last executing test programs: 5m12.72555656s ago: executing program 1 (id=3804): r0 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs$userns(r1, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x620001, 0x100) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000240)={0x1, 0x7, 0x5}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) timerfd_create(0x5, 0x80000) sendfile(r6, r5, 0x0, 0x578410eb) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r8 = userfaultfd(0x801) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r8, 0xc028aa03, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x3) socket(0x80000000000000a, 0x5, 0x0) 5m11.1313858s ago: executing program 1 (id=3809): syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="03000000010000de8c8d412e000000000000000000000010000a066544d07be5ded3a57270ccaa00f99be43e1f", @ANYRES32=r2, @ANYRES32, @ANYBLOB="05000000020000000500"/28], 0x50) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0xfffffed1) write$sysctl(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048084) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x88, 0x24, &(0x7f0000000440)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback}, 0xc) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './bus\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26d}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r4) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, 0x0, 0x5ffc3, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1001f0) 5m10.819687986s ago: executing program 1 (id=3812): r0 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs$userns(r1, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x620001, 0x100) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000240)={0x1, 0x7, 0x5}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) timerfd_create(0x5, 0x80000) sendfile(r7, r6, 0x0, 0x578410eb) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) fcntl$lock(r5, 0x24, &(0x7f0000000140)={0x1, 0x0, 0xfff, 0x5, r1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x3) socket(0x80000000000000a, 0x5, 0x0) 5m9.689114644s ago: executing program 1 (id=3813): r0 = creat(&(0x7f00000008c0)='./file0\x00', 0x84) fallocate(r0, 0x0, 0x0, 0x2000402) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd7eeadce1df25020000edc265b50100000000080017"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') 5m7.276511369s ago: executing program 1 (id=3817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getresgid(&(0x7f0000000240), 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58}, 0x6) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0x3, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x5, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x9, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0xffffffff, 0x8000, 0xffff, 0x2, 0x9, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x9b55, 0x4, 0xd, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x1, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0xbac, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x7, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0xfffc, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r6, 0x0, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) syz_open_dev$MSR(&(0x7f0000000180), 0x5, 0x0) remap_file_pages(&(0x7f0000d92000/0x3000)=nil, 0x3000, 0x2000004, 0x0, 0x80000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000481cd91c00"/32], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2004c818) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 5m3.301047631s ago: executing program 1 (id=3828): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ff", 0xf}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000006010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 4m48.228623759s ago: executing program 32 (id=3828): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ff", 0xf}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000006010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 2m46.94611262s ago: executing program 5 (id=4170): mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000001403000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000052759ce4826014b21f6dedbb07b1c6c337bb21b06e86867580d1478d0daf1c6e03bf170833ce88d0c45d320a254e042785dbdd9bb2392f84079cc5a7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="260000000000000000000500", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x8}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 2m45.678124241s ago: executing program 5 (id=4172): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x248}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x35d48000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3", 0x13}], 0x1}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) bind(r7, &(0x7f0000000000)=@hci={0xa, 0x2}, 0x80) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 2m44.636968445s ago: executing program 5 (id=4174): openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40041, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x0, @private}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x40, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x64000600) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff580", 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) 2m41.926788624s ago: executing program 5 (id=4181): openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40041, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x0, @private}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x40, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x64000600) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff580", 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 2m39.519815052s ago: executing program 5 (id=4189): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x7}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x40}, {0x6}]}, 0x10) 2m38.51026778s ago: executing program 5 (id=4190): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0xfdff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ff", 0xf}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) 2m23.295647362s ago: executing program 33 (id=4190): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0xfdff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ff", 0xf}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) 13.78320439s ago: executing program 0 (id=4562): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000006c0)=@urb_type_iso={0x0, {0x5}, 0x401, 0xc0, &(0x7f0000000500)="81eec4d65001cb62228131f7b6dd3000ead807b5e9a4f5d8df929353af09d5b808baf850d18defebcfff9482d0c66b34a0628d882d0a026528e44eb4e0540cc759", 0x41, 0xfffffff3, 0x0, 0x2c, 0xf, 0x1b9a, 0x0, [{0x0, 0x7, 0x9f3}, {0x104, 0xffffffff, 0x2}, {0xf, 0x49af, 0xffffff7f}, {0x3, 0xfef, 0x2}, {0x200, 0x7, 0x8000}, {0x4, 0x0, 0x2}, {0x2, 0x200, 0x654}, {0xffffffff, 0x0, 0x5}, {0x3, 0x2, 0x79d570c8}, {0x7ff, 0x3, 0x10}, {0x0, 0xe9b4, 0x1}, {0x80, 0x2, 0x6}, {0x7, 0x4, 0x4b}, {0x5, 0x6, 0x3}, {0x4, 0x2, 0x10000}, {0x10001, 0x6, 0x8}, {0x2, 0x7, 0xc}, {0x23f5a81c, 0x4, 0x2}, {0xc39, 0x9, 0x4}, {0x8, 0xeaee, 0x4}, {0xffffffff, 0x5, 0x8fd}, {0x7fffffff, 0x4, 0x4780fb44}, {0x401, 0x3ec, 0x3cc}, {0x101, 0xfffffffc, 0x4}, {0x7, 0x40, 0x6}, {0x4, 0x1, 0x7fffffff}, {0x0, 0x5e9, 0x2}, {0x10, 0x4, 0x4}, {0x8, 0xfffffffa, 0x400}, {0x1b, 0x2, 0x6}, {0x5, 0xfffffff8, 0x2}, {0x2, 0x738b, 0x101}, {0x8, 0x0, 0x4}, {0x1, 0x4, 0x7}, {0x7, 0x1, 0x5bb8}, {0xfff, 0x4, 0xcc}, {0x5, 0x9, 0x1}, {0xcc, 0x7, 0x1}, {0x7, 0x7b1, 0x3}, {0x80, 0x6, 0x6}, {0x7, 0x3, 0x8}, {0xa, 0x7, 0xfffff609}, {0x7, 0x1, 0x5}, {0x10001, 0x8, 0xa}]}) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x3}, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20) 13.50143274s ago: executing program 0 (id=4564): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=0000000']) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000002108ab1204000000000000010902240001b30000040904412d17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r0, 0xf, 0xffffffffffffffd2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000380)={'syz0\x00', {0x1ff, 0x6, 0x12, 0x6}, 0x4b, [0xdb8, 0x4, 0x4, 0x8, 0x2, 0x40, 0x5, 0x2, 0xb, 0x4, 0x5, 0x2, 0xa6dc, 0x0, 0xfffffff8, 0x7, 0x9, 0x1, 0x2, 0x7, 0x2fe, 0x7ff, 0x8, 0x1ff, 0x739, 0x6, 0x930, 0x4, 0x1a12, 0xfffffc00, 0x200, 0x4, 0x0, 0xb, 0x9, 0xa, 0x81, 0x4, 0x1000, 0x1, 0x9, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x8, 0x7, 0x1, 0x5a3a8d03, 0x4081, 0x6, 0xdf4, 0x5, 0x10001, 0x9, 0x7, 0x81, 0xb4c, 0x8e, 0x5, 0x8, 0x3, 0xab, 0x2], [0x9, 0x8, 0x791, 0xe0, 0x1, 0xdae9, 0xb8f, 0xfffffff6, 0x9, 0x7fffffff, 0x1, 0x3, 0x6, 0x200008, 0xffffe45d, 0x6, 0x5, 0x20, 0x1, 0x4, 0xce, 0x2, 0x1, 0x0, 0x0, 0x7f, 0x4d5, 0x0, 0x5176145d, 0x3f, 0x0, 0x3, 0x100, 0x82, 0x3, 0x5a, 0x3, 0xf459, 0x2, 0x8, 0x3ce67e22, 0x2, 0x7, 0x2, 0x80, 0x1d5, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0xe21, 0x4, 0x8, 0xbe9c, 0x6, 0xa, 0x0, 0x9, 0x1, 0x6, 0x2, 0xfffffffb, 0x1], [0x3, 0x5, 0x100, 0x10001, 0x2, 0x8, 0x5c, 0xfffffffe, 0x48, 0x0, 0x5, 0x4, 0x4a, 0x7, 0x8, 0x9, 0x6, 0x3, 0x5983, 0x9bc5, 0x81, 0x1, 0xfffffffa, 0xfc78, 0x4, 0x8, 0x1, 0x14, 0xa, 0x101, 0x9, 0x7, 0x0, 0x44ccc0de, 0x3, 0x6, 0x6, 0x200, 0xd7, 0x3, 0x1, 0x27f2, 0x9, 0xf031, 0xffffffff, 0x2, 0x526, 0x8, 0x7fff, 0x400, 0x6, 0xa4, 0x0, 0x8, 0xffffffff, 0xc4e, 0x1, 0x3, 0xfffffffa, 0x2, 0x80, 0x8001, 0x2, 0xff], [0x563bac4e, 0x80000000, 0x1, 0x4, 0xbfe, 0x351, 0x8, 0x0, 0x2a7, 0x1, 0x7, 0x7, 0x7fffffff, 0x137aff, 0x7fff, 0xffffffff, 0xb0a, 0x5, 0x5, 0x6, 0x101, 0x2, 0x400002, 0x100, 0xddc4, 0x4, 0x9, 0x7f, 0x8, 0x101, 0x4, 0xea, 0x3, 0x7, 0x6, 0x2, 0x7f, 0xfffffffd, 0x4, 0x401, 0x401, 0x3, 0x3, 0x3, 0x10, 0xc, 0x1007, 0x9, 0x3d1a, 0x7, 0x7, 0x4, 0x0, 0x2, 0x0, 0xfffffc00, 0x7, 0x1, 0x1, 0x3, 0x40, 0x3, 0xcd5d, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002025702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12.310728211s ago: executing program 4 (id=4566): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback={0x91ffffff}, 0x23}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x241}], 0x1}}], 0x1, 0x4000001) read$FUSE(0xffffffffffffffff, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(0xffffffffffffffff, 0x1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) 11.733612598s ago: executing program 2 (id=4567): r0 = creat(&(0x7f00000008c0)='./file0\x00', 0x84) fallocate(r0, 0x0, 0x0, 0x2000402) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd7eeadce1df25020000edc265b50100000000080017"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') 11.324398198s ago: executing program 3 (id=4568): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs$userns(r0, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x620001, 0x100) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000240)={0x1, 0x7, 0x5}) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r4 = userfaultfd(0x801) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) socket(0x80000000000000a, 0x5, 0x0) 11.141760342s ago: executing program 4 (id=4569): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002880)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000080)={@host, 0xdab4}) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) 10.157601866s ago: executing program 0 (id=4570): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x9, 0x6be, 0x7, 0xaf83}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002880)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000080)={@host, 0xdab4}) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) 10.093420467s ago: executing program 3 (id=4572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 9.869523618s ago: executing program 3 (id=4574): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/128, 0x80}], 0x1, 0xffffffff, 0xfffffffd) write$binfmt_misc(r2, &(0x7f0000000000)="5ad8805f2537e26fa127b408714a6ee559f0bd10c6859f05ad4709df985e9d49aeda0cdd5ddd91b5ee9d08f8c1b36612f8fa9106ad5e50150e835d10db40627f4ffc6d99b5cae7dde643d4aa92a65b4b7aae9b9c925aab4086975b35cb5ca81cb16cf840317dc2a62e586d5c76ba60a67ced40181f4a22b723d10bd7340d9fd20c309371e940a084ad72", 0x8a) 9.825646658s ago: executing program 2 (id=4575): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x22) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xffffffffffffff0c) setresuid(0x0, r3, r4) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r5, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$getflags(r5, 0x401) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r5) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0xfd52e7ac98ab267f}, 0xc, &(0x7f00000012c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x404ac05) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x4800) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r6}) 9.167071153s ago: executing program 4 (id=4576): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000000000000000000001010000000000000000000000000000000000000000000000008e8525eb701f293ea23ca391583f59ec25c7e3799c78fe3f47dedf2369cc52b991b09f0bf3617723bd873c965db1da24434a2a62c2a5a4ca04a7f00986e88f8a2263953b590fbb2109ba00"/136], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000a00)="0bf1af85ab69f8b321ce857d2272310053597708566ced58a7f4fcd2e1a8604d101f4fcadac46d7cb11029e4f73106695e37108a76faa33ce2f1d91f84f9dbc3c996663c5af673e872031d9ea110f9d867abfee51f1191bb3e799242215d2744e070978c94e8c91bda75b943066d9ad4e7729c9890502d0dac8c2a535c211e8d80cf90f2f7d60180f4593199ae26adb7c6fb5ab6fd2aa4922e21716ce44834e8539117d0d52e2a7380ccac28db624a6657344ed5bad99d2db2e605d11d7d9c1eabe93b3cd31b7a5d5d18f8379192d99a80cda01e82469c841675777bdbaffbf03a2694fca153f17792215ae3dfb83e8272ec138ac1404da30e2931a5c348d66f40af5fee51e67367ae47ada3ef715ae6d9faa536d55507983f31d8a5926d6008afc2c26c1d0907bb9947a675f3a56f84d423050405482651966166d912bbd39da197f7d4f8c1958ed141dfc97c9791549733eeea305c43795e410e4961b6eed12b6c02a99f1101ee0b686c4fe71ad73e8d1f458a2d935dbaa2bed52d9100000000", 0x181}], 0x1}}], 0x1, 0x4001c00) r6 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x912b, 0x0, 0x8a4, 0x2, 0x402, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x1, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x9, 0x1, 0x1, 0xffffffff, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xa, 0x36, 0x4, 0x6, 0x8001, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x6, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x1, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x9, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x8, 0xa024, 0xd, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40004, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000009, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x1, 0x8c0, 0x9, 0x2, 0x8, 0x7fff, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xfffffff4, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7e, 0x2, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0x9a2, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x801, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="91158a830ff94b016494000308060001080006040002aaaaaaaaaabbac1414bbaaaaaaaaaa23ac1414bb"], 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) 9.105473613s ago: executing program 0 (id=4577): mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mkdir(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000001403000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000052759ce4826014b21f6dedbb07b1c6c337bb21b06e86867580d1478d0daf1c6e03bf170833ce88d0c45d320a254e042785dbdd9bb2392f84079cc5a7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="260000000000000000000500", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x8}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 7.724621515s ago: executing program 6 (id=4579): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x5, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000140)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x1f, 0xa, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xfa}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {0x5, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r5 = syz_open_dev$evdev(&(0x7f0000000940), 0x1, 0x101) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/176, 0xb0}, {&(0x7f0000000500)=""/193, 0xc1}], 0x2) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) lsm_get_self_attr(0x69, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x8, 0x76, @private2, @private0, 0x81, 0x7, 0x1, 0x3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5d) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r7 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0xf8fd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.633999395s ago: executing program 4 (id=4580): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x358, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000019080)={'vxcan1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x11b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket(0x2, 0x80805, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r8}) 6.784731893s ago: executing program 0 (id=4581): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=0000000']) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000002108ab1204000000000000010902240001b30000040904412d17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r0, 0xf, 0xffffffffffffffd2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000380)={'syz0\x00', {0x1ff, 0x6, 0x12, 0x6}, 0x4b, [0xdb8, 0x4, 0x4, 0x8, 0x2, 0x40, 0x5, 0x2, 0xb, 0x4, 0x5, 0x2, 0xa6dc, 0x0, 0xfffffff8, 0x7, 0x9, 0x1, 0x2, 0x7, 0x2fe, 0x7ff, 0x8, 0x1ff, 0x739, 0x6, 0x930, 0x4, 0x1a12, 0xfffffc00, 0x200, 0x4, 0x0, 0xb, 0x9, 0xa, 0x81, 0x4, 0x1000, 0x1, 0x9, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x8, 0x7, 0x1, 0x5a3a8d03, 0x4081, 0x6, 0xdf4, 0x5, 0x10001, 0x9, 0x7, 0x81, 0xb4c, 0x8e, 0x5, 0x8, 0x3, 0xab, 0x2], [0x9, 0x8, 0x791, 0xe0, 0x1, 0xdae9, 0xb8f, 0xfffffff6, 0x9, 0x7fffffff, 0x1, 0x3, 0x6, 0x200008, 0xffffe45d, 0x6, 0x5, 0x20, 0x1, 0x4, 0xce, 0x2, 0x1, 0x0, 0x0, 0x7f, 0x4d5, 0x0, 0x5176145d, 0x3f, 0x0, 0x3, 0x100, 0x82, 0x3, 0x5a, 0x3, 0xf459, 0x2, 0x8, 0x3ce67e22, 0x2, 0x7, 0x2, 0x80, 0x1d5, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0xe21, 0x4, 0x8, 0xbe9c, 0x6, 0xa, 0x0, 0x9, 0x1, 0x6, 0x2, 0xfffffffb, 0x1], [0x3, 0x5, 0x100, 0x10001, 0x2, 0x8, 0x5c, 0xfffffffe, 0x48, 0x0, 0x5, 0x4, 0x4a, 0x7, 0x8, 0x9, 0x6, 0x3, 0x5983, 0x9bc5, 0x81, 0x1, 0xfffffffa, 0xfc78, 0x4, 0x8, 0x1, 0x14, 0xa, 0x101, 0x9, 0x7, 0x0, 0x44ccc0de, 0x3, 0x6, 0x6, 0x200, 0xd7, 0x3, 0x1, 0x27f2, 0x9, 0xf031, 0xffffffff, 0x2, 0x526, 0x8, 0x7fff, 0x400, 0x6, 0xa4, 0x0, 0x8, 0xffffffff, 0xc4e, 0x1, 0x3, 0xfffffffa, 0x2, 0x80, 0x8001, 0x2, 0xff], [0x563bac4e, 0x80000000, 0x1, 0x4, 0xbfe, 0x351, 0x8, 0x0, 0x2a7, 0x1, 0x7, 0x7, 0x7fffffff, 0x137aff, 0x7fff, 0xffffffff, 0xb0a, 0x5, 0x5, 0x6, 0x101, 0x2, 0x400002, 0x100, 0xddc4, 0x4, 0x9, 0x7f, 0x8, 0x101, 0x4, 0xea, 0x3, 0x7, 0x6, 0x2, 0x7f, 0xfffffffd, 0x4, 0x401, 0x401, 0x3, 0x3, 0x3, 0x10, 0xc, 0x1007, 0x9, 0x3d1a, 0x7, 0x7, 0x4, 0x0, 0x2, 0x0, 0xfffffc00, 0x7, 0x1, 0x1, 0x3, 0x40, 0x3, 0xcd5d, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002025702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.346776261s ago: executing program 3 (id=4582): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs$userns(r0, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x620001, 0x100) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000240)={0x1, 0x7, 0x5}) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r4 = userfaultfd(0x801) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) socket(0x80000000000000a, 0x5, 0x0) 4.134196233s ago: executing program 2 (id=4583): ioperm(0x0, 0x2, 0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x22}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) timer_create(0x5, &(0x7f0000000200)={0x0, 0x18, 0x0, @thr={&(0x7f0000000080)="4e5369a187752ee3fe61dd4c5da48637aca3e4ceb79a21f70e08f335", &(0x7f0000000100)="e271d4faef5cf45be13aa5c6fe1d2c60044854bb409fb0c982470a2f0da57b4b69db5c34c33c175d2229506490caa7f422aeeadb57aa328e1641eab76b735989edcf96f0498a7cfd1fde713a5407a78b9bf6d6e0c8b6465d25261e804cabcbb83a789f6208a4694bb1132ec03ddc165dfa96889dbe5eac3390777221ba98894fbe214b07fb28186cffa0247e2d7cdbb0e1ee6ccaacd0ded99d595ced197855c2f956d9a50ae60932df36146d5626fdd4748eaaeb72fbaa0bd50d855cb57293ba8982a1c5553098e440e5c4aa0b10e6e5b80e9a7474bb12c44a"}}, &(0x7f0000000240)) fcntl$setlease(r1, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3.701702984s ago: executing program 6 (id=4584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 3.693965445s ago: executing program 3 (id=4585): r0 = creat(&(0x7f00000008c0)='./file0\x00', 0x84) fallocate(r0, 0x0, 0x0, 0x2000402) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') 3.601341148s ago: executing program 4 (id=4586): r0 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000088604850100000000000109022d0001000038000904000002030001000921080000012205000905810300df0204fd090502030800060907"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0xc) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0x24, 0x5, {0x5, 0x8, "926bf9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.459153923s ago: executing program 6 (id=4587): r0 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x0, 0x2}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x5, 0xfffffffd}) recvmsg$can_j1939(r0, &(0x7f0000000580)={&(0x7f0000000480)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001000)=""/253, 0xfd}, {&(0x7f0000000500)=""/80, 0x50}, {&(0x7f0000001100)=""/90, 0x5a}, {&(0x7f0000001180)=""/90, 0x5a}], 0x4}, 0x40000141) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000005c0)={0x18}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', r4, 0x7, 0x8000, 0x800, 0x80000001, {{0xd, 0x4, 0x2, 0x1, 0x34, 0x64, 0x0, 0x40, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@end, @ssrr={0x89, 0x17, 0x15, [@local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0xf9, [@local]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x9f8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x9c4, 0x2, [@TCA_MATCHALL_ACT={0xcc, 0x2, [@m_ife={0x60, 0xd, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa}]}, {0xb, 0x6, "ca96f73706b3bd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x38, 0x6, 0x0, 0x0, {{0xc}, {0x4}, {0xc, 0x6, "abb327dd6db421d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x81c, 0x2, [@m_mirred={0x12c, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3ff, 0x20000000, 0x4, 0x5}, 0x2, r5}}]}, {0xde, 0x6, "47d00bc543ba41aaf7c31439473bfae4144af09a2fb134f0032d24686152bca42893fba946143b31f2225ce3f12f66e7807a877ff84069b20c31f2fd5cac0ca38a60e7992ab7329467adb05f6684309a3ea7b6eda917ccc123eb9adc7d685dc7cf546526b085afd7e7c2c2f6c3f6f7e0ed1f7fd1d3581505abe61e463071f93c2b3116cc7402dba9c2f1d2432a6596762d50825a2268ab69b555f97c173572c0afac62a7bcc19f7e79dbac966b648c4a6972201356ce4f4f555a9571e10999af82353144ff2deb4e125971331f49931035cf65fb8313b8676f80"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x1ac, 0xd, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7000, 0x5, 0x3, 0x7f}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x1, 0x7, 0x7, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x0, 0x8, 0xffff18db}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x33, 0x20000000, 0x6, 0xdf}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x9, 0x3, 0x4, 0x5f}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfffffff9, 0x4, 0x90, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf6, 0x8001, 0x7, 0x9, 0x80000001}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x0, 0x6, 0x4}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0xffffffff, 0x4, 0x5, 0x67e3}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0x3a, 0x5, 0x40, 0xfffffffb}, 0x1, r4}}]}, {0x40, 0x6, "d18201ca19aafb9a64c5cfad1d4aaf2d9c042b5748e35ea8ec3c1d71b233f8386ecb286ae77b2d4fbdadb1af8cd1ae70cf0797718f85aabfc8f9d854"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x16c, 0xb, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x0, 0x2, 0x1000}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x9, 0x0, 0x6, 0x7}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0xffffffffffffffff, 0x7, 0x8001}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0xa0, 0x10000000, 0xe7e, 0x58}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xba, 0x8, 0x9e9f, 0x81}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x6, 0x4, 0x88, 0x6d8}, 0x77}}]}, {0x98, 0x6, "eba79ff8daa4d56a44c895fe96e873170373116aed66b36b27a5659e2df06c55cc43ded5f82d699f75a9cff7cb18342a76809ac8ebcb228058aadb3fb0bf090a123bf282412ebdbd8f4e11c9952b3efe900674136d7899fad795bf9e7c2bfed76ed9373e2e5057da41a482df3e814e16ee1fcedc658536b71ef67287a69f4fbaf47d553479370dbcefb2a709b8bdb8e3dfb438b6"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x194, 0xd, 0x0, 0x0, {{0xc}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x59}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x4, 0x5, 0xd3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb7b}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x7, 0x0, 0x2, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xff0}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x2}}]}, {0xf7, 0x6, "62940fdd559b08aa985e1d97f91abd2d08316e16c8405c5108ed7d3b6c17cc578b341db0371849f7ab0c3fcbca3335c638f3d94c96427ae1d2065e2e337387928367e961225b1747eebe577ffd1113fc6d332080af5e43a159aeadb64fd2283b48407561130430231ab0d19a8be69f9a635f26ff27b5033efd620633b49b4d7315faeae4b35e640bafe714e5ef0b9801686a7c86ab09461580babf524c7bb6ff95e7387ac757afd7c21780a2b6df6476cd61faafa8ac8be2719f771db8f8096f838936903390590946ffe7a52698b0ec1b1b0590b9331165d3f318055b2f6c1e48187fa43acbbcba6e7d56e9e1ebe52051e781"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x168, 0x1a, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x5, 0xf, 0x3}, @rand_addr=0x64010102, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200000, 0xfffffffd, 0x8, 0x564f, 0x6}, @broadcast, @rand_addr=0x64010102, 0xffffff00}}]}, {0xf0, 0x6, "81d5101a20832b33f15d6b5afeb3c6a36469196843a6bd571c238f63c6fff9606ef809ef1557ab5b3cd01bfee69bc07ea19af92ba39eb97396b0ccc8a6892a013b82cdf6b0049e2e371628d2c4e812a3d8a8c2be6b9512d673d85a4f3b316136138e7006878cef7f11bfbcc10fec3bbd3d3e57252e5874af8fa8874488239aad5bb5d75231ae1b49aee90c28e7a2510b133123720a8a6c4b019ed33ee5e09801e8ad995a3064311b3bbd3377bbe1f19d5a83cead4c0f8b76bedd8fdacf179353788c34e586b672ed9f73c7f8db2592c390b5038e11a13e21b9685fa97db3806e98f363be6b480229134b72a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xd8, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}]}, {0x95, 0x6, "182d8098c606fde072be65d007a4eb3035f01d1a69c5ff8812ea758ddd73cf2688c8b35abfd3ff8e5d1ee1a064bcec21895f0927061d7428f9d9166c99d204bc60f31dbc9cfcb96e5f37551327f9c212ca13ade0c1b43752dae17965312ea239b139cad35f26a572dbbad1e5a4b9d3b00743dd0678787db1bf7689f031295f47863b6fb4ce9df70c8b9b6ad5a5a8f87e12"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_ACT={0xa8, 0x2, [@m_police={0xa4, 0x6, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4b68}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5e5}]]}, {0x64, 0x6, "a9d100d777e6c747a5f4009e8d2d861b7cfa0a1ec94cb2dec992da98fd369ece27f1657891fe7fb2d989bd27c10168607ddc0f2932acadd814942e1dddf9a00b04c444a708fac080f1043b1b1b28079419a30d8287fa0c40d10a72cccce1b491"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x9f8}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000081}, 0x10000000) 3.300477237s ago: executing program 6 (id=4588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)=ANY=[@ANYRES64=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="00c3603cc3e300000000070000b7040f0000ef5835e1960e63ec620eb6d5bc000000000000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b21d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4, 0x0, 0x400000000000000}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f00000006c0)=""/8, &(0x7f0000000700)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xffffffffffffffff, 0xffffffffffffffbc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5, 0x0, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) r7 = memfd_create(&(0x7f00000007c0)='[\v\xdbX\xae[\x1a\xa9\xf5\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e\x06\xf2d\v\x95\b,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5d\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb1\xad\b\xc1\xddW\x84Q\x13GoU\xc3\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r5, 0x0, 0xc, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20) write(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x64, 0x0, &(0x7f0000000340)=[@release, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}], 0xcf, 0x0, &(0x7f0000000480)="2ac25efb2efe3d6533fc870108119d492399bca757a69e69bd20ca175af6b7e8088637b860d23f48fe9a67426a9a8b142efd87c9810b2b9cade776eafc781aee5dc1eb0ae6304de2996ca36bb5fe381d7f3583ed0b3fae0dd1c402af9209aa444311b54c99817c2205a556cd57df642eab9d545110a1707ce7bab7bf462dd7dcb52fbe9f0cd8cee19f5244c9fb574fba74ade83e4141abf7530e7eeb37dacb609d205c8e52a449d6f03603ea68ac1882ebe27591f82b33a133473d1c12c42a4fd00e3db886d682c0d9d3d5baa61b62"}) 2.599939505s ago: executing program 6 (id=4590): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x4001) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, 0x0) 1.74662639s ago: executing program 0 (id=4591): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x40, r0, 0x1, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fchmod(r2, 0xaa) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f00000004c0)={0x2, [0x0, 0x5, 0x10], [{0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x100, 0x0, 0x1}, {0x5, 0x80000001, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x10000, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x1, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}, {0x7ff, 0x62, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1}], 0x4}) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x48004) shmctl$IPC_RMID(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000080)) 1.74396056s ago: executing program 3 (id=4592): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0xce08, 0x10100, 0x1, 0x170}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x800) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) syz_io_uring_setup(0x4a0f, &(0x7f00000002c0)={0x0, 0x18ba, 0x800, 0x0, 0x29c}, &(0x7f0000000080), &(0x7f0000000140)) sendmmsg$alg(r8, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000480)="f78d9ca38fff48f3be52163448412ba8f74badf6babfa7862e94692d24b7b210ea832bdac20345227fef8a8c5d86648bb6812163970fdd5eaad3f206ce533dd5558d08e3c91e45e91b2c5334e45c459e35a269f8432087d0d46d20dc3e1d14f647270e9055d4e589a8a9685d6ce2fd3371852d4d027fcf09c27929472ab6e79fb442a531c95cce2969cb8500598cfd60e37d16900d286fa03a4895fb8cc60b6a809aa72bafeadbb11a7d139846521a7015f536ec521b3c44581b216d30ba4a5bd40faaef9daeff964b9aa4027efc7f8dce99dc44bebbf116708dc77fa4c8b24ef87ff7df4afe39038db05e26897116d7ff2d5e55ef73bf59cc848e7edf1858db1c8bb1531add7d0c17dc9e6ab7", 0x10d}, {&(0x7f0000000000)="a2056a896f41f282f61ca682d1f89ee91179d6fe179fc968c9ad1521d720a4da227b244934c87cff9e4b3405c6d4399b9b1c", 0x32}, {&(0x7f00000003c0)="146499c90dc3291eff61f27d14b89a3d7907ef40d117c2bac974cda450aacd4938e09f8b29d725f1ee99c33f1f1a49439e7c1af66efbf83144cdd2f47cc35bbe4bbe7222a6db100391967da64e454ff06afd3635f37928c95333ab6797c5c901b5dfcb1c0e8b6325dc7c4f5c9b49c570290eae3036f45cc6bea0155655f105960535bf8a0c7c274b512f36d1fdda650e", 0x90}], 0x4, 0x0, 0x0, 0x800}], 0x49249249249254a, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) 1.709610592s ago: executing program 2 (id=4593): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0x535}], 0x2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x1, {0x9, 0x2c0, 0xffffffff, 0xf46}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) 1.578657052s ago: executing program 6 (id=4594): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=readahead,euid<', @ANYRESDEC=0x0, @ANYBLOB='\tR']) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000540)={0x2, 0x3, @status={[0x2, 0xe, 0x8, 0x2, 0x5, 0x8001]}, [0x7, 0x2, 0x5, 0xb5b8, 0x1, 0xa312, 0x88, 0x0, 0xc932, 0xe706, 0x120, 0x9, 0x7fffffff, 0x3, 0x2, 0x9, 0x40, 0x1, 0x1, 0x2, 0x81, 0x8, 0x4, 0x80000000, 0x1, 0x4774, 0x7fffffff, 0x8, 0x3ff, 0x5, 0x40, 0xffffffffffffffc0, 0x0, 0xa65, 0x1, 0x4, 0x7, 0x0, 0x4, 0x1, 0x400, 0x8, 0xfffffffffffffff8, 0x5, 0x0, 0xffffffffffffffb0, 0x4, 0xfffffffffffffff9, 0x2, 0x2, 0x3, 0x7ff, 0x8000000000000001, 0x80000000, 0x6, 0x4, 0x6, 0x5, 0x40, 0x1ff80, 0xfffffffffffffffb, 0xb, 0x2, 0x5]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) 160.124089ms ago: executing program 4 (id=4595): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000120005f700000000004a000000000000", @ANYRES32=0x0, @ANYBLOB="1100000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000004c0)={0x18}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c9666646e1d3d", @ANYRESHEX=r4, @ANYBLOB=',cache=fscache,\x00']) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_STATX(r7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 0s ago: executing program 2 (id=4596): r0 = socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_procfs$userns(r1, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x620001, 0x100) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000240)={0x1, 0x7, 0x5}) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r5 = userfaultfd(0x801) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, 0x0) socket(0x80000000000000a, 0x5, 0x0) kernel console output (not intermixed with test programs): t descriptors, different from the interface descriptor's value: 3 [ 1534.904124][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1535.008200][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.173438][T23047] tipc: Enabling of bearer rejected, already enabled [ 1535.689861][T23048] gfs2: not a GFS2 filesystem [ 1535.797689][T23046] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4216'. [ 1535.827157][ T55] usb 5-1: GET_CAPABILITIES returned 0 [ 1535.840679][ T55] usbtmc 5-1:16.0: can't read capabilities [ 1536.476565][ T5853] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1537.325312][ T5853] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1537.334073][ T5853] usb 4-1: config 0 has no interface number 0 [ 1537.345942][ T5853] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1537.356841][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.371590][ T5853] usb 4-1: Product: syz [ 1537.376029][ T5853] usb 4-1: Manufacturer: syz [ 1537.392703][ T5853] usb 4-1: SerialNumber: syz [ 1537.408988][ T5853] usb 4-1: config 0 descriptor?? [ 1537.651567][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 1537.651585][ T30] audit: type=1400 audit(1756411860.863:58342): avc: denied { execmem } for pid=23071 comm="syz.2.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1537.679110][ T30] audit: type=1400 audit(1756411860.973:58343): avc: denied { ioctl } for pid=23053 comm="syz.3.4218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1537.704760][ T30] audit: type=1400 audit(1756411860.973:58344): avc: denied { ioctl } for pid=23053 comm="syz.3.4218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1537.789083][T23074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1538.185932][ T5853] usb 4-1: Firmware version (0.0) predates our first public release. [ 1538.206953][ T30] audit: type=1400 audit(1756411861.093:58345): avc: denied { recv } for pid=23071 comm="syz.2.4224" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1538.232891][ T5853] usb 4-1: Please update to version 0.2 or newer [ 1538.245675][ T30] audit: type=1400 audit(1756411861.103:58346): avc: denied { read } for pid=23071 comm="syz.2.4224" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1538.272672][ T30] audit: type=1400 audit(1756411861.103:58347): avc: denied { open } for pid=23071 comm="syz.2.4224" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1538.300745][ T30] audit: type=1400 audit(1756411861.103:58348): avc: denied { ioctl } for pid=23071 comm="syz.2.4224" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1538.329679][ T30] audit: type=1400 audit(1756411861.503:58349): avc: denied { ioctl } for pid=23053 comm="syz.3.4218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1538.388972][ T5853] usb 4-1: Firmware: build –§X [ 1538.402066][ T30] audit: type=1400 audit(1756411861.523:58350): avc: denied { recv } for pid=5833 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1538.535392][ T30] audit: type=1400 audit(1756411861.523:58351): avc: denied { recv } for pid=17738 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1539.050310][ T55] usb 5-1: USB disconnect, device number 108 [ 1539.344326][T23089] NILFS (nbd2): device size too small [ 1539.926190][ T5860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1539.943250][ T5860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1539.960932][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1539.969866][ T5860] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1539.977800][ T5860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1540.345486][T23102] chnl_net:caif_netlink_parms(): no params data found [ 1540.475836][T23102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.505622][T23102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.527971][T23102] bridge_slave_0: entered allmulticast mode [ 1540.536343][T23102] bridge_slave_0: entered promiscuous mode [ 1540.546087][T23102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.558667][T23102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.566214][T23102] bridge_slave_1: entered allmulticast mode [ 1540.574275][T23102] bridge_slave_1: entered promiscuous mode [ 1540.790582][T23120] misc userio: No port type given on /dev/userio [ 1540.832389][T23102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.871160][T18941] usb 4-1: USB disconnect, device number 111 [ 1541.024689][T23102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.221432][T23102] team0: Port device team_slave_0 added [ 1541.240568][T23102] team0: Port device team_slave_1 added [ 1541.349041][T23102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.356537][T23102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.397318][T23102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.414890][T23102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.442626][T23102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.474476][T23102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.097716][ T5860] Bluetooth: hci6: command tx timeout [ 1542.190724][T23102] hsr_slave_0: entered promiscuous mode [ 1542.205378][T23102] hsr_slave_1: entered promiscuous mode [ 1542.219376][T23102] debugfs: 'hsr0' already exists in 'hsr' [ 1542.241484][T23102] Cannot create hsr debugfs directory [ 1542.667471][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 1542.667496][ T30] audit: type=1400 audit(1756411865.983:58570): avc: denied { read write } for pid=17738 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1542.754442][ T30] audit: type=1400 audit(1756411865.983:58571): avc: denied { read write open } for pid=17738 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1542.784177][ T30] audit: type=1400 audit(1756411865.983:58572): avc: denied { ioctl } for pid=17738 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1542.817464][ T30] audit: type=1400 audit(1756411866.023:58573): avc: denied { read write } for pid=18591 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1542.842803][ T30] audit: type=1400 audit(1756411866.023:58574): avc: denied { read write open } for pid=18591 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1542.946882][T23145] NILFS (nbd0): device size too small [ 1542.954279][ T30] audit: type=1400 audit(1756411866.033:58575): avc: denied { ioctl } for pid=18591 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1542.980660][ T30] audit: type=1400 audit(1756411866.043:58576): avc: denied { read } for pid=23138 comm="syz.4.4242" dev="nsfs" ino=4026533531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1543.002026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.008563][ T30] audit: type=1400 audit(1756411866.043:58577): avc: denied { open } for pid=23138 comm="syz.4.4242" path="net:[4026533531]" dev="nsfs" ino=4026533531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1543.032503][ T30] audit: type=1400 audit(1756411866.043:58578): avc: denied { recv } for pid=23138 comm="syz.4.4242" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1543.057962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.076757][ T30] audit: type=1400 audit(1756411866.053:58579): avc: denied { recv } for pid=23138 comm="syz.4.4242" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1544.111049][T23165] net_ratelimit: 45 callbacks suppressed [ 1544.111089][T23165] netlink: del zone limit has 4 unknown bytes [ 1544.165462][ T5860] Bluetooth: hci6: command tx timeout [ 1544.420799][T23102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1544.447402][T23102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1544.477836][T23102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1544.553175][T23169] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4244'. [ 1544.570179][T23102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1545.297693][T18941] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1545.464875][T18941] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1545.497513][T18941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.573275][ T5912] kernel write not supported for file /snd/seq (pid: 5912 comm: kworker/1:4) [ 1545.615572][T18941] usb 4-1: config 0 has no interface number 0 [ 1545.644843][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.716176][T18941] usb 4-1: config 0 interface 106 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1545.728074][T23102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.740124][T18941] usb 4-1: config 0 interface 106 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 1545.797442][T18941] usb 4-1: config 0 interface 106 has no altsetting 0 [ 1545.818102][T23102] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.840850][T18941] usb 4-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice= b.f1 [ 1545.864304][T18941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.874672][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.878479][T18941] usb 4-1: Product: syz [ 1545.881923][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.926374][T18941] usb 4-1: Manufacturer: syz [ 1545.951009][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.958371][ T6734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.144737][T18941] usb 4-1: SerialNumber: syz [ 1546.188177][ T5860] Bluetooth: hci6: command tx timeout [ 1546.493265][T18941] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1546.510461][T18941] r8152-cfgselector 4-1: config 0 descriptor?? [ 1547.620079][ T55] r8152-cfgselector 4-1: USB disconnect, device number 112 [ 1547.711582][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 1547.711601][ T30] audit: type=1400 audit(1756411871.033:58799): avc: denied { recv } for pid=6734 comm="kworker/u8:19" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1547.783383][ T30] audit: type=1400 audit(1756411871.073:58800): avc: denied { read write } for pid=17738 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1547.807927][ C0] vkms_vblank_simulate: vblank timer overrun [ 1547.837641][ T30] audit: type=1400 audit(1756411871.073:58801): avc: denied { open } for pid=17738 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1547.884423][ T30] audit: type=1400 audit(1756411871.073:58802): avc: denied { ioctl } for pid=17738 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1547.947880][ T30] audit: type=1400 audit(1756411871.083:58803): avc: denied { recv } for pid=23102 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1547.973764][ C0] vkms_vblank_simulate: vblank timer overrun [ 1547.983067][ T30] audit: type=1400 audit(1756411871.093:58804): avc: denied { recv } for pid=23102 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1548.008763][ C0] vkms_vblank_simulate: vblank timer overrun [ 1548.022193][ T30] audit: type=1400 audit(1756411871.103:58805): avc: denied { module_request } for pid=23102 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1548.102569][ T30] audit: type=1400 audit(1756411871.103:58806): avc: denied { read write } for pid=18301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1548.145866][ T30] audit: type=1400 audit(1756411871.103:58807): avc: denied { open } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1548.170193][ C0] vkms_vblank_simulate: vblank timer overrun [ 1548.178256][ T30] audit: type=1400 audit(1756411871.103:58808): avc: denied { ioctl } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1548.184254][T23203] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1548.204189][ C0] vkms_vblank_simulate: vblank timer overrun [ 1548.210631][T23203] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1548.229209][T23203] vhci_hcd vhci_hcd.0: Device attached [ 1548.269226][ T5860] Bluetooth: hci6: command tx timeout [ 1548.302168][T23206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1548.777828][T22604] vhci_hcd: vhci_device speed not set [ 1548.877587][T22604] usb 41-1: new full-speed USB device number 7 using vhci_hcd [ 1548.904461][T23204] vhci_hcd: connection reset by peer [ 1548.926589][ T49] vhci_hcd: stop threads [ 1550.456456][ T5853] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1550.457603][ T49] vhci_hcd: release socket [ 1550.478047][ T49] vhci_hcd: disconnect device [ 1550.556450][T23102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.687422][ T5853] usb 5-1: device descriptor read/64, error -71 [ 1551.289094][ T5853] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1552.330051][ T5853] usb 5-1: device descriptor read/64, error -71 [ 1552.447883][ T5853] usb usb5-port1: attempt power cycle [ 1552.718080][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 1552.724391][ T30] audit: type=1400 audit(1756411876.033:58991): avc: denied { read open } for pid=23235 comm="syz.0.4265" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1552.898097][T23249] lo speed is unknown, defaulting to 1000 [ 1552.926462][T23249] lo speed is unknown, defaulting to 1000 [ 1553.067674][T23249] lo speed is unknown, defaulting to 1000 [ 1553.074464][ T30] audit: type=1400 audit(1756411876.113:58992): avc: denied { recv } for pid=23235 comm="syz.0.4265" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1553.159232][T23254] NILFS (nbd2): device size too small [ 1553.261878][ T30] audit: type=1400 audit(1756411876.143:58993): avc: denied { create } for pid=23235 comm="syz.0.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1553.282878][ T30] audit: type=1400 audit(1756411876.183:58994): avc: denied { write } for pid=23235 comm="syz.0.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1553.657835][ T30] audit: type=1400 audit(1756411876.253:58995): avc: denied { sys_module } for pid=23102 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1553.713478][ T30] audit: type=1400 audit(1756411876.253:58996): avc: denied { module_request } for pid=23102 comm="syz-executor" kmod="netdevsim6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1553.805188][ T30] audit: type=1400 audit(1756411876.253:58997): avc: denied { execmem } for pid=23247 comm="syz.2.4266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1553.853628][ T30] audit: type=1400 audit(1756411876.423:58998): avc: denied { prog_load } for pid=23247 comm="syz.2.4266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1553.864679][T23102] veth0_vlan: entered promiscuous mode [ 1553.887964][ T30] audit: type=1400 audit(1756411876.423:58999): avc: denied { bpf } for pid=23247 comm="syz.2.4266" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1553.998309][ T30] audit: type=1400 audit(1756411876.423:59000): avc: denied { perfmon } for pid=23247 comm="syz.2.4266" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1554.230510][T22604] vhci_hcd: vhci_device speed not set [ 1554.276441][ T55] libceph: connect (1)[c::]:6789 error -101 [ 1554.282802][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 1554.283315][T23102] veth1_vlan: entered promiscuous mode [ 1554.406169][T23249] infiniband syz2: set down [ 1554.411439][ T5853] lo speed is unknown, defaulting to 1000 [ 1554.412657][T23102] veth0_macvtap: entered promiscuous mode [ 1554.434449][T23249] infiniband syz2: added lo [ 1554.439556][T23102] veth1_macvtap: entered promiscuous mode [ 1554.466280][T23102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.470301][T23249] syz2: rxe_create_cq: returned err = -12 [ 1554.478436][T23102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.502257][T23249] infiniband syz2: Couldn't create ib_mad CQ [ 1554.511217][ T3468] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.520691][T23249] infiniband syz2: Couldn't open port 1 [ 1554.526434][ T3468] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.547815][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1554.554009][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1554.633118][ T3468] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.736861][T23260] ceph: No mds server is up or the cluster is laggy [ 1554.759146][ T3468] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.801714][T23249] RDS/IB: syz2: added [ 1554.805767][T23249] smc: adding ib device syz2 with port count 1 [ 1554.929709][T23249] smc: ib device syz2 port 1 has pnetid [ 1555.000339][T23249] lo speed is unknown, defaulting to 1000 [ 1555.082672][ T43] lo speed is unknown, defaulting to 1000 [ 1555.118638][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.173625][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.256584][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.265941][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.649324][T23277] tipc: Started in network mode [ 1555.654259][T23277] tipc: Node identity ac14140f, cluster identity 4711 [ 1555.661485][T23277] tipc: New replicast peer: 255.255.255.255 [ 1555.668282][T23277] tipc: Enabled bearer , priority 10 [ 1556.235554][T23249] lo speed is unknown, defaulting to 1000 [ 1556.583893][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4273'. [ 1556.787928][ T5912] tipc: Node number set to 2886997007 [ 1556.824447][T23249] lo speed is unknown, defaulting to 1000 [ 1557.030214][T23285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4273'. [ 1557.119871][T23295] netlink: 'syz.6.4275': attribute type 1 has an invalid length. [ 1557.141135][T23295] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4275'. [ 1557.292583][T23249] lo speed is unknown, defaulting to 1000 [ 1557.380236][T22604] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1557.458227][T23301] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1557.747141][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 1557.747154][ T30] audit: type=1400 audit(1756411881.063:59184): avc: denied { read write } for pid=17974 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1557.847408][ T30] audit: type=1400 audit(1756411881.103:59185): avc: denied { open } for pid=17974 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1557.857528][T22604] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1557.908288][T22604] usb 4-1: config 0 has no interface number 0 [ 1557.947063][ T30] audit: type=1400 audit(1756411881.103:59186): avc: denied { ioctl } for pid=17974 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1558.034711][T22604] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 1558.052705][T23249] lo speed is unknown, defaulting to 1000 [ 1558.058907][T22604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.067139][T22604] usb 4-1: Product: syz [ 1558.067144][ T30] audit: type=1400 audit(1756411881.113:59187): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1558.067188][ T30] audit: type=1400 audit(1756411881.123:59188): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1558.142941][T23312] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4279'. [ 1558.161025][ T30] audit: type=1400 audit(1756411881.143:59189): avc: denied { ioctl } for pid=23281 comm="syz.3.4273" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1558.186710][ T30] audit: type=1400 audit(1756411881.173:59190): avc: denied { ioctl } for pid=23281 comm="syz.3.4273" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1558.228380][ T30] audit: type=1400 audit(1756411881.173:59191): avc: denied { ioctl } for pid=23281 comm="syz.3.4273" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1558.254638][T22604] usb 4-1: Manufacturer: syz [ 1558.317941][T22604] usb 4-1: SerialNumber: syz [ 1558.354865][T22604] usb 4-1: config 0 descriptor?? [ 1558.370624][ T30] audit: type=1400 audit(1756411881.203:59192): avc: denied { ioctl } for pid=23281 comm="syz.3.4273" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1558.429047][T22604] ftdi_sio 4-1:0.117: FTDI USB Serial Device converter detected [ 1558.440209][T22604] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 1558.789755][ T30] audit: type=1400 audit(1756411881.213:59193): avc: denied { create } for pid=23307 comm="syz.4.4278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1558.944678][ T5912] kernel write not supported for file /snd/seq (pid: 5912 comm: kworker/1:4) [ 1559.502972][T23249] lo speed is unknown, defaulting to 1000 [ 1559.853847][T23249] lo speed is unknown, defaulting to 1000 [ 1560.243022][T22604] kernel read not supported for file /vga_arbiter (pid: 22604 comm: kworker/0:0) [ 1560.431512][T23249] lo speed is unknown, defaulting to 1000 [ 1561.103830][ T5927] usb 4-1: USB disconnect, device number 113 [ 1561.115953][ T5927] ftdi_sio 4-1:0.117: device disconnected [ 1562.002413][T23355] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1562.062606][T23359] netlink: 'syz.4.4291': attribute type 1 has an invalid length. [ 1562.084983][T23355] bridge0: port 3(dummy0) entered disabled state [ 1562.094498][T23355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.103742][T23355] bridge0: port 1() entered disabled state [ 1562.284101][T23359] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4291'. [ 1562.311056][T23362] usb usb1: usbfs: process 23362 (syz.2.4292) did not claim interface 0 before use [ 1562.812647][ T30] kauditd_printk_skb: 228 callbacks suppressed [ 1562.812675][ T30] audit: type=1400 audit(1756411886.123:59422): avc: denied { recv } for pid=14074 comm="kworker/0:1H" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1563.222802][T23359] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1563.238771][ T30] audit: type=1400 audit(1756411886.543:59423): avc: denied { mounton } for pid=23358 comm="syz.4.4291" path="/270/file0" dev="tmpfs" ino=1475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1563.265132][ T30] audit: type=1400 audit(1756411886.553:59424): avc: denied { bpf } for pid=23345 comm="syz.6.4289" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1563.297645][ T30] audit: type=1400 audit(1756411886.553:59425): avc: denied { prog_run } for pid=23345 comm="syz.6.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1563.327918][ T30] audit: type=1400 audit(1756411886.623:59426): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1563.368197][ T30] audit: type=1400 audit(1756411886.683:59427): avc: denied { read write } for pid=17738 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1563.403553][ T30] audit: type=1400 audit(1756411886.683:59428): avc: denied { open } for pid=17738 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1563.597531][ T30] audit: type=1400 audit(1756411886.683:59429): avc: denied { ioctl } for pid=17738 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1563.731769][ T30] audit: type=1400 audit(1756411886.793:59430): avc: denied { read write } for pid=18301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1563.785815][ T30] audit: type=1400 audit(1756411886.793:59431): avc: denied { open } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1565.227618][ T5927] kernel write not supported for file /snd/seq (pid: 5927 comm: kworker/0:6) [ 1566.142912][T21386] svc: failed to register nfsdv3 RPC service (errno 512). [ 1566.209927][T21386] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1568.125262][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 1568.136876][ T30] audit: type=1400 audit(1756411891.203:59560): avc: denied { map_create } for pid=23398 comm="syz.0.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1568.197522][T23404] FAULT_INJECTION: forcing a failure. [ 1568.197522][T23404] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.298045][ T30] audit: type=1400 audit(1756411891.213:59561): avc: denied { prog_load } for pid=23398 comm="syz.0.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1568.319341][ T30] audit: type=1400 audit(1756411891.223:59562): avc: denied { bpf } for pid=23398 comm="syz.0.4302" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1568.354307][T23404] CPU: 0 UID: 0 PID: 23404 Comm: syz.6.4304 Not tainted syzkaller #0 PREEMPT(full) [ 1568.354339][T23404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1568.354351][T23404] Call Trace: [ 1568.354358][T23404] [ 1568.354367][T23404] dump_stack_lvl+0x16c/0x1f0 [ 1568.354396][T23404] should_fail_ex+0x512/0x640 [ 1568.354423][T23404] should_failslab+0xc2/0x120 [ 1568.354447][T23404] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1568.354482][T23404] ? sidtab_sid2str_get+0x17a/0x680 [ 1568.354515][T23404] kmemdup_noprof+0x29/0x60 [ 1568.354540][T23404] sidtab_sid2str_get+0x17a/0x680 [ 1568.354571][T23404] sidtab_entry_to_string+0x33/0x110 [ 1568.354601][T23404] security_sid_to_context_core+0x35c/0x640 [ 1568.354631][T23404] avc_audit_post_callback+0x109/0x8f0 [ 1568.354651][T23404] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 1568.354678][T23404] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1568.354695][T23404] ? skb_put+0x138/0x1b0 [ 1568.354722][T23404] ? audit_log_n_string+0x253/0x540 [ 1568.354750][T23404] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1568.354767][T23404] common_lsm_audit+0x24b/0x300 [ 1568.354793][T23404] ? __pfx_common_lsm_audit+0x10/0x10 [ 1568.354816][T23404] ? avc_denied+0x14a/0x190 [ 1568.354839][T23404] slow_avc_audit+0x186/0x210 [ 1568.354859][T23404] ? __pfx_slow_avc_audit+0x10/0x10 [ 1568.354878][T23404] ? find_held_lock+0x2b/0x80 [ 1568.354913][T23404] avc_has_perm+0x1b5/0x1f0 [ 1568.354935][T23404] ? __pfx_avc_has_perm+0x10/0x10 [ 1568.354965][T23404] selinux_bpf+0xd7/0x130 [ 1568.354985][T23404] security_bpf+0x241/0x270 [ 1568.355011][T23404] __sys_bpf+0x25c/0x4de0 [ 1568.355041][T23404] ? __pfx___sys_bpf+0x10/0x10 [ 1568.355070][T23404] ? __pfx___schedule+0x10/0x10 [ 1568.355118][T23404] __x64_sys_bpf+0x78/0xc0 [ 1568.355144][T23404] do_syscall_64+0xcd/0x4c0 [ 1568.355168][T23404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.355186][T23404] RIP: 0033:0x7fe3a7f8ebe9 [ 1568.355206][T23404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1568.355223][T23404] RSP: 002b:00007fe3a8d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1568.355241][T23404] RAX: ffffffffffffffda RBX: 00007fe3a81b5fa0 RCX: 00007fe3a7f8ebe9 [ 1568.355254][T23404] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 1568.355266][T23404] RBP: 00007fe3a8d4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.355278][T23404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.355289][T23404] R13: 00007fe3a81b6038 R14: 00007fe3a81b5fa0 R15: 00007ffc11b29f78 [ 1568.355316][T23404] [ 1568.642206][ T30] audit: type=1400 audit(1756411891.223:59563): avc: denied { perfmon } for pid=23398 comm="syz.0.4302" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1568.663512][ T30] audit: type=1400 audit(1756411891.253:59564): avc: denied { execute } for pid=23398 comm="syz.0.4302" dev="hugetlbfs" ino=98330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1568.767347][T23409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1569.074458][ T30] audit: type=1400 audit(1756411891.273:59565): avc: denied { execute_no_trans } for pid=23398 comm="syz.0.4302" path=2F6D656D66643A5B0BDB58AE5B1AA9F5FAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=98330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1569.151952][ T5853] IPVS: starting estimator thread 0... [ 1569.172681][ T30] audit: type=1400 audit(1756411891.353:59566): avc: denied { create } for pid=23398 comm="syz.0.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1569.257476][T23413] IPVS: using max 50 ests per chain, 120000 per kthread [ 1569.331190][ T30] audit: type=1400 audit(1756411891.353:59567): avc: denied { write } for pid=23398 comm="syz.0.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1569.353439][ T30] audit: type=1400 audit(1756411891.363:59568): avc: denied { read } for pid=23398 comm="syz.0.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1569.353694][ T30] audit: type=1400 audit(1756411891.373:59569): avc: denied { allowed } for pid=23398 comm="syz.0.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1570.607676][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4306'. [ 1570.617039][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4306'. [ 1572.217586][ T5927] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1572.397805][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 1573.539848][ T5927] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1573.551198][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 1573.551211][ T30] audit: type=1400 audit(1756411895.943:59759): avc: denied { create } for pid=23445 comm="syz.3.4314" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1573.587418][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1573.621039][ T30] audit: type=1400 audit(1756411895.963:59760): avc: denied { create } for pid=23445 comm="syz.3.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1573.644361][ T30] audit: type=1400 audit(1756411895.963:59761): avc: denied { write } for pid=23445 comm="syz.3.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1573.665769][ T30] audit: type=1400 audit(1756411896.133:59762): avc: denied { recv } for pid=14074 comm="kworker/0:1H" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1573.808087][ T30] audit: type=1400 audit(1756411896.633:59763): avc: denied { recv } for pid=14074 comm="kworker/0:1H" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1573.837929][ T5927] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1573.947357][ T5927] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1573.997112][ T30] audit: type=1400 audit(1756411896.863:59764): avc: denied { ioctl } for pid=23433 comm="syz.4.4311" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1574.023147][ T30] audit: type=1400 audit(1756411896.933:59765): avc: denied { prog_load } for pid=23449 comm="syz.0.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1574.077121][ T5927] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1574.088384][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.575838][ T30] audit: type=1400 audit(1756411896.933:59766): avc: denied { bpf } for pid=23449 comm="syz.0.4315" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1574.896504][ T5927] usb 5-1: can't set config #16, error -71 [ 1574.914015][ T5927] usb 5-1: USB disconnect, device number 112 [ 1574.980787][ T30] audit: type=1400 audit(1756411896.933:59767): avc: denied { perfmon } for pid=23449 comm="syz.0.4315" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1575.024540][T23467] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4318'. [ 1575.035479][ T30] audit: type=1400 audit(1756411897.083:59768): avc: denied { map_create } for pid=23443 comm="syz.2.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1578.371081][T23501] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4325'. [ 1578.584171][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 1578.584225][ T30] audit: type=1400 audit(1756411901.903:59952): avc: denied { read } for pid=23496 comm="syz.0.4326" dev="nsfs" ino=4026533492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1578.697531][ T30] audit: type=1400 audit(1756411901.903:59953): avc: denied { open } for pid=23496 comm="syz.0.4326" path="net:[4026533492]" dev="nsfs" ino=4026533492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1578.844495][ T30] audit: type=1400 audit(1756411901.903:59954): avc: denied { create } for pid=23496 comm="syz.0.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1579.449637][ T30] audit: type=1400 audit(1756411901.943:59955): avc: denied { recv } for pid=18301 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1579.477541][ T30] audit: type=1400 audit(1756411901.943:59956): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1579.797736][ T30] audit: type=1400 audit(1756411901.943:59957): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1579.954402][ T30] audit: type=1400 audit(1756411901.953:59958): avc: denied { read write } for pid=18301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1581.079414][ T30] audit: type=1400 audit(1756411901.953:59959): avc: denied { open } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1581.105718][ T30] audit: type=1400 audit(1756411901.953:59960): avc: denied { create } for pid=23496 comm="syz.0.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1581.204228][ T30] audit: type=1400 audit(1756411901.953:59961): avc: denied { bind } for pid=23496 comm="syz.0.4326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1581.268295][T23525] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1581.587792][ T6585] Bluetooth: hci7: Frame reassembly failed (-84) [ 1582.039604][T23540] FAULT_INJECTION: forcing a failure. [ 1582.039604][T23540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.052826][T23540] CPU: 1 UID: 0 PID: 23540 Comm: syz.4.4334 Not tainted syzkaller #0 PREEMPT(full) [ 1582.052852][T23540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1582.052863][T23540] Call Trace: [ 1582.052872][T23540] [ 1582.052880][T23540] dump_stack_lvl+0x16c/0x1f0 [ 1582.052907][T23540] should_fail_ex+0x512/0x640 [ 1582.052933][T23540] _copy_to_user+0x32/0xd0 [ 1582.052960][T23540] simple_read_from_buffer+0xcb/0x170 [ 1582.052982][T23540] proc_fail_nth_read+0x197/0x240 [ 1582.053005][T23540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1582.053028][T23540] ? rw_verify_area+0xcf/0x6c0 [ 1582.053054][T23540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1582.053075][T23540] vfs_read+0x1e4/0xcf0 [ 1582.053097][T23540] ? __pfx___mutex_lock+0x10/0x10 [ 1582.053119][T23540] ? __pfx_vfs_read+0x10/0x10 [ 1582.053144][T23540] ? __fget_files+0x20e/0x3c0 [ 1582.053172][T23540] ksys_read+0x12a/0x250 [ 1582.053189][T23540] ? __pfx_ksys_read+0x10/0x10 [ 1582.053215][T23540] do_syscall_64+0xcd/0x4c0 [ 1582.053238][T23540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.053258][T23540] RIP: 0033:0x7f592678d5fc [ 1582.053274][T23540] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1582.053292][T23540] RSP: 002b:00007f5927660030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1582.053309][T23540] RAX: ffffffffffffffda RBX: 00007f59269b6180 RCX: 00007f592678d5fc [ 1582.053321][T23540] RDX: 000000000000000f RSI: 00007f59276600a0 RDI: 000000000000000c [ 1582.053332][T23540] RBP: 00007f5927660090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.053343][T23540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.053354][T23540] R13: 00007f59269b6218 R14: 00007f59269b6180 R15: 00007ffff385bcc8 [ 1582.053380][T23540] [ 1583.019497][T23553] 9pnet_fd: Insufficient options for proto=fd [ 1583.338691][ T5860] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1583.506305][T23556] netlink: 'syz.2.4338': attribute type 1 has an invalid length. [ 1583.538940][T23556] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4338'. [ 1583.969803][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 1584.233315][ T30] audit: type=1400 audit(1756411907.053:60127): avc: denied { map_create } for pid=23558 comm="syz.4.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1584.262642][ T30] audit: type=1400 audit(1756411907.063:60128): avc: denied { prog_load } for pid=23558 comm="syz.4.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1584.292522][T23557] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1584.308914][ T30] audit: type=1400 audit(1756411907.073:60129): avc: denied { bpf } for pid=23558 comm="syz.4.4339" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1584.333246][ T30] audit: type=1400 audit(1756411907.073:60130): avc: denied { perfmon } for pid=23558 comm="syz.4.4339" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1584.362698][ T30] audit: type=1400 audit(1756411907.113:60131): avc: denied { execute } for pid=23558 comm="syz.4.4339" dev="hugetlbfs" ino=98662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1584.388870][ T30] audit: type=1400 audit(1756411907.123:60132): avc: denied { execute_no_trans } for pid=23558 comm="syz.4.4339" path=2F6D656D66643A5B0BDB58AE5B1AA9F5FAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=98662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1584.432115][ T30] audit: type=1400 audit(1756411907.153:60133): avc: denied { recv } for pid=23558 comm="syz.4.4339" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1584.541178][ T30] audit: type=1400 audit(1756411907.183:60134): avc: denied { create } for pid=23558 comm="syz.4.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1584.566186][ T30] audit: type=1400 audit(1756411907.193:60135): avc: denied { write } for pid=23558 comm="syz.4.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1584.605203][ T30] audit: type=1400 audit(1756411907.193:60136): avc: denied { read } for pid=23558 comm="syz.4.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1585.127995][T23576] netlink: 'syz.2.4340': attribute type 1 has an invalid length. [ 1585.583822][T23582] NILFS (nbd4): device size too small [ 1586.482473][T23589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4346'. [ 1586.511851][T23586] lo speed is unknown, defaulting to 1000 [ 1587.162602][T23599] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4348'. [ 1587.527722][ T43] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1587.640841][ T5853] kernel write not supported for file /snd/seq (pid: 5853 comm: kworker/0:3) [ 1587.888702][T23606] netlink: 'syz.2.4350': attribute type 1 has an invalid length. [ 1587.896827][T23606] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4350'. [ 1587.907427][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1587.957109][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.972739][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1587.993222][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.014099][ T43] usb 4-1: Product: syz [ 1588.346507][ T43] usb 4-1: Manufacturer: syz [ 1588.351323][ T43] usb 4-1: SerialNumber: syz [ 1588.434184][T23608] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1588.633557][ T43] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1588.646580][ T43] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1588.732624][ T43] usb 4-1: USB disconnect, device number 114 [ 1589.333436][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 1589.333453][ T30] audit: type=1400 audit(1756411912.653:60351): avc: denied { read write } for pid=18591 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1589.501616][ T30] audit: type=1400 audit(1756411912.653:60352): avc: denied { open } for pid=18591 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1589.526013][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.645968][ T30] audit: type=1400 audit(1756411912.653:60353): avc: denied { ioctl } for pid=18591 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1589.672041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1589.768504][ T30] audit: type=1400 audit(1756411912.693:60354): avc: denied { recv } for pid=23619 comm="syz.2.4355" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1589.891384][ T30] audit: type=1400 audit(1756411912.743:60355): avc: denied { map_create } for pid=23619 comm="syz.2.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1589.968263][ T30] audit: type=1400 audit(1756411912.743:60356): avc: denied { perfmon } for pid=23619 comm="syz.2.4355" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1590.287339][ T30] audit: type=1400 audit(1756411912.743:60357): avc: denied { map_read map_write } for pid=23619 comm="syz.2.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1590.558229][ T30] audit: type=1400 audit(1756411912.743:60358): avc: denied { prog_load } for pid=23619 comm="syz.2.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1590.643294][ T30] audit: type=1400 audit(1756411912.743:60359): avc: denied { bpf } for pid=23619 comm="syz.2.4355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1590.666587][ T30] audit: type=1400 audit(1756411912.753:60360): avc: denied { prog_run } for pid=23619 comm="syz.2.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1591.297366][ T5927] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1591.566201][ T5927] usb 4-1: device descriptor read/64, error -71 [ 1591.653483][T23646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4361'. [ 1591.699006][ T5853] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 1591.807418][ T5927] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1591.869398][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57088, setting to 8 [ 1591.901447][ T5853] usb 3-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.00 [ 1591.928959][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.945370][ T5853] usb 3-1: config 0 descriptor?? [ 1591.957435][ T5927] usb 4-1: device descriptor read/64, error -71 [ 1591.970517][T23642] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1592.025703][T23653] netlink: 'syz.0.4365': attribute type 1 has an invalid length. [ 1592.050977][T23653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4365'. [ 1592.077845][ T5927] usb usb4-port1: attempt power cycle [ 1592.223610][T23658] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4363'. [ 1592.286504][T23656] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1592.447592][ T5927] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1592.594733][ T5927] usb 4-1: device descriptor read/8, error -71 [ 1592.602195][ T5853] hid-generic 0003:0486:0185.0028: hidraw0: USB HID v0.08 Device [HID 0486:0185] on usb-dummy_hcd.2-1/input0 [ 1592.754910][T22604] usb 3-1: USB disconnect, device number 104 [ 1592.909751][ T5927] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1593.156450][ T5927] usb 4-1: device descriptor read/8, error -71 [ 1593.504044][ T5927] usb usb4-port1: unable to enumerate USB device [ 1594.342231][ T30] kauditd_printk_skb: 246 callbacks suppressed [ 1594.342248][ T30] audit: type=1400 audit(1756411917.663:60607): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1594.373792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.498135][ T30] audit: type=1400 audit(1756411917.733:60608): avc: denied { create } for pid=23686 comm="syz.3.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1594.610513][T23690] ieee802154 phy1 wpan1: encryption failed: -22 [ 1594.726965][ T30] audit: type=1400 audit(1756411917.733:60609): avc: denied { read } for pid=23686 comm="syz.3.4371" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1594.914600][ T30] audit: type=1400 audit(1756411917.733:60610): avc: denied { open } for pid=23686 comm="syz.3.4371" path="/dev/v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1594.938319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.084687][ T30] audit: type=1400 audit(1756411917.753:60611): avc: denied { ioctl } for pid=23686 comm="syz.3.4371" path="/dev/v4l-subdev5" dev="devtmpfs" ino=945 ioctlcmd=0x563f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1595.361278][ T30] audit: type=1400 audit(1756411917.923:60612): avc: denied { read } for pid=23686 comm="syz.3.4371" dev="nsfs" ino=4026533340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1595.442513][ T30] audit: type=1400 audit(1756411917.923:60613): avc: denied { open } for pid=23686 comm="syz.3.4371" path="net:[4026533340]" dev="nsfs" ino=4026533340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1595.489573][ T30] audit: type=1400 audit(1756411917.923:60614): avc: denied { create } for pid=23686 comm="syz.3.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1595.517977][ T30] audit: type=1400 audit(1756411917.933:60615): avc: denied { write } for pid=23686 comm="syz.3.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1595.538204][ C1] vkms_vblank_simulate: vblank timer overrun [ 1595.545346][ T30] audit: type=1400 audit(1756411918.133:60616): avc: denied { create } for pid=23686 comm="syz.3.4371" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1595.980023][T23700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1596.497856][T23704] tipc: Enabling of bearer rejected, already enabled [ 1596.986197][T23711] netlink: 'syz.3.4377': attribute type 1 has an invalid length. [ 1596.995063][T23711] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4377'. [ 1597.139854][T23714] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1597.544095][T23724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1598.482690][T23710] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1598.482690][T23710] program syz.2.4378 not setting count and/or reply_len properly [ 1599.351362][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 1599.351387][ T30] audit: type=1400 audit(1756411922.673:60800): avc: denied { recv } for pid=23733 comm="syz.4.4384" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1599.429814][ T30] audit: type=1400 audit(1756411922.753:60801): avc: denied { create } for pid=23744 comm="syz.2.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1599.860375][ T30] audit: type=1400 audit(1756411923.063:60802): avc: denied { prog_load } for pid=23744 comm="syz.2.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1599.880356][ T30] audit: type=1400 audit(1756411923.063:60803): avc: denied { bpf } for pid=23744 comm="syz.2.4387" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1600.393306][ T30] audit: type=1400 audit(1756411923.063:60804): avc: denied { perfmon } for pid=23744 comm="syz.2.4387" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1600.531446][T23739] autofs: Unknown parameter '„' [ 1600.906560][ T30] audit: type=1400 audit(1756411923.083:60805): avc: denied { read } for pid=23744 comm="syz.2.4387" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1601.125502][ T30] audit: type=1400 audit(1756411923.083:60806): avc: denied { read open } for pid=23744 comm="syz.2.4387" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1601.151314][ T30] audit: type=1400 audit(1756411923.083:60807): avc: denied { ioctl } for pid=23744 comm="syz.2.4387" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1601.183541][ T30] audit: type=1400 audit(1756411923.103:60808): avc: denied { create } for pid=23744 comm="syz.2.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1601.208146][T23755] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1602.422880][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4393'. [ 1602.432260][T23775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4393'. [ 1602.754021][ T6726] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.772946][ T6726] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.786801][ T6726] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1602.802800][ T6726] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1603.499466][T23770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1603.521774][T23770] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1604.978228][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 1604.981678][ T30] kauditd_printk_skb: 186 callbacks suppressed [ 1604.981702][ T30] audit: type=1400 audit(1756411926.973:60990): avc: denied { prog_run } for pid=23784 comm="syz.0.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1605.043157][T23770] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1605.052084][T23770] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1605.074659][ T30] audit: type=1400 audit(1756411927.153:60991): avc: denied { create } for pid=23784 comm="syz.0.4396" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1605.097820][ T30] audit: type=1400 audit(1756411927.173:60992): avc: denied { create } for pid=23784 comm="syz.0.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1605.119294][ T30] audit: type=1400 audit(1756411927.173:60993): avc: denied { recv } for pid=23784 comm="syz.0.4396" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1605.156072][T23770] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1605.162251][ T30] audit: type=1400 audit(1756411927.173:60994): avc: denied { write } for pid=23784 comm="syz.0.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1605.258828][ T30] audit: type=1400 audit(1756411927.673:60995): avc: denied { recv } for pid=23784 comm="syz.0.4396" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1605.324526][ T30] audit: type=1400 audit(1756411928.383:60996): avc: denied { recv } for pid=23768 comm="syz.6.4394" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1605.461516][ T30] audit: type=1400 audit(1756411928.463:60997): avc: denied { recv } for pid=23768 comm="syz.6.4394" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1605.561996][ T30] audit: type=1400 audit(1756411928.633:60998): avc: denied { read write } for pid=17974 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1605.603148][ T30] audit: type=1400 audit(1756411928.633:60999): avc: denied { open } for pid=17974 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1605.848608][T22604] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 1606.010371][T22604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57088, setting to 8 [ 1606.027463][T22604] usb 3-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.00 [ 1606.074517][T22604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.210459][T23792] autofs: Unknown parameter '„' [ 1606.371257][T22604] usb 3-1: config 0 descriptor?? [ 1606.395258][T23791] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1607.000364][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 1607.114333][ T5860] Bluetooth: hci6: command 0x0c1a tx timeout [ 1607.339871][T22604] usbhid 3-1:0.0: can't add hid device: -71 [ 1607.340122][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.345896][T22604] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1607.411309][T22604] usb 3-1: USB disconnect, device number 105 [ 1607.419104][T23798] autofs: Unknown parameter '„' [ 1608.629179][T23823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4407'. [ 1609.077371][T22604] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1609.421530][T22604] usb 5-1: Using ep0 maxpacket: 8 [ 1609.581542][ T5860] Bluetooth: hci6: command 0x0c1a tx timeout [ 1609.889935][T22604] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1609.898798][T22604] usb 5-1: config 179 has no interface number 0 [ 1609.905459][T22604] usb 5-1: config 179 interface 65 altsetting 45 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1609.945865][T22604] usb 5-1: config 179 interface 65 altsetting 45 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1610.265386][T22604] usb 5-1: config 179 interface 65 altsetting 45 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1610.279218][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 1610.279239][ T30] audit: type=1400 audit(1756411933.603:61183): avc: denied { egress } for pid=23832 comm="syz.3.4410" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1610.406302][T22604] usb 5-1: config 179 interface 65 altsetting 45 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1610.806347][ T30] audit: type=1400 audit(1756411933.603:61184): avc: denied { sendto } for pid=23832 comm="syz.3.4410" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1610.830967][ T30] audit: type=1400 audit(1756411934.003:61185): avc: denied { map_create } for pid=23828 comm="syz.6.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1610.850640][ T30] audit: type=1400 audit(1756411934.013:61186): avc: denied { perfmon } for pid=23828 comm="syz.6.4409" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1610.872115][ T30] audit: type=1400 audit(1756411934.053:61187): avc: denied { map_read map_write } for pid=23828 comm="syz.6.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1610.879817][T22604] usb 5-1: config 179 interface 65 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1610.893096][ T30] audit: type=1400 audit(1756411934.123:61188): avc: denied { prog_load } for pid=23828 comm="syz.6.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1610.928053][ T30] audit: type=1400 audit(1756411934.123:61189): avc: denied { bpf } for pid=23828 comm="syz.6.4409" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1611.050253][ T30] audit: type=1400 audit(1756411934.123:61190): avc: denied { prog_run } for pid=23828 comm="syz.6.4409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1611.120380][ T30] audit: type=1400 audit(1756411934.253:61191): avc: denied { read } for pid=23828 comm="syz.6.4409" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1611.148591][T22604] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1611.165794][T22604] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1611.184649][T22604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.190550][ T30] audit: type=1400 audit(1756411934.253:61192): avc: denied { open } for pid=23828 comm="syz.6.4409" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1611.267888][T22604] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input94 [ 1611.575269][T23831] input: syz0 as /devices/virtual/input/input95 [ 1611.627651][ T5860] Bluetooth: hci6: command 0x0c1a tx timeout [ 1611.853345][T22604] usb 5-1: USB disconnect, device number 113 [ 1611.927364][ T43] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1612.119649][ T43] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 1612.128343][ T43] usb 4-1: config 0 has no interface number 0 [ 1612.136829][ T43] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.13 [ 1612.152612][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.167752][ T43] usb 4-1: Product: syz [ 1612.172059][ T43] usb 4-1: Manufacturer: syz [ 1612.176938][ T43] usb 4-1: SerialNumber: syz [ 1612.200560][ T43] usb 4-1: config 0 descriptor?? [ 1613.277997][ T43] usb 4-1: bad CDC descriptors [ 1613.331028][ T43] usb 4-1: USB disconnect, device number 119 [ 1613.351294][T23864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4417'. [ 1614.094341][T23872] netlink: 'syz.0.4420': attribute type 29 has an invalid length. [ 1614.141160][T23872] netlink: 'syz.0.4420': attribute type 29 has an invalid length. [ 1614.163316][T23872] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3351 sclass=netlink_xfrm_socket pid=23872 comm=syz.0.4420 [ 1614.232263][T23879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1614.811624][T23892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1615.879453][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 1615.879470][ T30] audit: type=1400 audit(1756411939.193:61448): avc: denied { recv } for pid=196 comm="kworker/u8:5" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1616.172183][ T30] audit: type=1400 audit(1756411939.253:61449): avc: denied { create } for pid=23891 comm="syz.4.4425" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1616.349196][ T30] audit: type=1400 audit(1756411939.253:61450): avc: denied { create } for pid=23891 comm="syz.4.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1616.500340][ T30] audit: type=1400 audit(1756411939.253:61451): avc: denied { write } for pid=23891 comm="syz.4.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1616.800081][ T30] audit: type=1400 audit(1756411939.383:61452): avc: denied { read write } for pid=18301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1617.120967][ T30] audit: type=1400 audit(1756411939.383:61453): avc: denied { read write open } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1617.477151][ T30] audit: type=1400 audit(1756411939.393:61454): avc: denied { ioctl } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1617.789166][ T30] audit: type=1400 audit(1756411939.593:61455): avc: denied { recv } for pid=5833 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1617.907376][ T30] audit: type=1400 audit(1756411939.693:61456): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1618.155151][ T30] audit: type=1400 audit(1756411939.743:61457): avc: denied { create } for pid=23897 comm="syz.2.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1618.343943][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4428'. [ 1618.832045][T23919] : Can't lookup blockdev [ 1619.818083][T23923] bridge0: entered promiscuous mode [ 1619.823745][T23923] macsec1: entered promiscuous mode [ 1619.875006][T23923] bridge0: port 3(macsec1) entered blocking state [ 1619.912665][T23923] bridge0: port 3(macsec1) entered disabled state [ 1619.923241][T23923] macsec1: entered allmulticast mode [ 1619.929129][T23923] bridge0: entered allmulticast mode [ 1620.118031][T23923] macsec1: left allmulticast mode [ 1620.127874][T23923] bridge0: left allmulticast mode [ 1620.189960][T23923] bridge0: left promiscuous mode [ 1620.337050][T23933] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1620.680783][T23935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1620.707133][T23935] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4434'. [ 1620.960000][ T55] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1620.968930][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 1620.969010][ T30] audit: type=1400 audit(1756411944.183:61625): avc: denied { execmem } for pid=23939 comm="syz.4.4436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1621.010320][ T30] audit: type=1400 audit(1756411944.193:61626): avc: denied { recv } for pid=17738 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1621.049859][T23941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1621.070579][ T30] audit: type=1400 audit(1756411944.323:61627): avc: denied { ioctl } for pid=23937 comm="syz.2.4435" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1621.098424][ T30] audit: type=1400 audit(1756411944.323:61628): avc: denied { ioctl } for pid=23937 comm="syz.2.4435" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1621.128759][ T30] audit: type=1400 audit(1756411944.373:61629): avc: denied { read } for pid=23939 comm="syz.4.4436" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1621.154421][ T30] audit: type=1400 audit(1756411944.373:61630): avc: denied { read open } for pid=23939 comm="syz.4.4436" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1621.179697][ T30] audit: type=1400 audit(1756411944.373:61631): avc: denied { ioctl } for pid=23939 comm="syz.4.4436" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1621.212196][ T30] audit: type=1400 audit(1756411944.403:61632): avc: denied { read write } for pid=23942 comm="syz.0.4437" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1621.237853][ T55] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1621.249375][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.258237][ T55] usb 3-1: Product: syz [ 1621.263651][ T55] usb 3-1: Manufacturer: syz [ 1621.268861][ T30] audit: type=1400 audit(1756411944.403:61633): avc: denied { open } for pid=23942 comm="syz.0.4437" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1621.293297][ T55] usb 3-1: SerialNumber: syz [ 1621.301855][ T55] usb 3-1: config 0 descriptor?? [ 1621.311008][ T30] audit: type=1400 audit(1756411944.403:61634): avc: denied { ioctl } for pid=23942 comm="syz.0.4437" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1621.343552][ T55] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1621.428767][T23945] netlink: 'syz.6.4438': attribute type 1 has an invalid length. [ 1621.439938][T23945] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4438'. [ 1621.652263][T23946] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1621.808254][T23949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4439'. [ 1621.885736][T23949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4439'. [ 1622.369795][ T55] usb 3-1: USB disconnect, device number 106 [ 1623.516004][T22604] kernel write not supported for file /snd/seq (pid: 22604 comm: kworker/0:0) [ 1624.810389][T23986] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1624.821626][T23986] cramfs: wrong magic [ 1624.842979][T23986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1625.345157][T23989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4448'. [ 1626.050831][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 1626.050849][ T30] audit: type=1400 audit(1756411949.373:61824): avc: denied { read } for pid=23992 comm="syz.4.4450" dev="nsfs" ino=4026533531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1626.111217][T23993] netlink: 'syz.4.4450': attribute type 1 has an invalid length. [ 1626.119216][ T30] audit: type=1400 audit(1756411949.413:61825): avc: denied { recv } for pid=5833 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1626.119288][ T30] audit: type=1400 audit(1756411949.413:61826): avc: denied { read write } for pid=18301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1626.119326][ T30] audit: type=1400 audit(1756411949.413:61827): avc: denied { open } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1626.119359][ T30] audit: type=1400 audit(1756411949.413:61828): avc: denied { ioctl } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1626.119400][ T30] audit: type=1400 audit(1756411949.413:61829): avc: denied { read open } for pid=23992 comm="syz.4.4450" path="net:[4026533531]" dev="nsfs" ino=4026533531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1626.119442][ T30] audit: type=1400 audit(1756411949.423:61830): avc: denied { create } for pid=23992 comm="syz.4.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1626.119480][ T30] audit: type=1400 audit(1756411949.423:61831): avc: denied { read write } for pid=18591 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1626.119522][ T30] audit: type=1400 audit(1756411949.433:61832): avc: denied { write } for pid=23992 comm="syz.4.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1626.130739][ T30] audit: type=1400 audit(1756411949.443:61833): avc: denied { read } for pid=23996 comm="syz.2.4452" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1626.314512][T23993] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4450'. [ 1626.517895][T24010] CIFS: VFS: Malformed UNC in devname [ 1626.617721][T24004] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1626.980170][T24016] lo speed is unknown, defaulting to 1000 [ 1628.725538][T24015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4457'. [ 1628.750759][T24015] : entered promiscuous mode [ 1629.027501][T24044] binder: BINDER_SET_CONTEXT_MGR already set [ 1629.087720][T24044] binder: 24043:24044 ioctl 4018620d 200000000040 returned -16 [ 1630.330650][T24055] input: syz1 as /devices/virtual/input/input96 [ 1630.470534][T24057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4467'. [ 1630.486720][T24057] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4467'. [ 1630.843899][T24065] netlink: 'syz.2.4470': attribute type 1 has an invalid length. [ 1630.853489][T24065] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1631.386652][ T30] kauditd_printk_skb: 278 callbacks suppressed [ 1631.386696][ T30] audit: type=1400 audit(1756411954.703:62112): avc: denied { recv } for pid=24064 comm="syz.3.4471" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1631.963990][T24070] lo speed is unknown, defaulting to 1000 [ 1631.973096][T24073] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1631.983573][T24072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1632.002542][ T30] audit: type=1400 audit(1756411955.263:62113): avc: denied { create } for pid=24069 comm="syz.6.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1632.027579][ T30] audit: type=1400 audit(1756411955.273:62114): avc: denied { read write } for pid=24067 comm="syz.4.4472" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1632.089760][T24072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1632.125039][ T30] audit: type=1400 audit(1756411955.273:62115): avc: denied { read write open } for pid=24067 comm="syz.4.4472" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1632.158759][ T30] audit: type=1400 audit(1756411955.283:62116): avc: denied { ioctl } for pid=24067 comm="syz.4.4472" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x5610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1632.185636][ T30] audit: type=1400 audit(1756411955.283:62117): avc: denied { read } for pid=24067 comm="syz.4.4472" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1632.400477][ T30] audit: type=1400 audit(1756411955.293:62119): avc: denied { mounton } for pid=24063 comm="syz.2.4470" path="/273/file0" dev="tmpfs" ino=1501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1632.756215][ T30] audit: type=1400 audit(1756411955.283:62118): avc: denied { open } for pid=24067 comm="syz.4.4472" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1632.788391][ T30] audit: type=1400 audit(1756411955.303:62120): avc: denied { write } for pid=24067 comm="syz.4.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1632.916614][ T30] audit: type=1400 audit(1756411955.303:62121): avc: denied { ioctl } for pid=24067 comm="syz.4.4472" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1633.121326][T24089] lo speed is unknown, defaulting to 1000 [ 1633.998323][T24099] netlink: 'syz.0.4478': attribute type 12 has an invalid length. [ 1635.358155][T24103] autofs: Unknown parameter ' ' [ 1635.754706][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4483'. [ 1636.017578][ T5927] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1636.174770][T24120] autofs: Unknown parameter '„' [ 1636.229189][T22604] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1636.275848][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.317974][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.334091][ T5927] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1636.347964][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.390801][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 1636.390918][ T30] audit: type=1400 audit(1756411959.713:62313): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1636.448229][ T30] audit: type=1400 audit(1756411959.753:62314): avc: denied { ioctl } for pid=24116 comm="syz.2.4485" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1636.518479][ T5927] usb 5-1: config 0 descriptor?? [ 1636.535252][ T30] audit: type=1400 audit(1756411959.853:62315): avc: denied { ioctl } for pid=24113 comm="syz.4.4482" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1636.567696][T22604] usb 3-1: Using ep0 maxpacket: 32 [ 1636.586784][ T30] audit: type=1400 audit(1756411959.903:62316): avc: denied { ioctl } for pid=24116 comm="syz.2.4485" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1636.620744][T22604] usb 3-1: config 0 has no interfaces? [ 1637.268925][ T30] audit: type=1400 audit(1756411959.943:62317): avc: denied { ioctl } for pid=24116 comm="syz.2.4485" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1637.296264][ T30] audit: type=1400 audit(1756411959.963:62318): avc: denied { allowed } for pid=24121 comm="syz.3.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1637.328545][ T30] audit: type=1400 audit(1756411959.963:62319): avc: denied { create } for pid=24121 comm="syz.3.4486" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1637.350698][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 1637.356820][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1637.365046][T22604] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1637.374698][T22604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.385528][ T5927] usb 5-1: USB disconnect, device number 114 [ 1637.391944][ T30] audit: type=1400 audit(1756411959.963:62320): avc: denied { map } for pid=24121 comm="syz.3.4486" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1637.419665][T22604] usb 3-1: Product: syz [ 1637.424523][T22604] usb 3-1: Manufacturer: syz [ 1637.429598][ T30] audit: type=1400 audit(1756411959.963:62321): avc: denied { read write } for pid=24121 comm="syz.3.4486" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1637.457520][ T30] audit: type=1400 audit(1756411960.593:62322): avc: denied { ioctl } for pid=24116 comm="syz.2.4485" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1637.482636][T22604] usb 3-1: SerialNumber: syz [ 1637.488678][T22604] usb 3-1: config 0 descriptor?? [ 1638.812850][T24140] : renamed from bridge_slave_0 (while UP) [ 1638.898412][T24146] misc userio: Can't change port type on an already running userio instance [ 1638.916357][T24146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4492'. [ 1638.959228][T24146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1639.003928][T24149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1639.011498][T24149] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1639.033482][T24149] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1639.353463][T24153] lo speed is unknown, defaulting to 1000 [ 1639.637839][T11353] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1639.877861][T11353] usb 4-1: Using ep0 maxpacket: 8 [ 1639.890688][T11353] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1639.960455][T11353] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1639.991461][T11353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.012417][ T43] usb 3-1: USB disconnect, device number 107 [ 1640.038378][T11353] usb 4-1: config 0 descriptor?? [ 1641.527613][T22604] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1643.617690][ T30] kauditd_printk_skb: 174 callbacks suppressed [ 1643.617717][ T30] audit: type=1400 audit(1756411964.923:62497): avc: denied { ioctl } for pid=24154 comm="syz.3.4495" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1643.710217][T11353] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1643.853076][ T30] audit: type=1400 audit(1756411965.133:62498): avc: denied { prog_load } for pid=24154 comm="syz.3.4495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1643.873891][ T30] audit: type=1400 audit(1756411965.223:62499): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1643.947169][ T30] audit: type=1400 audit(1756411966.993:62500): avc: denied { recv } for pid=6585 comm="kworker/u8:10" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1644.362820][ T30] audit: type=1400 audit(1756411966.993:62501): avc: denied { recv } for pid=6585 comm="kworker/u8:10" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1644.406624][ T30] audit: type=1400 audit(1756411967.013:62502): avc: denied { read write } for pid=18301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1644.444336][T11353] usb 4-1: USB disconnect, device number 120 [ 1644.634077][ T30] audit: type=1400 audit(1756411967.013:62503): avc: denied { open } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1644.871676][ T30] audit: type=1400 audit(1756411967.013:62504): avc: denied { ioctl } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1644.944634][ T30] audit: type=1400 audit(1756411967.053:62505): avc: denied { execmem } for pid=24174 comm="syz.0.4499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1644.979588][ T30] audit: type=1400 audit(1756411967.193:62506): avc: denied { recv } for pid=24174 comm="syz.0.4499" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1645.217708][T11353] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1645.484708][T11353] usb 4-1: Using ep0 maxpacket: 32 [ 1645.501955][T11353] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1645.628040][T11353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.760486][T11353] usb 4-1: config 0 descriptor?? [ 1645.779615][T11353] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1646.167684][T11353] gspca_sunplus: reg_w_riv err -71 [ 1646.173021][T11353] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1646.327667][T11353] usb 4-1: USB disconnect, device number 121 [ 1647.927886][T22604] usb 7-1: device descriptor read/64, error -71 [ 1648.123271][T24230] FAULT_INJECTION: forcing a failure. [ 1648.123271][T24230] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.206103][T24230] CPU: 1 UID: 0 PID: 24230 Comm: syz.4.4512 Not tainted syzkaller #0 PREEMPT(full) [ 1648.206134][T24230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1648.206145][T24230] Call Trace: [ 1648.206152][T24230] [ 1648.206160][T24230] dump_stack_lvl+0x16c/0x1f0 [ 1648.206187][T24230] should_fail_ex+0x512/0x640 [ 1648.206209][T24230] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1648.206233][T24230] should_failslab+0xc2/0x120 [ 1648.206255][T24230] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1648.206275][T24230] ? getname_flags.part.0+0x4c/0x550 [ 1648.206306][T24230] getname_flags.part.0+0x4c/0x550 [ 1648.206335][T24230] getname_flags+0x93/0xf0 [ 1648.206355][T24230] do_sys_openat2+0xb8/0x1d0 [ 1648.206381][T24230] ? __pfx_do_sys_openat2+0x10/0x10 [ 1648.206411][T24230] ? __pfx___schedule+0x10/0x10 [ 1648.206434][T24230] __x64_sys_openat+0x174/0x210 [ 1648.206459][T24230] ? __pfx___x64_sys_openat+0x10/0x10 [ 1648.206495][T24230] do_syscall_64+0xcd/0x4c0 [ 1648.206519][T24230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.206538][T24230] RIP: 0033:0x7f592678d550 [ 1648.206553][T24230] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1648.206570][T24230] RSP: 002b:00007f5927680f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1648.206589][T24230] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f592678d550 [ 1648.206601][T24230] RDX: 0000000000000000 RSI: 00007f5927680fa0 RDI: 00000000ffffff9c [ 1648.206612][T24230] RBP: 00007f5927680fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.206623][T24230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1648.206634][T24230] R13: 00007f59269b6128 R14: 00007f59269b6090 R15: 00007ffff385bcc8 [ 1648.206660][T24230] [ 1648.407263][T22604] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1648.641342][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 1648.641392][ T30] audit: type=1400 audit(1756411971.843:62657): avc: denied { recv } for pid=24225 comm="syz.3.4511" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1648.917610][ T30] audit: type=1400 audit(1756411972.003:62658): avc: denied { ioctl } for pid=24217 comm="syz.6.4509" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1648.925364][T22604] usb 7-1: Using ep0 maxpacket: 8 [ 1649.026349][ T30] audit: type=1400 audit(1756411972.343:62659): avc: denied { recv } for pid=24225 comm="syz.3.4511" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1649.244422][ T30] audit: type=1400 audit(1756411972.493:62660): avc: denied { create } for pid=24225 comm="syz.3.4511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1649.463966][ T30] audit: type=1400 audit(1756411972.503:62661): avc: denied { allowed } for pid=24225 comm="syz.3.4511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1649.672086][ T30] audit: type=1400 audit(1756411972.513:62662): avc: denied { create } for pid=24225 comm="syz.3.4511" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1649.771555][T22604] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1649.780144][T22604] usb 7-1: config 179 has no interface number 0 [ 1649.786492][T22604] usb 7-1: config 179 interface 65 altsetting 45 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1649.806364][T22604] usb 7-1: config 179 interface 65 altsetting 45 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1649.818120][T22604] usb 7-1: config 179 interface 65 altsetting 45 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1649.829838][T22604] usb 7-1: config 179 interface 65 altsetting 45 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1649.840446][T22604] usb 7-1: config 179 interface 65 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1649.853031][ T30] audit: type=1400 audit(1756411972.513:62663): avc: denied { map } for pid=24225 comm="syz.3.4511" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1649.862815][T22604] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1649.903177][T22604] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1649.915039][T22604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.296946][T22604] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input98 [ 1650.304340][ T30] audit: type=1400 audit(1756411972.513:62664): avc: denied { read write } for pid=24225 comm="syz.3.4511" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1650.524117][ T30] audit: type=1400 audit(1756411972.523:62665): avc: denied { map } for pid=24225 comm="syz.3.4511" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1650.584251][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1650.596503][T22604] usb 7-1: USB disconnect, device number 3 [ 1650.959077][T24224] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1650.969206][T24224] autofs: Unknown parameter '„' [ 1651.293588][T24261] netlink: 'syz.3.4520': attribute type 64 has an invalid length. [ 1651.325468][T24261] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1651.558888][T11353] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1652.035208][T11353] usb 5-1: config 0 has an invalid interface number: 123 but max is 0 [ 1652.121903][T11353] usb 5-1: config 0 has no interface number 0 [ 1653.299396][T11353] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.13 [ 1653.347720][T11353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.384522][T11353] usb 5-1: Product: syz [ 1653.415188][T11353] usb 5-1: Manufacturer: syz [ 1653.452978][T11353] usb 5-1: SerialNumber: syz [ 1653.591335][T24279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1653.592652][T11353] usb 5-1: config 0 descriptor?? [ 1653.701129][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 1653.701148][ T30] audit: type=1400 audit(1756411977.023:62821): avc: denied { allowed } for pid=24274 comm="syz.3.4522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1653.939650][ T30] audit: type=1400 audit(1756411977.023:62822): avc: denied { create } for pid=24274 comm="syz.3.4522" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1653.996587][ T30] audit: type=1400 audit(1756411977.023:62823): avc: denied { map } for pid=24274 comm="syz.3.4522" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1653.997657][T11353] usb 5-1: bad CDC descriptors [ 1654.032789][ T30] audit: type=1400 audit(1756411977.023:62824): avc: denied { read write } for pid=24274 comm="syz.3.4522" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1654.072545][ T30] audit: type=1400 audit(1756411977.033:62825): avc: denied { ioctl } for pid=24256 comm="syz.4.4518" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1654.141767][T11353] usb 5-1: USB disconnect, device number 115 [ 1654.166832][ T30] audit: type=1400 audit(1756411977.033:62826): avc: denied { ioctl } for pid=24256 comm="syz.4.4518" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1654.201359][ T30] audit: type=1400 audit(1756411977.143:62827): avc: denied { map_create } for pid=24276 comm="syz.6.4523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1654.249091][ T30] audit: type=1400 audit(1756411977.153:62828): avc: denied { prog_load } for pid=24276 comm="syz.6.4523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1654.275653][ T30] audit: type=1400 audit(1756411977.153:62829): avc: denied { bpf } for pid=24276 comm="syz.6.4523" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1654.302752][ T30] audit: type=1400 audit(1756411977.153:62830): avc: denied { perfmon } for pid=24276 comm="syz.6.4523" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1655.408014][T11353] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1655.930636][T11353] usb 4-1: Using ep0 maxpacket: 16 [ 1656.269220][T11353] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1656.289701][T11353] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1656.300838][T11353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.309710][T11353] usb 4-1: Product: syz [ 1656.314048][T11353] usb 4-1: Manufacturer: syz [ 1656.330519][T11353] usb 4-1: SerialNumber: syz [ 1656.646144][T11353] usb 4-1: config 0 descriptor?? [ 1656.708575][T11353] CoreChips 4-1:0.0: probe with driver CoreChips failed with error -22 [ 1658.444720][ T6000] usb 4-1: USB disconnect, device number 122 [ 1658.601866][T24330] netlink: 'syz.6.4534': attribute type 1 has an invalid length. [ 1658.609784][T24330] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4534'. [ 1658.711752][ T30] kauditd_printk_skb: 243 callbacks suppressed [ 1658.711774][ T30] audit: type=1400 audit(1756411982.032:63074): avc: denied { ioctl } for pid=24331 comm="syz.4.4536" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1658.767992][ T43] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1658.832744][T24336] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1658.845761][ T30] audit: type=1400 audit(1756411982.122:63075): avc: denied { ioctl } for pid=24321 comm="syz.2.4533" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1658.874596][ T30] audit: type=1400 audit(1756411982.152:63076): avc: denied { ioctl } for pid=24321 comm="syz.2.4533" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1658.905008][ T30] audit: type=1400 audit(1756411982.152:63077): avc: denied { mounton } for pid=24329 comm="syz.6.4534" path="/49/file0" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1658.958753][ T55] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1658.973674][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1659.000144][ T43] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.001501][ T30] audit: type=1400 audit(1756411982.202:63078): avc: denied { ioctl } for pid=24321 comm="syz.2.4533" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1659.165522][ T30] audit: type=1400 audit(1756411982.312:63079): avc: denied { ioctl } for pid=24321 comm="syz.2.4533" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1659.192691][ T30] audit: type=1400 audit(1756411982.362:63080): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1659.248809][ T30] audit: type=1400 audit(1756411982.362:63081): avc: denied { prog_load } for pid=24337 comm="syz.0.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1659.762912][ T43] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1659.774772][ T43] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1659.802877][ T43] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1659.827562][ T30] audit: type=1400 audit(1756411982.362:63082): avc: denied { bpf } for pid=24337 comm="syz.0.4537" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1659.853781][ T43] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1659.897612][ T30] audit: type=1400 audit(1756411982.362:63083): avc: denied { execmem } for pid=24337 comm="syz.0.4537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1659.918328][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.957166][ T43] usb 3-1: Product: syz [ 1659.961503][ T43] usb 3-1: Manufacturer: syz [ 1659.966104][ T43] usb 3-1: SerialNumber: syz [ 1660.046830][ T43] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1660.075293][T24346] 9pnet_fd: Insufficient options for proto=fd [ 1660.100376][ T43] imon 3-1:155.0: unable to initialize intf0, err -19 [ 1660.196003][ T43] imon:imon_probe: failed to initialize context! [ 1660.251218][ T43] imon 3-1:155.0: unable to register, err -19 [ 1660.265912][T24322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.312197][T24322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.353288][T22604] usb 3-1: USB disconnect, device number 108 [ 1660.504576][T24356] netlink: 'syz.3.4540': attribute type 21 has an invalid length. [ 1660.675760][T24356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1661.062447][T24370] lo speed is unknown, defaulting to 1000 [ 1662.153380][ T43] hid_parser_main: 7 callbacks suppressed [ 1662.153402][ T43] hid-generic 0003:0004:0000.0029: unknown main item tag 0x0 [ 1662.233175][ T43] hid-generic 0003:0004:0000.0029: unknown main item tag 0x6 [ 1662.288755][ T43] hid-generic 0003:0004:0000.0029: unknown main item tag 0x6 [ 1662.309354][ T43] hid-generic 0003:0004:0000.0029: item fetching failed at offset 16/18 [ 1662.342338][ T43] hid-generic 0003:0004:0000.0029: probe with driver hid-generic failed with error -22 [ 1663.476448][T24396] netlink: 4528 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1663.486093][T24396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1663.495177][T24396] netlink: 4528 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1664.045136][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 1664.045156][ T30] audit: type=1400 audit(1756411987.355:63288): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1664.296353][ T30] audit: type=1400 audit(1756411987.605:63289): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1664.364291][ T30] audit: type=1400 audit(1756411987.645:63290): avc: denied { read write } for pid=18301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1664.400914][ T30] audit: type=1400 audit(1756411987.645:63291): avc: denied { open } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1664.543998][ T30] audit: type=1400 audit(1756411987.645:63292): avc: denied { ioctl } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1664.569797][ C0] vkms_vblank_simulate: vblank timer overrun [ 1664.625701][ T30] audit: type=1400 audit(1756411987.795:63293): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1664.650937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1664.762557][ T30] audit: type=1400 audit(1756411987.805:63294): avc: denied { read write } for pid=17974 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1664.787332][ C0] vkms_vblank_simulate: vblank timer overrun [ 1664.833670][ T30] audit: type=1400 audit(1756411987.815:63295): avc: denied { open } for pid=17974 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1665.071718][ T30] audit: type=1400 audit(1756411987.815:63296): avc: denied { ioctl } for pid=17974 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1665.098264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1665.202128][ T30] audit: type=1400 audit(1756411987.895:63297): avc: denied { recv } for pid=24399 comm="syz.2.4553" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1666.077688][T24424] FAULT_INJECTION: forcing a failure. [ 1666.077688][T24424] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.090517][T24424] CPU: 1 UID: 0 PID: 24424 Comm: syz.0.4556 Not tainted syzkaller #0 PREEMPT(full) [ 1666.090547][T24424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1666.090559][T24424] Call Trace: [ 1666.090570][T24424] [ 1666.090580][T24424] dump_stack_lvl+0x16c/0x1f0 [ 1666.090613][T24424] should_fail_ex+0x512/0x640 [ 1666.090635][T24424] ? fs_reclaim_acquire+0xae/0x150 [ 1666.090663][T24424] ? tomoyo_encode2+0x100/0x3e0 [ 1666.090690][T24424] should_failslab+0xc2/0x120 [ 1666.090713][T24424] __kmalloc_noprof+0xd2/0x510 [ 1666.090741][T24424] tomoyo_encode2+0x100/0x3e0 [ 1666.090771][T24424] tomoyo_encode+0x29/0x50 [ 1666.090796][T24424] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1666.090826][T24424] ? tomoyo_profile+0x47/0x60 [ 1666.090848][T24424] tomoyo_path_number_perm+0x245/0x580 [ 1666.090872][T24424] ? tomoyo_path_number_perm+0x237/0x580 [ 1666.090898][T24424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1666.090951][T24424] ? find_held_lock+0x2b/0x80 [ 1666.090975][T24424] ? hook_file_ioctl_common+0x145/0x410 [ 1666.091002][T24424] ? __fget_files+0x20e/0x3c0 [ 1666.091035][T24424] security_file_ioctl+0x9b/0x240 [ 1666.091066][T24424] __x64_sys_ioctl+0xb7/0x210 [ 1666.091097][T24424] do_syscall_64+0xcd/0x4c0 [ 1666.091122][T24424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.091142][T24424] RIP: 0033:0x7f3b39f8ebe9 [ 1666.091160][T24424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1666.091179][T24424] RSP: 002b:00007f3b3ae32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1666.091201][T24424] RAX: ffffffffffffffda RBX: 00007f3b3a1b6180 RCX: 00007f3b39f8ebe9 [ 1666.091214][T24424] RDX: 0000200000000080 RSI: 00000000c020aa07 RDI: 000000000000000b [ 1666.091227][T24424] RBP: 00007f3b3ae32090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.091238][T24424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1666.091249][T24424] R13: 00007f3b3a1b6218 R14: 00007f3b3a1b6180 R15: 00007ffd0d7a23e8 [ 1666.091276][T24424] [ 1666.091419][T24424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1667.147389][T24420] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1667.154082][T24420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1667.300725][T24420] vhci_hcd vhci_hcd.0: Device attached [ 1667.411593][T24421] vhci_hcd: connection closed [ 1667.483145][T13950] vhci_hcd: stop threads [ 1667.498963][ T6000] vhci_hcd: vhci_device speed not set [ 1667.557812][ T6000] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 1667.582763][T13950] vhci_hcd: release socket [ 1667.683846][T13950] vhci_hcd: disconnect device [ 1668.477391][ T5853] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1668.514356][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.607429][ T5853] usb 3-1: device descriptor read/64, error -71 [ 1668.647589][T24436] netlink: 'syz.4.4559': attribute type 1 has an invalid length. [ 1668.655698][T24436] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4559'. [ 1668.990047][T24447] binder: BINDER_SET_CONTEXT_MGR already set [ 1668.996250][T24447] binder: 24438:24447 ioctl 4018620d 200000000040 returned -16 [ 1669.299000][ T30] kauditd_printk_skb: 162 callbacks suppressed [ 1669.299028][ T30] audit: type=1400 audit(1756411992.213:63460): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1669.338714][ T5853] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1669.342537][ T30] audit: type=1400 audit(1756411992.263:63461): avc: denied { read } for pid=24438 comm="syz.3.4563" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1669.352716][T24449] nfs: Unknown parameter 'noontr”B±Ò†Ê(‹ª;é' [ 1669.432124][ T30] audit: type=1400 audit(1756411992.263:63462): avc: denied { open } for pid=24438 comm="syz.3.4563" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1669.484882][ T30] audit: type=1400 audit(1756411992.273:63463): avc: denied { ioctl } for pid=24438 comm="syz.3.4563" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1669.522444][ T30] audit: type=1400 audit(1756411992.273:63464): avc: denied { set_context_mgr } for pid=24438 comm="syz.3.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1669.630845][ T30] audit: type=1400 audit(1756411992.283:63465): avc: denied { write } for pid=24438 comm="syz.3.4563" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1669.635126][ T5853] usb 3-1: device descriptor read/64, error -71 [ 1669.673658][ T30] audit: type=1400 audit(1756411992.283:63466): avc: denied { map } for pid=24438 comm="syz.3.4563" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1669.739739][ T30] audit: type=1400 audit(1756411992.303:63467): avc: denied { accept } for pid=24438 comm="syz.3.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1669.761750][ T30] audit: type=1400 audit(1756411992.313:63468): avc: denied { ioctl } for pid=24438 comm="syz.3.4563" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1669.788721][ T30] audit: type=1400 audit(1756411992.333:63469): avc: denied { create } for pid=24438 comm="syz.3.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1669.819326][ T5853] usb usb3-port1: attempt power cycle [ 1670.618189][ T5853] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1671.079464][ T5853] usb 3-1: device not accepting address 111, error -71 [ 1672.147590][T24176] kernel write not supported for file /snd/seq (pid: 24176 comm: kworker/1:3) [ 1672.433778][ T55] kernel write not supported for file /snd/seq (pid: 55 comm: kworker/1:2) [ 1672.927464][ T55] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 1673.172350][ T6000] vhci_hcd: vhci_device speed not set [ 1673.378615][ T55] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1673.460585][ T55] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1673.471722][ T55] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1673.483794][ T55] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1673.497937][ T55] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1673.528663][ T55] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1673.584267][ T55] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1673.689738][ T55] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1673.703056][ T55] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1673.716047][ T55] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1673.738298][ T55] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1673.750813][ T55] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1673.780177][ T55] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1673.803583][ T55] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1673.946635][ T55] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1674.019843][T24503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1674.470115][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 1674.470133][ T30] audit: type=1400 audit(1756411997.793:63678): avc: denied { ioctl } for pid=24481 comm="syz.3.4574" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1674.478470][ T55] usb 4-1: string descriptor 0 read error: -22 [ 1674.556423][ T55] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1674.578048][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.695657][ T55] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1674.805254][ T30] audit: type=1400 audit(1756411997.793:63679): avc: denied { ioctl } for pid=24481 comm="syz.3.4574" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1674.950415][ T30] audit: type=1326 audit(1756411997.833:63680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24484 comm="syz.2.4575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f707ed8ebe9 code=0x7fc00000 [ 1675.088899][ T30] audit: type=1400 audit(1756411997.873:63681): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1675.487229][ T30] audit: type=1400 audit(1756411997.983:63682): avc: denied { recv } for pid=23102 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1675.743921][ T30] audit: type=1400 audit(1756411997.983:63683): avc: denied { ioctl } for pid=24481 comm="syz.3.4574" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1676.303842][ T30] audit: type=1400 audit(1756411998.043:63684): avc: denied { read write } for pid=23102 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1677.139950][ T30] audit: type=1400 audit(1756411998.043:63685): avc: denied { open } for pid=17974 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1677.166425][ T30] audit: type=1400 audit(1756411998.043:63686): avc: denied { ioctl } for pid=17974 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1677.311948][ T30] audit: type=1400 audit(1756411998.053:63687): avc: denied { open } for pid=23102 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1678.023738][T24516] usb 4-1: USB disconnect, device number 123 [ 1679.509474][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 1679.509490][ T30] audit: type=1400 audit(1756412002.833:63778): avc: denied { ioctl } for pid=24530 comm="syz.4.4586" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1679.557309][T24516] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 1679.565835][ T30] audit: type=1400 audit(1756412002.863:63779): avc: denied { read write } for pid=18301 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1679.565883][ T30] audit: type=1400 audit(1756412002.863:63780): avc: denied { open } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1679.565922][ T30] audit: type=1400 audit(1756412002.873:63781): avc: denied { recv } for pid=5833 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1679.565966][ T30] audit: type=1400 audit(1756412002.873:63782): avc: denied { recv } for pid=5833 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1679.679974][ T30] audit: type=1400 audit(1756412002.883:63783): avc: denied { recv } for pid=24516 comm="kworker/0:5" saddr=10.128.0.169 src=30006 daddr=10.128.0.30 dest=47302 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1679.707033][ T30] audit: type=1400 audit(1756412002.913:63784): avc: denied { ioctl } for pid=18301 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1679.735514][ T30] audit: type=1400 audit(1756412002.963:63785): avc: denied { map_create } for pid=24536 comm="syz.6.4588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1679.770271][T24541] netlink: 'syz.2.4589': attribute type 1 has an invalid length. [ 1679.800985][ T30] audit: type=1400 audit(1756412002.963:63786): avc: denied { prog_load } for pid=24536 comm="syz.6.4588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1679.808005][T24516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57088, setting to 8 [ 1679.842153][T24541] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1679.847561][ T30] audit: type=1400 audit(1756412002.963:63787): avc: denied { bpf } for pid=24536 comm="syz.6.4588" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1679.887273][T24516] usb 5-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.00 [ 1679.897769][T24516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.918532][T24516] usb 5-1: config 0 descriptor?? [ 1679.925152][T24531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1680.171960][T24549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1680.811414][T24516] hid-generic 0003:0486:0185.002A: hidraw0: USB HID v0.08 Device [HID 0486:0185] on usb-dummy_hcd.4-1/input0 [ 1681.120195][T24516] usb 5-1: USB disconnect, device number 117 [ 1681.828365][T24564] autofs: Unknown parameter '„' [ 1682.435540][T24567] 9pnet_fd: Insufficient options for proto=fd [ 1682.589313][ T31] INFO: task syz.5.4190:22925 blocked for more than 143 seconds. [ 1682.778483][ T31] Not tainted syzkaller #0 [ 1682.785650][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1682.804770][ T31] task:syz.5.4190 state:D stack:27624 pid:22925 tgid:22924 ppid:21561 task_flags:0x400140 flags:0x00004004 [ 1682.817139][ T31] Call Trace: [ 1682.820635][ T31] [ 1682.823738][ T31] __schedule+0x1190/0x5de0 [ 1682.828727][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1682.833978][ T31] ? __pfx___schedule+0x10/0x10 [ 1682.839233][ T31] ? find_held_lock+0x2b/0x80 [ 1682.844211][ T31] ? schedule+0x2d7/0x3a0 [ 1682.848698][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1682.857250][ T31] schedule+0xe7/0x3a0 [ 1682.861625][ T31] schedule_preempt_disabled+0x13/0x30 [ 1682.872675][ T31] __mutex_lock+0x81b/0x1060 [ 1682.877990][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1682.883280][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1682.890142][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1682.896299][ T31] ? net_generic+0xea/0x2a0 [ 1682.902973][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1682.909415][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1682.915363][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1682.921666][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1682.929173][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1682.937053][ T31] ? security_capable+0x7e/0x260 [ 1682.947392][ T31] genl_rcv_msg+0x55c/0x800 [ 1682.954629][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1682.961572][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1682.970130][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1682.977802][ T31] netlink_rcv_skb+0x155/0x420 [ 1682.982999][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1682.989301][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1682.997475][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1683.007607][ T31] ? selinux_netlink_send+0x578/0x830 [ 1683.013296][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 1683.021451][ T31] genl_rcv+0x28/0x40 [ 1683.027454][ T31] netlink_unicast+0x5aa/0x870 [ 1683.033960][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1683.042342][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1683.052497][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1683.061865][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1683.070298][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1683.089275][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1683.096060][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1683.108087][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1683.119466][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1683.125222][ T31] __sys_sendmsg+0x16d/0x220 [ 1683.130851][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1683.136341][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1683.142270][ T31] do_syscall_64+0xcd/0x4c0 [ 1683.146967][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.153503][ T31] RIP: 0033:0x7f9a7838ebe9 [ 1683.158876][ T31] RSP: 002b:00007f9a792d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1683.167515][ T31] RAX: ffffffffffffffda RBX: 00007f9a785b5fa0 RCX: 00007f9a7838ebe9 [ 1683.176165][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000008 [ 1683.184564][ T31] RBP: 00007f9a78411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1683.192981][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1683.203081][ T31] R13: 00007f9a785b6038 R14: 00007f9a785b5fa0 R15: 00007fff5ec889e8 [ 1683.233875][ T31] [ 1683.237672][ T31] [ 1683.237672][ T31] Showing all locks held in the system: [ 1683.245801][ T31] 1 lock held by khungtaskd/31: [ 1683.254279][ T31] #0: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1683.266107][ T31] 2 locks held by kworker/u8:6/1108: [ 1683.273479][ T31] #0: ffff88802133c148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1683.285879][ T31] #1: ffffc9000406fd10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1683.310157][ T31] 2 locks held by kworker/u8:9/3571: [ 1683.315517][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1683.325972][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1683.336520][ T31] 2 locks held by getty/5611: [ 1683.341665][ T31] #0: ffff88814e6260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1683.351935][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1683.362515][ T31] 2 locks held by kworker/u8:0/13945: [ 1683.368534][ T31] #0: ffff88802133c148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1683.380852][ T31] #1: ffffc9000fd4fd10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1683.392772][ T31] 2 locks held by syz.1.3828/21386: [ 1683.398576][ T31] #0: ffffffff90426910 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1683.406957][ T31] #1: ffffffff8e9da628 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1683.417751][ T31] 2 locks held by syz.5.4190/22925: [ 1683.423067][ T31] #0: ffffffff90426910 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1683.431916][ T31] #1: ffffffff8e9da628 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1683.442315][ T31] [ 1683.444713][ T31] ============================================= [ 1683.444713][ T31] [ 1683.453490][ T31] NMI backtrace for cpu 0 [ 1683.453512][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1683.453535][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1683.453545][ T31] Call Trace: [ 1683.453553][ T31] [ 1683.453559][ T31] dump_stack_lvl+0x116/0x1f0 [ 1683.453585][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1683.453612][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1683.453641][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1683.453668][ T31] watchdog+0xf0e/0x1260 [ 1683.453693][ T31] ? __pfx_watchdog+0x10/0x10 [ 1683.453712][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1683.453732][ T31] ? __kthread_parkme+0x19e/0x250 [ 1683.453759][ T31] ? __pfx_watchdog+0x10/0x10 [ 1683.453778][ T31] kthread+0x3c5/0x780 [ 1683.453795][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.453815][ T31] ? rcu_is_watching+0x12/0xc0 [ 1683.453839][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.453856][ T31] ret_from_fork+0x5d7/0x6f0 [ 1683.453873][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.453890][ T31] ret_from_fork_asm+0x1a/0x30 [ 1683.453932][ T31] [ 1683.453939][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1683.572264][ C1] NMI backtrace for cpu 1 [ 1683.572287][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1683.572307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1683.572317][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1683.572341][ C1] Code: 4c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 52 16 00 fb f4 4c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1683.572356][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1683.572371][ C1] RAX: 000000000788591d RBX: 0000000000000001 RCX: ffffffff8b93bc29 [ 1683.572383][ C1] RDX: 0000000000000000 RSI: ffffffff8de50330 RDI: ffffffff8c162900 [ 1683.572394][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 1683.572404][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1683.572414][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab4c90 R15: 0000000000000000 [ 1683.572425][ C1] FS: 0000000000000000(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 1683.572442][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1683.572454][ C1] CR2: 000020000001f000 CR3: 000000006cab8000 CR4: 00000000003526f0 [ 1683.572465][ C1] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1683.572475][ C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1683.572485][ C1] Call Trace: [ 1683.572494][ C1] [ 1683.572500][ C1] default_idle+0x13/0x20 [ 1683.572520][ C1] default_idle_call+0x6d/0xb0 [ 1683.572539][ C1] do_idle+0x391/0x510 [ 1683.572563][ C1] ? __pfx_do_idle+0x10/0x10 [ 1683.572582][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1683.572603][ C1] cpu_startup_entry+0x4f/0x60 [ 1683.572621][ C1] start_secondary+0x21d/0x2b0 [ 1683.572645][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1683.572671][ C1] common_startup_64+0x13e/0x148 [ 1683.572698][ C1] [ 1683.782292][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1683.789192][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1683.798301][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1683.808358][ T31] Call Trace: [ 1683.811631][ T31] [ 1683.814565][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1683.819169][ T31] vpanic+0x6e8/0x7a0 [ 1683.823250][ T31] ? __pfx_vpanic+0x10/0x10 [ 1683.827794][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1683.833800][ T31] panic+0xca/0xd0 [ 1683.837561][ T31] ? __pfx_panic+0x10/0x10 [ 1683.842009][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1683.847402][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1683.853667][ T31] ? watchdog+0xd78/0x1260 [ 1683.858105][ T31] ? watchdog+0xd6b/0x1260 [ 1683.862508][ T31] watchdog+0xd89/0x1260 [ 1683.866734][ T31] ? __pfx_watchdog+0x10/0x10 [ 1683.871420][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1683.876650][ T31] ? __kthread_parkme+0x19e/0x250 [ 1683.881689][ T31] ? __pfx_watchdog+0x10/0x10 [ 1683.886356][ T31] kthread+0x3c5/0x780 [ 1683.890415][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.895003][ T31] ? rcu_is_watching+0x12/0xc0 [ 1683.899773][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.904361][ T31] ret_from_fork+0x5d7/0x6f0 [ 1683.908948][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.913550][ T31] ret_from_fork_asm+0x1a/0x30 [ 1683.918328][ T31] [ 1683.921552][ T31] Kernel Offset: disabled [ 1683.925908][ T31] Rebooting in 86400 seconds..