdev_ioctl+0x19d/0x830 [ 168.869761][ T7208] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 168.874771][ T7208] ? selinux_file_ioctl+0x13b/0x290 [ 168.879958][ T7208] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 168.884965][ T7208] __x64_sys_ioctl+0x18e/0x210 [ 168.889726][ T7208] do_syscall_64+0x115/0x870 [ 168.894298][ T7208] ? clear_bhb_loop+0x40/0x90 [ 168.898955][ T7208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.904839][ T7208] RIP: 0033:0x7f472b79de99 [ 168.909233][ T7208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.928820][ T7208] RSP: 002b:00007f47299f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.937226][ T7208] RAX: ffffffffffffffda RBX: 00007f472ba25fa0 RCX: 00007f472b79de99 [ 168.945178][ T7208] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000005 [ 168.953127][ T7208] RBP: 00007f472b833eaf R08: 0000000000000000 R09: 0000000000000000 [ 168.961077][ T7208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.969026][ T7208] R13: 00007f472ba26038 R14: 00007f472ba25fa0 R15: 00007ffee1b9a3f8 [ 168.976979][ T7208] [ 168.979989][ T7208] Modules linked in: [ 168.984550][ T7208] ---[ end trace 0000000000000000 ]--- [ 169.003290][ T29] audit: type=1400 audit(1785302086.449:491): avc: denied { read } for pid=4958 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 169.025274][ T29] audit: type=1400 audit(1785302086.449:492): avc: denied { search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.047218][ T29] audit: type=1400 audit(1785302086.449:493): avc: denied { write search } for pid=4958 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.111524][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 169.294908][ T29] audit: type=1400 audit(1785302086.449:494): avc: denied { add_name } for pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.344261][ T24] set interface failed [ 169.366751][ T7208] RIP: 0010:__mutex_lock+0x15d/0x1bd0 [ 169.376374][ T42] kernel read not supported for file /dummy_udc (pid: 42 comm: kworker/1:1) [ 169.437153][ T29] audit: type=1400 audit(1785302086.449:495): avc: denied { create } for pid=4958 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.484441][ T7208] Code: 08 84 d2 0f 85 67 14 00 00 44 8b 3d 1d da b6 0f 45 85 ff 75 29 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 5e 14 00 00 48 3b 5b 58 0f 85 8b 07 00 00 bf 01 [ 169.514739][ T5342] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 169.523269][ T5342] usb 4-1: media controller created [ 169.534252][ T5342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.539347][ T7243] fuse: Unknown parameter 'grou00000000000000000000' [ 169.543316][ T29] audit: type=1400 audit(1785302086.459:496): avc: denied { append open } for pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.554253][ T7208] RSP: 0018:ffffc9000321f7b0 EFLAGS: 00010206 [ 169.576726][ T29] audit: type=1400 audit(1785302086.459:497): avc: denied { getattr } for pid=4958 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.606329][ T5342] usb 4-1: selecting invalid altsetting 6 [ 169.612113][ T5342] usb 4-1: digital interface selection failed (-22) [ 169.618938][ T5342] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 169.627759][ T7208] [ 169.631556][ T7208] RAX: dffffc0000000000 RBX: 0000000000000068 RCX: 0000000000000001 [ 169.639717][ T7208] RDX: 0000000000000018 RSI: ffffffff8e18006a RDI: 00000000000000c0 [ 169.647762][ T5342] usb 4-1: setting power OFF [ 169.652368][ T5342] dvb-usb: bulk message failed: -22 (2/0) [ 169.660872][ T29] audit: type=1400 audit(1785302086.479:498): avc: denied { ioctl } for pid=7240 comm="syz.1.370" path="socket:[13643]" dev="sockfs" ino=13643 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.665842][ T5342] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 169.688024][ T29] audit: type=1400 audit(1785302086.779:499): avc: denied { connect } for pid=7237 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.695597][ T7208] RBP: ffffc9000321f920 R08: ffffffff88330f75 R09: 0000000000000000 [ 169.715463][ T29] audit: type=1400 audit(1785302086.779:500): avc: denied { setopt } for pid=7237 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.743769][ T5342] (NULL device *): no alternate interface [ 169.744653][ T29] audit: type=1400 audit(1785302086.929:501): avc: denied { write } for pid=7207 comm="syz.3.361" name="buffer_subbuf_size_kb" dev="tracefs" ino=1804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 169.773942][ T7208] R10: ffffc9000321f940 R11: 0000000000000000 R12: 0000000000000000 [ 169.774516][ T29] audit: type=1400 audit(1785302086.929:502): avc: denied { open } for pid=7207 comm="syz.3.361" path="/72/tracefs_dir/buffer_subbuf_size_kb" dev="tracefs" ino=1804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 169.785703][ T7208] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 169.815722][ T7208] FS: 00007f47299f66c0(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 169.825034][ T7208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.825537][ T5342] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 169.831895][ T7208] CR2: 00007f82e41ed2f8 CR3: 0000000076a94000 CR4: 00000000003526f0 [ 169.849936][ T7208] Kernel panic - not syncing: Fatal exception [ 169.856179][ T7208] Kernel Offset: disabled [ 169.860481][ T7208] Rebooting in 86400 seconds..