last executing test programs: 10.631324745s ago: executing program 0 (id=781): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000000000"], 0x48) read$nci(0xffffffffffffffff, &(0x7f0000000280)=""/134, 0x86) r0 = socket$inet6(0xa, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgroups(0x1, &(0x7f0000000000)=[r1]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x43]}, 0x29) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000003c0)=r2) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.904430943s ago: executing program 0 (id=786): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}, 0x64}], 0x1, 0x40010001, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xbf70}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x1000400121bf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) writev(r3, &(0x7f0000000240)=[{&(0x7f0000002740)}], 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) recvmmsg(r5, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x80010000}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000780)=""/195, 0xc3}], 0x2, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000e00)=""/142, 0x8e}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000ec0)=""/158, 0x9e}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x9}, 0x100}], 0x3, 0x40001023, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x40000083) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.520150242s ago: executing program 2 (id=791): getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') umount2(&(0x7f00000003c0)='./file1\x00', 0xc) chdir(&(0x7f0000000080)='./file1\x00') read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000180), &(0x7f0000000280)=0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r2], 0x68}}, 0x0) fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) 8.576312196s ago: executing program 2 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000010a000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326625000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3bf}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) 7.270798687s ago: executing program 0 (id=798): socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xd9}, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000050000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) 7.044184332s ago: executing program 4 (id=799): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg(r1, &(0x7f0000007a80), 0x0, 0x844) 6.751617858s ago: executing program 2 (id=800): r0 = socket$inet(0x2, 0x5, 0xfffffffe) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x72800, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x3) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100005, 0x3000f2}, 0x20) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)}}], 0x1, 0x80) recvfrom(r0, &(0x7f0000000440)=""/255, 0xff, 0x40000000, 0x0, 0x0) 6.743308392s ago: executing program 4 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000000)="41a8e0e2620b5b84b8540f3e86afd88753d92dae5856d7829013b04a07337f8f9c44e3e3223226bffa3121440289eb91", 0x30}, {&(0x7f0000000180)="2d7ed07fbb7564eece1e8370d7aece1a44b70502800a2578b8857bf14471a5f263e9c1205229189e2edb429010ff364bdcd01b6b47bda00d27cac4159840cc6f3d12bdb63a96c8b169", 0x49}, {&(0x7f0000000480)="8f1686da21f80e2273ee647848ff409b34e439627b4b5df0b05ff7c9252df021b703e4c1c8f53e8460cfb8afdd292411ef9aa625c926f479231c564980211150f31ed0626df67ec480ca21b46940a4f145c4592150bc590f9b87df12975d7dc1ab73bb333b3c05de938ebf6d0d0b15fc54084576a0811edff29d39a4240362", 0x7f}, {&(0x7f0000000580)="fecbaf68bb1720804cae536c1aa41842405e1bc78881f917303ce50cecd6c50b485c56bb7fb483217aafd1f9ebdce3caba53d6cd7c1c8c119c04e20b769c2cff178e5ba0954ef12f0510cb7491075535df7ee7219748d5a8b0b05ad75fe7f65719fba9846ea66adb4a840d4afc7b87a5991507fa56f0bbe22f187efe471130", 0x7f}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="bd1ad014ad3dc03a3ff32aca2ee6a05d7d0dec2f16ef5f3ac3c2360468aed32818a2d6057efd2a701e5dbdeb2515c2d00a37d94722959bfc7e33e4d42d42ba383548811a521e1c3184520404bcbecc241d6979bf4ca49d2da15b8fedd8174b2f42ceadf50c4ad38d6a60a51714f60f6f5d7ff95f3cedc9280a114f959bd08df3c6e84d7695d656865f368829dffc050b6ecd7f7db249084c06112376a77a3859bfe5c9c0579b8a", 0xa7}, {&(0x7f00000016c0)="4168604da3083317071d67371534440564ddaca0c41f91c9caecbb5aa21908c4fdcbed3db3b456284cf6c8105140d45f869b07fb4615ab167797a3a0132868d80ae036638f0a2853b576aa9da3dcf2f76eb599119ffc8dbf4fea9ca2a31e8157c9173bb58d4641204aa7dec910fc9ebef834ae03581351124e426cbd61f7cb07144113bef6e070ac727408e18b21244ec96cfcb26480f2fbc5b3b6bdb48970a9407f76a5839ccbcf60ac5632284ef4394578fa", 0xb3}, {&(0x7f0000001780)="a19c86f4466cc14e42812528fc471986e9cbb6761b6b2203c1912a25090ac0688efcda23730b73a8085895cf2e3060233a1bbad30bf5fe2123a8583c7e04d8c5d8a02d1b0717dbc05867989d1667d5ae3e098fbf91b98fd0d67665cfe4621506fd11f2b1ef460ea7db1872eff97bab96ef016e92974875c635fd78d7f61e3413504d7d392647700dab361742c9717f8484b669551091f4d002915cde42aa9e6de5cc", 0xa2}], 0x8, 0x0, 0x0, 0x10}}, {{&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000001940)="93abfc7198590b178a39886ad392a6d9810cc964ad3ce09910d17cd94fad563901323c38082ff8b5d1d5434216cdf412d624de9861a43b4569e26ca925a374ecc926f94d40b69be30eea176d68411f04735e9a8fb4af8ecb9ce3a5a6851179858dd7d06f3228c0d0347346dc40607f7d503bccdacb9f6744fdb80f07f2dbed2dc211e868956cbb360cf12827837427ac14fb4a29f5", 0x95}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20, 0x20000000}}, {{&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000083c0)=[{&(0x7f0000000500)="7ed7bd3360490464e3e3d6dfaaa8ff0b604aa6331b7e7ef01a54323b5822529b2ad0c52cb9a24137598b4b363f979103e299d5b03c26b1bdca8b6ad6", 0x3c}, {&(0x7f0000001a80)="8f70d6d23ac25d33fccfea50b2cc14d660587462884f289b4f717d2b97d96d2cbcbc36b332c58a9eac08fee3eaa11849aca63854050daaa16ebb696876b2c96044dac1b8ae731ec9b4d44ff7b6b78d52bafff2e8e422c5046abbbeae4339faafa0e64e88ffd9693302d65d55d6ba197d6dc1c19ec231ba3c2418a8a1133bb164dd", 0x81}, {&(0x7f0000001b40)="26cbba2755e3998a4ab8fba278c433e51ad026ac473c3323a76f46df08ea25815dadab637591882a06c960433c0947ed7ffe9054df4899ed404d01352fc031196879bf7dbd", 0x45}, {&(0x7f0000001bc0)="f87254321f5a1f659d499968c6fb4230dd63e7723104d479efeaf2fda4c25545c41c0eacd68611decab14b42093122cd43351cdc78fb94d5af921bcbc46b2e642b97f0c2913e77fb5be472672c96161692ca998b500ca9356c5d920cc13da25f78b3bf73a086ff2eacb0d06abf09fc9485d8d00795eab5d6ebf627325ec9dd4aab8b63a32629c338c58d032b422d97f1a9b6671c50c36a172578205513b5e582ce7345a3c0ff7b468d44d8446c011801cfac6da77b9af2fbcc0b6d50700ba4d31b98eb527d03a835e2dc774a0104eacde7f9eb52f9456f7413ed6211541d6ca86168657bdd3752ef", 0xe8}, {&(0x7f0000001cc0)="4e723196b86fb36b4d4f0604bb34fbe44189e9282e276caf4c385564801cc23fe9d65b2386309040c4c8a7919d", 0x2d}, {&(0x7f0000001e00)="5699608c272ec11a495e8e3278dc3ff20c57f95c408e7f232f330ee375cc21029ec445571e0b25a1aee4242e078165be47bf15f70eada5f42c4068fcab5ca5e8d64a106df5c03acaa5ec9ab3dd50eadc8227156fddb89b055b9d714b2ce74ff207c34a5532d41d6ad3ea2fbf661311a8e5fde934b4a8f60df314fdfbfdfa22c000fa2c7e49bebe8dc774c525f2664e1370c690e17c5c3ca0025ff6b2ae0c17e3844d6ae503a2e7f5194db4eff70877addc0bd9731a86e5f8302c3fbc56a800a52b1e51fba085744ca651ec2d5496d9f1cdcd13cbb0", 0xd5}, {&(0x7f0000001d00)="05612cc051c9565d3025cf876c728930d80e10a5c7edef", 0x17}, {&(0x7f0000001d40)="328b3b69d8d08c14b49b8b4cd7ea95cc6fe66e3e2b33b988fb8cac6d60cd1c92cd84339674a0233483108f2587a3689ee0236209eec260387bfc63745d76e2e75e33976b0d5ad06f153e968041e27c0406fef08101d8148660cd", 0x5a}, {&(0x7f0000001f00)="0daed18c404b58a8adfca9c014a2c843e780447d5b33fac648dce1ae5016de3392fb38e5189968f0f9e3cf7f046ff92edc6c502b4e5f4b98b89e318bf857e16c89ec9711431114574addd31efb914ff85bd5ad68f059301baf40885f255f5fdd81a38e49fe6bdb73ef8b03038adaee30aa0ba5e9241ea6e9891e59f07782e3ac2ce859b543a456ec909d69bc0353ccb72e0582b3969a2427fed804dd734e96a19bc9323dd15619df30ac72010c72d25b40a813fe05a7d3552a4d90bdea7d67c321ec99b63dcd682a7e2cfff86fa09ad0712239ff75e69bfcef7d5b8673fdb852d5159934989316743c12673c36305f589f00cb0f8d", 0xf5}, {&(0x7f0000002000)="599226d4965b59c02ab8d7288d2e80c1c6a0bb18fd07bbca4ba60f", 0x1b}], 0xa, &(0x7f0000008480)=[@rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0xfffffffffffffee2}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x84}}, {{0x0, 0x0, &(0x7f0000008a80)=[{&(0x7f0000002080)="9ecc15b3dd9d1b55ed71a4a4ad2714d8ff0163e4b305628fae6aa2e027f4956330f2d6c4295eceb78b7f667a26e8331840743d0ff97e6061f914e980374b8287198b8ccc86578d4d14927d0def403d9457c241b4d0cf18ee09312c4c06798c9d3e3605b05641b30151aa1cd83d541683fae520a10a1c474c4b230c0424209761f932564af633d4a76e46c15fe2324355f728bd96cb59b47b4e9b48c46b6889e7de7393914ae4ad9726909a6b5e788523ee1e9d03c7d975ff2ef6e728987aaec2b9b574276f3119da0ef3469407c7b7337aa28038bbfddd544b59d5c82ce6482666b3c8e22717eaadbd00acb0b6d1c5a83ba60bf259e042bb15b98fb6a64f4a2ce96bb000639b3d3abe1d2a46727483a57eb89a62e1e0e256ebbb2e203b4f19074b706c0858ffaff5777d3987c0dc775b84964563f5218f3cd8c3dc702bc14ac4b5657c7f70b2aa2abe22899986cde7976ad1", 0x152}, {&(0x7f0000008600)="14603e515facf9daa6f68c29c38f63acc0004650416f3d1358fb02ea6a40414c1d2b067de5c282291658c03363cbc90366d34439e964ce520e2914accfde2e91443858e91359adc187235e20fe63fdb5d45c85bc600e8605b2bdf317eb5ce81db43232831ce72c9bfc81eb3ce744948bdd35a6a5bf7515ebe0", 0x79}, {&(0x7f0000008680)="f83faaf548f58039aeafd2513a8c1c7f19bda7911ff2cc9fd47e408b062f1d6a6fdfefdfb538b777baea4df3bf4c2f7ed77f603f74f838fe1e4c5d22372c303ec7a6532fefae668afef6d7e07a470be85e3bd9ab21dee8792c46d42bf2ad049824b14d9bbc22b6301a3c1588e66b2d1887f119af8ec842cf2b8a8aab00e38aa2edc7f2700aa22faeb87dc47d0f6357dd83f795b0887114ad5ed39e056582307c0b7edfa22661bd31035f66b8fe1d1f1f224a12978dad2f2a3cef61603113de46081a406586ae0e403e2a29c7593c60", 0xcf}, {&(0x7f0000008780)="20028e4a3e5c34f256e3390e1faa9d2bdf80a0f1a32eb29785d3b7864900c63c412d0c99af040c622e0656c0ec88297e5a3b81b7d372ba7252b307353576749cecd10a20f4819c9263d8b3c93b8721f9e59b268222be7698a79e5abdbb9cd0e906d812cd782bb4cae3cb542146436857b6abc1fb11c48aebd2b5af8440c3bcd495936c830528ccb2c7a7f9a6931261ead918e1268e3fbbe048", 0x99}, {&(0x7f0000002040)="8541ec3a344880ddc3c14d618960", 0xe}, {&(0x7f0000008840)="51381e5212e1e4123802ff32f9f2c2426dd4301de999c839fb086df912195827c2450ddf74231c025f920b6ac59500ee8ef491a1cec1c365850a79de94afe646b899d00dcb4c02d49e5b55ca705478a8e60ebf4dbb0806e6c93e1b7e74212f058db4b2123563cc9b9e092dccfcdac537", 0x70}, {&(0x7f00000088c0)="d7", 0x1}, {&(0x7f0000008900)="41e49eefaaddceba71b34107895e59121794c78f8b445e16f34f54f282c10ec5f1bdd688c461dc1ce10454a22d3109620908db4a53eafb12ea3aea1fafb9f8ac3f82ccfc9d5a5c4dd5a6f9b807ba0a44519513e165e04d3f5e2e88fce293e167a1d039a0d6b2fcb454390366cade89edbdb3d89f0302341626acd0097cf80aadc562bdfc6c4e55f278f521dc1ae98137557eab9a5549adda7147d1985dc70a19e3318560216a2523000a13285f0c97ff5337f2e04e745a254086fd1fb900520c962fa666375c7299981340422c5ef078f47fc12001c500ddffcdaab27f9b938fd1ff29e601ca53", 0xe7}, {&(0x7f0000008a00)}, {&(0x7f0000008a40)="585d38b59f4702998ed7780c898449629ba6787afa71a733327f0a41436219a3fd013e18454404a8a9fbeed993fe539e", 0x30}], 0xa, &(0x7f0000008b40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r2, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x68, 0x20000001}}], 0x4, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000140)='A', 0x1, 0x50, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x59, 0x20, 0x8, 0x5, 0x9, 0x4, 0x1, 0x4, 0xfe, 0xc, 0x47, 0xb, 0x9, 0x8}, 0xe) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0xa0442, 0x10) ppoll(&(0x7f0000000080)=[{r6, 0x1201}], 0x1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9, 0x5}, 0xc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="05000000010000", 0x7) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) 6.076216536s ago: executing program 2 (id=803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x8, @val=@perf_event={0xfffffffffffffffe}}, 0x18) 5.910110615s ago: executing program 2 (id=804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) 5.706614592s ago: executing program 4 (id=805): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$cec(0x0, 0x0, 0x416400) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000440)="617d8bdbb688fc708c2a9a7022ed6066aab29d7302cb1e32de81d358d02af9af86204683e88f4cd563c2acb270dec0b8a51b70c49605698adf4e1f79c0fb3614a99caefc2ea3cb708d4f4076a339a68bcf4d35f248ba5a8379e7c6d5b38b1ec46d77b6d4658879b958527bf293912ad85518a0d000f5f02bb4119607c54d744650f323b08c43c44d29babae62a7c5938bdb19bd7afd6af238883c53c08558b9d4b056e7cc8088aa9ba0ee13d5fb1fd837284a3ccb787058dea396a1cf28efa9e0dcf6ca581d380611a05e35a7d1f7f573702599f2526aa32b3a862fccbaf5b6295cd79a695bf9c75bdfa43268b3739b13822af5434f9078b", 0xf8}, {&(0x7f00000001c0)}], 0x3, 0xffff4fd8, 0x4) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, 0x0) sched_setattr(0x0, 0x0, 0x0) timerfd_create(0x6, 0x80800) r5 = socket(0x15, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtfilter={0x160, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x130, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}, @TCA_ROUTE4_ACT={0x10c, 0x6, [@m_mpls={0x108, 0x1e, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x86509}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8c000000, 0x5, 0x10000000, 0x5a, 0xa}, 0x1}}]}, {0xa5, 0x6, "5baaa987aedbd60c84b9f282b60b1be6db92c48a3170991f0fcb424f3c866aa05347ebab6c06e1d61a8bcb7ba97170e0ee6bc2fa5ee9323282aac549ad5c13a803945a326dc26c80ef75e5f4017a13ed083f432a804d9e92327528d162649c2ff5f065b6a5237c203a05db866340bc717411ee989efdfb15e17c582f75016801863d4e970277ee0f76b4c198e5bf2c67c5ef49478b3c7ff16f175d7409afce1100"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd7}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x38}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 5.177403056s ago: executing program 2 (id=807): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac1e0001e000000100004e20009c90780100000000000000fb4b144b82b8af00000000000000000000000000000000000000000000000000584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037a6c471e15b37dec1c52975c7587d3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcb"], 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, &(0x7f0000000140)={{0xe566c797b7515b9, 0xffff1000, 0xf000, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0xa000002b, 0x0, 0x6000, 0x21, 0x5, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x3, 0x3]}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0x17}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7}, 0x0, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x89, 0x2, 0x1}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FICLONE(r1, 0x40049409, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x2000000, 0x5, 0x0, &(0x7f0000000200)="63eced8e47dc3f0adf33c9", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_int(r4, 0x6, 0x2e, &(0x7f0000000000)=0xffffffed, 0x1d) ioctl$KIOCSOUND(r3, 0x4b2f, 0x400d83f) fchdir(0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x95df}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.056199098s ago: executing program 0 (id=808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9f}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x20050800) syz_usb_connect(0x3, 0x2bd, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 4.95584888s ago: executing program 1 (id=809): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x7101}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(0x0, 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r8 = io_uring_setup(0xaae, &(0x7f0000019100)={0x0, 0xdf7, 0x200, 0x800007, 0x1b9, 0x0, r7}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r7, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x90) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e8020000000000002900000004"], 0x2e8}}], 0x2, 0x0) 4.547016268s ago: executing program 3 (id=810): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) fstat(r0, &(0x7f0000000680)) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c008f0003000000000000000c0090000300000000000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000c008f0000000000010000000c00900001010000000000008e0044da0d558c02994f31adeb6282befc26dee13215c50cb4d3e6978f09d7322982606966e71a33bbbbefea2fc6ab1c69621dcbb1d3158fadcb406703bd899d3bb585de739a5722d453dc4f"], 0x90}}, 0x4000) lstat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x102) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000500)=0x400000) read$msr(r2, &(0x7f000001b700)=""/102400, 0x19000) getrlimit(0x3, &(0x7f0000000100)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0xffffffff7ffffff6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) io_setup(0xffffffff, &(0x7f00000002c0)=0x0) close(r3) r5 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) ftruncate(r5, 0x1000000) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000b00)="ba62383d0b8c5bd558d8e9bb592e7af0caa402e61b2d89e54fe7dca7151478acec083b426ce60a63c76f8c3afbc75420adb40301d62fbfd7efca05a030939600fed51d29dd22d71cb8f1ec554eaf3db30af6516d1554d73c5c077c12c9956c8adda51f75e7131897b330120d266f95d4f7117439fb591409ddccaf679bb164a1563ffcab18a92ec8c84741e95df0a061c976f73a1b3cea810eb9f7056185c1c1f8d32235fb6b233b2287bce59d6e35f768c9b47e903b34385705306e702ccbd8208385ea687d4de5aff16aff9ae1c8d766a766a602977896018b21d7dd0edbd8d151111b5fb96dcf9c49b2cf50ef2a6f601711b6555e3f0e02fadb214fa94a53452ac9977c21b2915e21788359b4efec06e387dd4ae0434cdd8a601b44d00ca1a459327ad65a29cd70e833a1b03fc15ea0f2a01529be63a07dcbe8994746a892f701132fde1ae44adeb1b5dc5244350b039269554f8602d91d2d9aa4450b95b6f6ea6f9f58221b5df41baaff914944d2a9ad65772d42e09657de4f66d119e3068ffffced07e9d9576cf1e826432a57c2e06d8ea322f7d7fe1d341491ad50fc3e87b9fce97cc3dd561ea22fb896fbc9a3c4c53837e03a80dd17133316f5bb61d8c433264a24ac596cd4f769e681b368fcf6285fedaa3f2c14235398395fc6cb57a2689f0bff4ef658a188aec59cada09373a298c9f227f42c23aa3cd411bcdb75fd85cd7a9489a4e344a006792b254a5375b53a8bf9e0b32035c0872385186b84665cb46f2a4ed70e368ef755090bc70d79c38749893eee96e3fe6346416d7587f0f5f70523d160088df50aa0e9ba16a9e649088b1b1506377284bfc766b0a0ef6d3cd075e1ab5b5ab207e8f3d2c0fb5f5bf9d08acce1076a44d0c2c01409f531dbe4f0d25d37a5a805e4184a2d253a91ba9201d21dc6c0c821719218bada2b5698fd966bc6f9148ff0098a6340ea030635d826123e5300395d9ab4f84e0386a649e43a1f4af8d1330d2a205a868b8f59ea386d21a338b63638835f0497e654bf3cf3d47796d808f45c643df529ff2895cd99a3bb47e9d00512988e104a5e6e996796d79335166217b3e08fd94347b4443fb1045eb6c8c2fbe9740f76a5f6fe6ad7fa9fa30946c56311a0bf21044ef0d22ccc03b606a3e5d89a5865d464e4e3995e8adfe602f70d8ae095cdb4356bdcd59e01ac4c6362df63026817594a330d5bd4afe185adcda66459eb08197c569da6d2f5191b5525f738e512232dc3df61a0b98e73a6e4f6af7853787272ffd56896247cfa1990c1d82373ee7e6091d6b73292cec2dfec02119f7ad74ee55defe52ee90153e6f1c8d332bd8badd06ed6a1faf0a4787e3459b0f455089a454292d53054ae5b68612b8e29115d90f1746a911f58e626740b7c8f222820aaa22fefa9352cca97f76f6dd7252971f5ea45263eaf4eca831f7e2440efa74151250b1401335f9fceb7cdb5f37a2ae7f68495a41f787866fc280a103497f3525a902a0ef3f59337e74ae2365be8b7aada1fe8d0a5923acbd70205fdfc8661481e02820478573bf754d10df72431341c6adf7111e1da5b6c7c40d60846230309e2427f948782110e3bda6560eddc24e00f8d32e7db03038664446a2c342dc7dc682c388beddb6440d7fde5d28d9276b7beb3df755d588c1b811debf0ca66187d8f681aa77f9e7b9b59ddf4f33a83243a9fb495fddf536ab97635914d23853aa57e80906a35fcf3c12e44603cc4f5c517c8af4f38c3b1154580b9a007d3940e2aa7be17aefb4bb159b9433bcc45b194ba39657c5a454133c3355df084fdc72fb3d436d5492d738874dcc1727e5e9d895c3a9f2892bb4a179abe19b09fe901a44b417c0f25fe0ab1e588a060c1476d1b5257f2777fcd2fe868ae7d22ea2ab74df49f041e1165732cdd861fecd5020e1fef596960f19edfed138a89e7700ed811c4f6ad272556208c60ca320999032f97127f88397eff5f7cb1b245212bc3ff7de40213dc22b907cf073d6be84f04ce862cb1cc111b244b664327daf4f25d6d27446bf41fbc4afb5a3867e57fca54ccce30d7d99c2803534e5c2007ab9b57936f2c531b0b32a4b14984d5cb5b888608985dd34260f20bef8a6668133b10b5176e378ac785b8cee72d0f5f117b782a47828c8a3994cee08d197438a6464c6bc089e2a0965562882e4386aa2726c4b7bb53dd84430c76431e1700f3111b2373b3a524a27c32fec210f9730220443ec8fb5e343cb5e6a04456f0d85a931df0e36f8dc6f486e120b4faf9805f1eebf910542943dfe52a5cc1b43eb0fc05442cc4aa4f7115657d6125fd7ebccb583fdbea39bf07488c52479ece878888d5423e30f781f2a3aa972c73939664fb947b7c147aaa5703ebe482b5f3d3a70a4268e5d66617a42e34d089726042bb1435d11824928a9124dc060097a668d6783eedc6ed57d6b173566e23aa15628a37856799777c747eba8602e635a838aec93ff88fb64de5008a0bcd4dce6f2f62644ee6c8a22bce2dea6a3ce2115a02ae2c4a0245de43c411f4a4e1136d5c2973522d9980d08ffa2897359434b6f3e8b9bc3c754949f160d15d14ae427237df4645544edf1938cb6ed3f1b4f6b0d755792ca22818d3d62506f35463e1ecf5b0aa1c965f63a1782ac72c71e12762e7bd2fdd50a3e9c13f07fe79b42f57d049291a726f84a3ca4e068a113ef739ac3c973dd57bf828dc8e84008458b150514fb40f29e99689ab4c49d9e51b29655b5cfb45e21e7fa534616f4a5b22fc4af6e1d15ac6f7186bf3f555700d8f256f686073cd44fca5e0f13556813f4b015c212307320882d7f1f5856a553aacd46d8227c614cf58b12b99f460779296a8bbee05b07519b28efd5e3c7a96cc9b26f29934b2573c58414335ca703921092687de6b936a94ac145612ad739cea90cde467bbb8497bfdc8f1133fbb4e43a26739e60078bd8518c4fb52e24e3314be07b931fd9e4859806403f7876f553559aa83dedde6b48ba81b52605563b03f8723446f0669e95162e3cb232a5bca5d81d36955a56e675704145aa4151c8b41862a7375e74a1c2b8d93f7577073a806433cb94aa5b0995e1ab9c0243bc3c1b56af9f5a742280ea346d979f939123e60c73bdd5f55dc5b63cd188ffa5da44f2f867fbefe3492ce5f0a24dd1643676ad58bf04b6ce71c3e2584d89019b03d9f0d9193a02aa9ab8f074bc008e877770d00d1d84800198cc2a84ad5c5a6434c646276195eaec1acbab88297656376e0a9cb9d259952dbefc68c0d7165d5c05c9416270abd2e46420ca9817202ade85fe7f258b477f9c945efcfe2973f6d88bd75d545899de11eae41fc7ea87b4837e2d93fe20cd528615f02963f49072ec5b45ac0723bbbdee18c13fe8deefa9625675755209b90a0987abc16eae2b45a1e53f300f1b68a5d3e5f2ba3cc4e5e4b05e77aa0f0c89daa552d8f717a6cac3022de469abb3aec91a01fdd3c86338d974a42b715194ce6eb57ec44a502a97bf224003eaf41ee9dc51d84baab06b7dace015b1e035fde4f07274f043de3aeee2c1dcd78a8cdc59c880324f1b91dadb51e9db1c1f7bfe2e4f0deb8d4799dd46c5531505d28293633a5fc5e6ee028f00926158da8865fc00f40801c73b1d1ee8a5bb9e6ee38f10c8ef9c6a834c331ee629a2b419ce018842ce135784a8e81726787173e9993c7c6379fc0de1547800e3134cdff500c7e0077a39294c8f48b7b06b8c2ceae7566d5a50adab89b5ad8827fd29fffd663e7fa1a27714c20c013e301a809c152e82205034c58e2f5b9dfdbf6f3166d9695682a9c8ad5fbe44368c7a0409a39fb38a8a9fa9b489e8710d67d6434a07814a0453e18ca7855aa8558d893e2fafa823f385dbcec55413ea689cdcda64dee5dc083ab44433484dbbfc0615befea8d9da42ed2543652447b92d1db055f9fc6d3bce5870f42389d830c73ded1f0e25f662cf1b4892618ed5b1b5317cea56870b024640795888258c23bf9b7ea67cb65bd2e051dbf44d24e7c7ed5ae05cec224bc79283c78751605ceb89cc20713d8ca4f2d73b8aed58cc57f964e8a5bdeff253e6a6b10c7502b8387601d46b474803262c626dcaf394f4c4c4b8bf0de7c996c994c9aff2880faa144a9cc3d583f2e3416fe6ea52860697df5a2331591ea07f0b3ab9c9affcd9248b1d8511f487eb18c42dc1f050cbb3817f763ebe410d8237478de457ed15bfb4b35c759ddac29e8fa3886db011cfa568c533874526eb8495250a3dac8fe5467115828893d28ebf940ef4f770d0882a25f28a80d1fac60d6642e8d6dcc7daa64e2b6f5ff7d0c273de6608ff6d218b06115da093f00751b3399748079d7a0e1135c935ec5cf09f2a5a720f21202ccb20d3d03c9f2d385ecc3ea681d0d5525e693d78c5f2cc4da229b3acc8a3fc5c47c9a08beec6551e1a5c499c20e0f57a88d8e613e1d6bbadf8d2f5c4e68a19eb5c4af9a63af50266dca0228b8c287351c3055c3fe1d3a164b976387a48a5829f9ee292e6576982ed88380ca142e829b865dd9b40b76159b9ca929a0847b71d33ac0aba79032e68353167e0198c0dc96a99e4f010c83def29cd3a6d1e9dfb3ea88ac1397a60d4ad8b04b29bf5e1f81f6288d46774c671b75fa78799b3a72a8de1557365ccb37047f313e5890d6577a1398de7e87a3916fae5f479ad29dd7376768c648ecf28c7263b2ac9f5286a6cd0f9d91050b9b32e2d2e37015b5d8acde35c3f52251021c2c927556e10367a49d57450037e9fcc42a4ec3707a618f97ef618c782b0e695d3b31237ae86ff6b2114e07fd1a1e1432cb3642c3042bc6b3c2997ec07bea7d9234396047fde080b26f3726381c71d55d663b8e382fc057bee0467aef7ed142d3cc3fe50dbb2001cdc7d19e10f3f8e60138a042b04ecff888e730701323594b5a00707a9ccf670bef8b392466433207ad789bf8d448e1c8be9d8cd0f9eb9b4c9773bd6f363f401e84dfdb6b824e5841724aa217de7f3fbdccc4a956920b3b19807cad5f02692c46d60da8aba79fe8341d564dfee2cb9b6cf55d87ced1f675ea8e76808682bb12b0e25509c263117eb34c6a1e8d9ba6d8d862a7e90af41d59441085518a2dc26658b375dc8a2a067a7a8c59547e6f97d052deb2a6dae76060910ae3d6af99d4a9effd646d0cf15ae10368db4759616049feed8529ff6813f52753334152755d79ab3f8a627a911d0e4942613e2c05ee1ed293b53bea3375203ac831ec28522398dd6413062d0dc60a316e98a762804888aa40928b4e3918b2e44c521945064910dd08e08fbeff746276b615e0fda9f81dcfad8d40fdd300a7e258d4e566fafc01a450f4b9bc26bce9b987aebf55d3bee3cb76add8c995b1b3ced9a1222598a9946e3f674a07304717b22f1b195789a3eda7b8aa4768574f301b1ba0aa647de4635c498c06261ed202f9c98113532d54a4f164cddeb5d6fab78bfd251a6ab65a04f75958d077506b6ac0608580c903c8fcd801928b33c187d2b17e0b8a93d7ff6d28cdf24a85586e03f201b9431e496c72802664cc3354dd4c6e75cb8df4f9b3e6f0cbfd22ba0474af28092516b1672b362589754e589ce2202a75d5d7940d0956c270ebfa3c221d72e46417f45ca2b3b230cdc6a07e591b2f676da0bb214bef3f3bbc8f9a8969572ce4af8395dd4a3110c3a0a15e5039e9f2f4abf07527fb8a79cf3fe4b4781a45d5044894631e96ba54c084976ea83bf8febd86c693cd11f3bfb092484ce9bd8d98b50779e3d37368a11c5570d85d2a89", 0x1000, 0x3878}]) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r5, @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x40c89}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.031421041s ago: executing program 3 (id=811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg(r1, &(0x7f0000007a80), 0x0, 0x844) 3.832045726s ago: executing program 3 (id=812): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) gettid() 3.697948621s ago: executing program 4 (id=813): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001c00c92429bd700000000200070000fd", @ANYRES32=r1, @ANYBLOB="80008f0d0a000200aaaaaaaaaaaa00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 3.013073226s ago: executing program 4 (id=814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x800) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000240)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x5, "14956544c869ef45cda7dd68fe132f1d0259da184039589d199f3db71c15666d95"}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r8, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.859691733s ago: executing program 3 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000280)=0xc) get_robust_list(r0, 0x0, &(0x7f00000004c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) add_key$fscrypt_provisioning(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0xbe9, 0x2) ppoll(&(0x7f0000000080)=[{r7, 0x81}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) keyctl$search(0xa, 0x0, &(0x7f0000000100)='keyring\x00', &(0x7f00000004c0)={'syz', 0x2}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 2.544178106s ago: executing program 1 (id=816): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8b33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, 0x98a4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x2, 0x2, 0x4b755bcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x4], [0x5f75a7c3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x9, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) 2.034574868s ago: executing program 0 (id=817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa10000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f0000005f00)='.\x00', &(0x7f0000005f40), 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.999502134s ago: executing program 1 (id=818): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f0000000200)='./file1/file3\x00', &(0x7f0000000080), 0x31a001, &(0x7f0000000380)) symlink(&(0x7f0000000100)='./file2\x00', &(0x7f00000001c0)='./file0/file0\x00') chdir(&(0x7f0000000140)='./bus\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="0f20e035000004000f22e0c462f992a4f00080000048b848470000000000000f23d00f21f835000000010f23f8660f09c4a2cd9c3666baf80cb81a73ec86ef66bafc0cb0d8ee65470f2086c744240000000000c7442402375c0000c7442406000000000f011c24b8010000000f01c1666466420f38829f93e50000", 0x7b}], 0x1, 0x73, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x5425, 0x0) pselect6(0x40, &(0x7f0000000280)={0x8, 0x0, 0x0, 0x400000000, 0x4000000, 0x2, 0x9, 0x10001}, 0x0, &(0x7f0000000180)={0x1ff, 0x1000000004, 0x8, 0x2a03, 0x4000400000000000, 0xfffffffffffffff8, 0x6a1}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f00000005c0)={0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x6000]}}) 1.908182583s ago: executing program 4 (id=819): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = io_uring_setup(0x773c, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x3bc}) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) close_range(r3, r4, 0x0) r5 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000000380)={{@local, 0x80000000}, 0x0, 0x2, 0xffffff0f}) r9 = socket$inet(0x2, 0x0, 0xfffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @remote}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7f, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r10, &(0x7f0000000400)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}, {0x0}], 0x2) r11 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x5, 0x7, [0x8, 0x40, 0x100, 0x0, 0x10, 0x5, 0x4]}, &(0x7f0000000280)=0x16) setsockopt$inet_sctp6_SCTP_MAXSEG(r11, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r12, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r11, 0x0, 0x0, 0x0, 0x80800}) sendmsg$AUDIT_ADD_RULE(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x8) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.832037688s ago: executing program 3 (id=820): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240240c0}, 0xc040) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xc8c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) open_tree(0xffffffffffffffff, 0x0, 0x89901) ioctl$sock_proto_private(r1, 0x89e1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0xf4ff, 0x81}]}) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 1.744132087s ago: executing program 0 (id=821): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x10, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtclass={0x24, 0x28, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x8}, {0x8, 0xffe0}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x6001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003e00270926bd7001fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2400c014) 1.743291856s ago: executing program 1 (id=822): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg(r1, &(0x7f0000007a80)=[{{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x3, @remote, 0x40}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="7110113a5dfde7897d933c796ddae4e92fc18dbec90c1eba07844fc8b868f7f9b856b07b293f32aded41d21adbeadfd44d50d5f2d9efd7c24ce8a107644c24eef835fef9e3ea10f9c30b60e98ff629cb0c207e74bb6d64328bbe37", 0x5b}, {&(0x7f00000001c0)="807d7517f1386a05b28d25c1e11a7689dabad2a3ccbe1a485f76f280f8e0034882af6048", 0x24}, {&(0x7f0000001740)="9406d99ef04578694205e9b0e54832663fc0c3f5e2529545184f6538c52c4f3a671e21c8c55a395cd6ed17a347c381def4c8ef30755a0137e5eeae2d1c4a76ff4fc4aabd4452d6927a9483429a87a7224d5e65b63605cbc7a0c668e59ec8c044bfda573e3d19a643fd5d4f9930e5e53b7880abfd2ebb50205967b2158bb68a7e30a50506fa2403eaedbcbd39730204ec9fc7e145fc209aabc1ca4c1ae2afb2c4f0ba3cff71105c2e63c9d04315da510cc3cf1842fd7addba363e01ee6c60ff21e4267a98d9e04cb678b60821a3c2d3c04ddd0f8924658acd1f87e641067c0f2f7b4f8552fd9aef68f66eeec7e4ae4225296654bee033d16d5696f8d0f0f8af0275011df70e9d180a89de0a648d5b83851d1c3d9138935be98d54771f0c749b06a87015dec02e7ed441c6b5f8dd11f557282faa127072952b51c1bd3b664ea014c42ac0f6e127446669b2040133809614a9f904317c623f8bb4394c84cea398882b6dc574403072add4bb96af21488de0ba51c61cb87cb39ad7c7345a35da3a00ee60538898433199985d33f225b046aaf2a87b08bdc1473838b99ddf6ff9f9c6b81f153b2a1fa894b56a33d80e4ac21f0b890a8d0ea4f6c861cca009d05832a6924d5d19debb74311df8a4aaed2df12d5a112435d8617289c7d4281832de20d1a8d65ba3c59ed265b209b7a8cfc4461b4d365609a2c552575fef2644785fd78257d6539691fa0fbb4c2ae349a6e3d19fd9374d06991601642f77d64063873e6d9517df48f2212351125961989d802f096adafcd4157402a355bf3bcce9167cfb0ab5556bf48be91e060c9460082569e8733a1c41eec12a8ce919134d3bbd932a1a8297f476f5cb82919dea31cc0109d748ee63a8c6d6768bfc39f35cdc7182f5ffdb198c77f1d98a87ee6b7c1db6b82ec9de91c9e3997a1787468b503d9bb0966e9c66c05a9354c2ccbbfc3766171c46251ed54b41f5e6485a1d4fd2a0cf8e81f963c847a6b4e7f426b165d0eeb694aa263e4a8bd52edccd98d00d306178ac21d360181e5adc4b6046850d9b1b37cabf98891b58c3604a942fff239a58818936d68a35c819fef3b62130333c1fc96b9a52701951116eb545fa4d1950a9a604b5c554d027e6e5cd7a1a37987a0236478b4aa4a004ad7cef43d9f99b6714adafab58ef2df96f04dcf8124487207a2c3ca5615e74359fc5f93fb4ffdd8459b727dee991322bde06ccb36bf47da1a8be43b1475713cf88d2df59d608bdf6a66807b2485dcc23d645aab851b232d16ed2c8aa24aaee8aff0d1d2a4c452ad1cbbdcb7c5989d472f12700e4ca8c47bed0d4af598f73cee2229a1e08fb183fcadafe9f47b4ea92167cb4a3bb03f1cd711a2eb049d2c07f80c45a4ebfbb5a0b9aaa28b6820a7ac6e2cf07c7742bcbc333e1a8239eca4e69d5e0a214831ae3647c9514fd83deadc546776cf4fffe63d732e41aa195c0e017446d10c65582c1390394516ffee8af8af70c85a0d33e9ff8067e9bd35fc7e989a988596f944e434fcb592308ef62a54866a380e1a24c91a26a2b5ac8fde1aff9cfbfc15c3ce83889ff7f52ae947cb5f50530af81456a984884672b5700163798cb42df6bfb2b4234e028e72bd8c827a005f1ac23f1b238a15b77d571728c4432e197d8e900788d7e1be7eacdd3607a15e215e82b2337e0a632f634a63eb676cbc2331bb4e9fddeda837c64ffcadb276745d8ee1cafa6e64a0ccbe4d6e735179359ecf33fa0f4f74ea9e29d23b025ec4cf7729de4d6ad26d7295162577f609b44aa7c491f4fbbb61b00ce913e923b300fc4683464e13f161aca94b25a22a2b4f9063b5eb44e1d4e357701739c9af88828bef95504ed06e89127b928fc963c333b5f25e85238a34ccf597f2abda6c0df08e485d4b9b5195bde6a0223e2a0787efd0cc6ed1511a1702bfaecb5919e87177712cdb2787d6c1b75a8c9ebed010495060674e6f47b9383e8f22a6ce01c55e75e7fb10f5a8632c3bd37177072767d682c4e81e1effdeb4d9fb5082681c962ba3da1e674d1fb44ffadf94823902f32d4b0b5a80e27e0221465ffea1d138fd0e8a1a9c9ffcf20dd7a7f8241bf154622eff6f017b747f3b863dcf074d3961e45023b6a9f97ab905227c9bc7cab48475a14764b048fc7311cd7f7a2e71cdfb009350e35d27c2ee9dc0374ecd47eeace050913315e873d5ff97fe1f5c933f90e0d35ca76badf19b840eabf50a5b1bd6e5b7808ec194814bf4812833c5070ab061103160a66ed5d7e04667fb001a2c887f529b5e9869a57d4987ed8747e00a7c04e3dc47578baed137478a210148d4a527f9e5ce4239407fb3fa61f09fa39ead5b18e8d138b14b9331a8b8a668efdcca806df90e6d820a3a8c9828e165a1f5fd51bc5cecfce62833c8e8db7cb10d12462785b8afc6343b0b934cdfe2d4bf6b70ce427dae064295491786b98cd2a411e29c668b4e48935fbfa62125ba8696c97dd6ec2f4e89d3ba9f92b59bf54c5e545236277e4d3438897231dd043b0a7497ea9c270f78b3430b3ff11c209edd78d5b9526d4f8415186652bc8b686f150d448c6f56d4eec1f7a37e345438bacda9f1b2f26a18eb669f97f0eb08e94a2edc862e25ba8707a89fe1ec1e61f3cd59fa8f00ca256ad9254863d183420674e413f3404b804ed1d1eea7b97eab3496c26d8234975484400d32d090a61a9f0a384b02843daa85d553927810ee3d1ced932f6cf2709eceeb3fcde4d5c7fe9e509904ba48c880ec316ba92d6bd04a8ec913a3cc0d85319d295bce37325acba88a380a270ab7af06e57afdbc11dd5a976c81838f8bca2eb2e4ec659a4e814605ec3390b5d731125e765f3e3bb2dbe1f497218dce315469a1075c98d389447ca0fc77b46afa7dda018ca481484dc22caca8bd43778b17e72259f9a5b10d61476c1f40bea1d2b7ec87ec24120a743a64839c7b0651a6ab5ec5d66a3676df0472234007f71bd6132610b2d4d158ad235794a104d3610bcf6d1f4750a512f3a99dec223f17e59fa41b08b7f0f8270191ca90c3ccc2c0e3a0ecc364ba55b4a7516cba912a020e7307e3fbfffdfede64af521fa9655411f83bbe394769d4de7ca20670d1e49ddfde12a1ff654a05a5c51c3ff9ae6ac59d399b53df74ab012676f3bdd1c6b91e1fd0f15178e4a50a9f7e89d4fcb9d31cbf4ef4ad6d591ecb7d600c3f4b37001030ea94a30feba637f8cbf739fc7ecc005b36352a10bc086968c85af4c36a49178b1ffda1569dfd84dcac722fe9520999fa92803679d7b0df8ceb8a921f715828c445dd858538ac8efed8941ad43ec352914e39433ac07f73c1b0a5501f0a3344842882da9d4fba14c6198490677fae6c5941fd816354fb6e538a8a3782af15accdfd22ced5d28a5bd5040fca3cc99b14d1480cf3af2dd0674ad38d0a29a5c1015f303a75db856c5dc3e90b9a27884b1bb500dd20df628f95ffb96d889c4e85eb7247a2c2b5e1e74bc0fcee95c3cadc73aea9f37d8b24bdbde7291722b4ddb26e15d8b9ea35a16352baa5123844a4344b42b72575a1862775ab459928ef34f4e590ecf97a72b0fb86ec5bad191cde667d12a179539e3fb98b0dc0ca959a8583764923b7216b7c6535c54902d9cdd70e152500418acaa25c34c727681aaa215c3094a241871bf4c57cf16a36220ea104e7a49e74806a719e36dd702e99f707df7939c25097c99a0eab26ad92a9f73097f185d88223d1f9e88dae1a86259cef241956c72c0f1e17d633ac15b726d03ff29d37d5d45518df883b69365b7be97d783ce7993484dfc33fdaeb85480096a4ac22b80a8f005c35bbd33cc86b3eda2f8f56f1c826fdd3b433e83323010239a111e6f741a4c20a1686fa3f6a8acab802e2b20352c4fc357c1cd4bf78f3a7f671a08341b6c57d4eeff717fa0c01dcc97ea642be5a9b21659f84f5ea4a97b8c2449906dddcab22c1dc95ca038e621dfb017c364b255368c8e8355f502a00b433f55b10afe48796a6167d9bacc8f6e4a076f52df61661ca7f7facfba3510c54c47d3e1b8f995faee03ac042ecfd9981690eb145c23941747c10a99702c4ba1b18b3183abf6efc7143d1f3677371a26604305823117389e8c1cf8eb53a103a6f87a6791eabe70da5d6def7632f36b7d6a83868c6d3055b598dc55e7703fd512faabcc0098b20dc6f555f37019b80d5571ad9f9304b4ad52c40065a81fcb168c2ae788bd8a8ff598a42cf229762bd5a93b15f5ddfd42a008a9484626c0e4f34b7845317b40a0046642a05e367b83c832d4dc7830fb38c2c90f2bb4dcaf105962965149a6b439b7b7a83f52574af47d333f748301b5e809f6104a92856c6e21435e8d7752ae03e92de8d76961c88674cb591f66360f959cebd3809693830cef14b98e4c237d51b9c0350a6f558413c79eb99c962def87903c26fdbc1acae8a16b66fcf8bc3e74b9cdfa4359ba767dd6a44a09c39515e769067edb907c8b0765b604d12457d2362fe548b2df455dc923ae490e3e70dc0ed7e19aa9c5be8cd6568b677bd100d554795c5db2bfc2be7329758277a35f9dbdbb8960953fa6daf2e2adc97b2db7f08dd7eb7262893f89c72e705b1d281e2afd4fe77922902cebd29e42ad3a3ec85b5a87f296a1ccfdba259bb2e250c9fff4d3e95262759e0ceecf03d29c1f9ea3b0a428c78c6be9e7a835c347058e46b8c237a895f2ec7dd5897b05a0ce5092f275d035299779ba367c141acdc38cb99787da53ad85aaa4b45957c0f43374279b517bed70dad3f11634432abcaba3f277082704cf192d59cdf92e8e53c2022d030bb93abd5aef5a5c53b00a811c7ec05c6f93ab465b7e984fbc16891ae49fbacd935d60d467e6b44b491a76afbe732303b93953d7dc43819a7a6d8f70f61deff6697109c5e446aef38d666f6c1c538f2d246a6cc11e674b30ef0914da01b4fa4e568d84d0c680ccb6def51843f0cefd5ece292b63086b4ddce08d6e26eac2af13dc9ad7ac556998c320564f09c633c7acf9b1101fceeb893d3c8f38955daf5161b2019adea756e5b7c4fc25747f3cb2a3575ef7edc8f11308b3bec2ee2e8e4cd148b7d04cc2e415f4015f2540b5c32e903416d8df71dea07b1a6f609313f408f9388c40954de4e02037228995d0aba423d41444fd9b8eafa1268ea6c00df549a6b0bfdeac0f6c84a4c27661cdc84503e2ec14b04b08ec75c6ca74f3680e93d06e6059c1941dc4e061d531e2e2394ad5ca6330493454fd793758382f2f3d0a96a15572f988e14c9805ad410b490c8c4bde7efaae30c2a16178db2fd2d568140fcea2dd3766047722c2adc6ad5ee3c44a1036bf9303ab57fd57be44ab1c141526d095fe0e7415e7b0aba6043cb73428338b22b37c72561a27249976e2b78597339c00720d6dd18eae47b06605bb0d000eef1e6d8bfb74e6fdc0a9a7a9eeefacf4a2312e49694f51309dcfe12e1d0b57ac76ce979f4a6f531100c79fa2d27bf48c89eabc086f813ddb5aa1b52243e3dcf4fccd21dea30bebf0ceef3bf426b46f4e54c7fddcd168847658d7e9d5ac4f53ad0cdd5955d1998d420e20c717301e5a3878b2223e47c4c222f1dbe542b7f5c72b5848b406463ec2783ab99625155661e6274651a023074613ae7b82f4dbd32f829fc85a4213b53b1991343c95ce4b39905698b8b808201cfdb429e6b1ee5329707f624d2492e59dc6dfd936e091fd9e92de6e9693fae960a3467235f36a8f3819df09e8d6ebb797822b18367433d5231f9cfd2b7960b8040db58b08e3fe0a15c558066c34", 0x1000}, {&(0x7f0000000340)="be9e51c440066f074f657ca33e527b419ddcb5c2ea9abded0bc3cc5d91", 0x1d}, {&(0x7f0000000540)="2e112a3d0719e0ba6a8911a644f4b30716325716a9680542a0853afbdcd75a0a7a18ead94b80f2353da7fe67ff85faf1a2b5ca14b074636612a6b3beeaa4c27c8c29179ad8043a9c25f6c4aea617b6af82436e4508cdf44deb6d8e8b01af25643d3d613b7855abfdc163e4894a532a1ee3b05c432bf6c1fa84ba3b8b4e3cb2b7e8393c224302d01cd6335fa70651803ae0dc08950a5d144e1c7d6a4803", 0x9d}], 0x5, &(0x7f0000002740)=[{0xe8, 0x101, 0x0, "d824e14257c5fe9c11bb191adcd369f60eb7cae8f86398fb7ea264317526d96f510371b8374f9d306d247f81bf20029d97ac5c3b01197de9e45dde4b121ae367353ed338a3f8e06c64ff2223cbb918852510a6e9a978995c2061deffb0e3bda0c2dad1a7398649d41667f53c4213468c3c8d189a0eda2cb0a939ce2eff39dea1f84869ae6609512b7eef95598101245c148963746cf7b24c5d7403a020570944d4fc283af6f31a5c0b45b7e45be713f38d63f8156ac7b049e3101783c180d7d62997fa82ed01bfdef3837f5c32a0f98e84"}, {0x100, 0x0, 0x4, "5169e0650f4f4cb7175cb7c1290fc02311cf93567e29b48db478a0dfc24901a320c629b84dc6ce9fa890c8831886bead6bd34387ae7de085de6a1f04d0ffb83237d16f7bc2faaf47afdbd22f0b11147e737d3861f8c6a1c9931726f451e1d16c02f3cabb50769b554fb47c58ffcda6d0954c3274839946b45ad0b8d66ad7b9a3459120c25d97861bb90a904a4dbe0c9113cc6e37c9c3c78998c6893ebbb1610b8a9aca5f61b044b8b5eed09f1c8fb7b98c38d843c491e50e2d743fcb24a7a3efbef60460d066a1ff52dbdeb50ad4670e470fc08d2c1bd5a1664dfdd824054499125f979ec5702499d257ab1c"}, {0xe8, 0x101, 0x400, "056e558c6819a9b83e0471926f47f8f684482747e1d1b7e79cc5cd4778b6030ba1bc1f344e53275afb15092f7b74ed6233cb2e4f6205b746acedba76a3ba5559a058b62dc055e7fa26c17f4148116269cf32953de8805cfb5e2d926a007d363a96eb8e8a17454e37c2754e55382c2548d0e59760d42dea6777600718d7cee1e45910aa113bc7f6c31f55ce570c54726a959c287ed507e875bc5f6df32b54a53ee6a103f3e2483daef6454294113915cafa51fed9dbeb1f868a0c5aeb62ff47f014f1f0ea1c06741597d84bf2272bc723e1"}, {0xd8, 0x115, 0x2, "be79568bb1a63c85564e66f4c9ec47bfa44bcdddb0730d878321f91bac8f4fa2abe551acb1b16c66854831a3412ebb7856a403fe5a3bb3d45ede9398994d978572b6cc5c8259f8b41ff92d2e2cea3ce62551bc8aff33dcb2134eaa5e6d12e071f1436e02505b4836f6ffabe9c85e2fae3b4e79e4ec532246b7ec9f486b7983f4203ad79624962571b12aba6cad643e93a2ba4d344e974eadb89ad7685f0656cbcc7eecb9dac170c559a9d6d10a2da01954dfa56d8a742193c297fa75629763dd7d"}, {0x1010, 0x84, 0x58aa, "db30edda9c5419b9d10e05f7c7b12c2fa63a5ab203a9e221454fbbac58217955c7ab61fd5597a5904aefb8c2d60961ca4dce8c6de021f49a3c830f6534523332a41f56ff7244bc3687d2155bf808955b7e896712567677fc4b42358304a64659ae045b2a0962a0820c821400ea2f7907fe3de789112bcf7a7ff9068183568f52f855d957ccaf5e37aebef3613c763babca1240275ef14d31b4d619934471ccaa7e36616708d4a80665b6f0060c75417bf410415f4be95aa8afafd09558876feb15646832cd1b6dbd6c5382e1a2097232860c58bd58d60ab783fb0bc1326475108646406b4feca5efbf275f611c7df7e817bc0f34ff0ee32a4e54177ef49b2417a4268e3656a9836bf18979da88984dd996dcad24153240a843e853532e8a267a84df6780fbd38e79811a7da513cf82816e9e7943e1aea84fa185b7af86f55f30215923fed875bd1d18118af7daf0b1a026d073fc3d58e6bf2a6a1b5309ef4dd8f08fc27cdc51c775d5272e54098eb2a1451003a31b1e54906c288988158207c4fa2569aeadf391e7b12b8b12239539501172ac650972ece38efd25e72a28bdfa4f15df1ed7d1fed4b5d6cf343fd3c06e5564880e19b9410f8bade894473b31b9d1991440ba869d2f078d43692fa61ff45ecc30c5b5271321dc6680b10d8d455957d7c9e3bd8cb3bccad1a66a2e4444e601c9b543bcaa35dce5bfd248297aada6236536f320523129e13af360ea6e1f1837defd255bedcef51c1b44e588edd7e17c5129e272ad81ee60ddc0bcb335e0f24702cc205abc4453d32bf04fb041709bd54d43e6cd55cf3b1239802c111d583dadf546fd50ad2a5e15969fc418211c8dd114aa0f515712b7ce2f61e304361ef4134b42c625be720dc591d3877682e4794ca60e583ac0ae9e8024eb5f92764c5493869349cfa28dce6ac091bf6456c8de6f68711ea9c5a973b6a4581defc0843c83b62736944fce4a17ea59d3db862d6f72b08f9271ba3c4d92a0aed2c3c1422ff7b822256c89001d290d0ec6bfbef9184a3724fc74135fc2e0cfc7bc2749380f6b97fe27d40abd6793e365ebdbfbeec31d6231bd1764b19a92d6c5dfbe6af5a2b764c582dc7bfbe0d9b2d04ce75959347ca011cb40c8aa3b489ffde6effb1f5dedd50e81b87c6404ea6c9ff32129456739886d1b0d00ac047a338c0dcda8298858e48242f4b07f1e8f29b874c73634fc633c2c9ca7d3181ce78e70275c65fab26a7e38c04192ff55a021838f6d2ab1a2d37acb3e9ab438f4274237e757f8045218c5eaef07e310502437d37154f2a66daeb7856bbf8cbfa6e0f4b86bb016f7eeaee264ae778f85d3ddd2f7620d3d9974cc463303875cc4a471463f62628d2772807653aab0c54aa9751b29c354cb853c556166d019fe71b249b420315cf90e0b8af69c2d6f61f6edbf05b7f2e5e44387254ab6d6f9d3df723d6218a4bf9c694428a5714a7758733d487b6a0d1af024c73bcba57f097aab026d1c1bfff3074db801ad65c6f254ea87a1c8500b7434547635b7b8cc0e6c392fd590d6cd3766104730eecb2ac643dc92c34d7cb6877a4e4dee8fd7a29525da6159838aa2e3e74e6cdb6161888975c835382c74f814344776039361aa6dc380603360de37c54e1df8a59f9b25fbde070c201892e729c794d99f5bacb844d71e2289a464e58fad2f5363f4b4d519e9ebd53c7fb8d08ccca4c80259f1b505894753033eb5fb992b31acbf0f0c58c2fa69893545cdb6e5460773198ece8e6b5f63cbcd617abc39a02019c3e9aa3673a7ccdb72da74858825d87e73fb1446f318d4ad921823a6b36921c73e4c814a25c71df75d9636f32bed0cdcf4b737e205b3a505def64d2ecf5c1f1b7f5ef011090998d4107ce3dbbeec1f98ef25a9dad95117cb5768857754ac44bf0e33de8dd6cbd3cc123a7cb2c8262a2daa61ace28f77de6f69892c3b207d1c06b1b311b41e9106b4142acf71fb3d1bcb0ced2ca25034b011d5351363f33492354b12151a27d2c76accd25300610ab5568013bba926a7e3823fad255f8f5250ecbe219ea168c4f5ad4c41192c1cc4aa928f8f915ba93205d363ada71536877f0e473a1a334705dee77587ce23264ace05268a4da60dfbee91cc6c2d24afe9981f39047dd6717baf8803a1d3cfafe00eced0495569c2334dadd02a46249c80138660d7aa8cd678ebb27f897b30e44cdded0e715008a7e96c8f3e9df99981525f8c534861e7a7505c1b2107baa2fa5499757de62e0a107abce18830ae40d5cdf7aa8e8c53193bd03fd7d00e5b6b5c9834690ac40ad860b63e112f2bdf3b4f326b52d31bac243b02b427ead397472b454557d157331a2fc99473d0302ac27949f51d7872b31ef73bbc52d92541879848aac7ec04de238660019dfba29f8b667252e6454b3d81ec023aa7d0bb63acd9de9f3e7c96c434c643264e31d6e3fc136a3085f4f1171bd172683dffd8a5bc497dfe83a2a9e587f6c865124853be9372434273a5c1b0498515070fa95f5456ec43c3387be5bcc2ad909e382c6787627dde3471c3851e6f53ae08892c89fbd3f0404916e0528db0151dcceff03584145b15f89dfd1aca12031173a1d50b53dfe088c6791b22d7cd460b1b2a7c9bc4f3431a6e5d5f271ca2b1dd562ebcfcb53665ad4b6aa6a3d34731107ed1eff3b50ed57e5f72b68b0f2fa07dae9ca8661f0a285b0f5f090afdb1d8e008921e380266a44b61c4b5c2693c24c79ea4f0b40ce8af99e1e543224c8d6f0e0613ba5f9d9534dd07b9facb91b5ef5a2c14d8775568b2909ffc48f22eccf9cb71a330fcf6842af5e451f18e4be2c5cdf73a780148df3a2f363d722094684f82833d73123c99f0dbb34996b8c30c59be3231e49c53209e289ac386606bd6f1689747bccebee4a83c30825a1a862587a23dea7a4594a3262771c40154e1c8a158816c37d39e315a704f9151fa86d5b5f4054176bf58ab5e2a1b1f274bc1d70df2a2400e023003c979a8007d98f84948f6931fcc506b73d451e93ea6b491dfd5ff8a2759032151b77934ac42502faac01dc2fe5a6a24995ab26c6de40694b7190c0dec39a2ffa05d88e862a86bf2a50135fc2a9ad8dafcbb3dc0deabe4cc79b7e0a927d49ef5e1b5a7437072973b875eafe5d72215caf92d6847117d05a3f16c2d6b5c3fb8b3a49a1de27218f51669cfaef25c77c74422c96f4db6a825a97aac5940c86ba3c4c1282f4caeaf263e8ca40cd45d62b49ad4e19ba29f4e74dc496c5b5b2dd48427ba92f00edf0ec3e258d92b0f67021f7b97c3487aad181e4f4d68adf16fc15e42a70e57ac65b6186fb23a0a958145dd8fe8af59f3f23a36827d9d1b064d943553cbefa09dc0e1d89447ec15014c9f62581d478cb124e5395ba5d9e72fc08654b3e85208c2acc3c523e58ede89b7b055d61192009014fecf0144c78c0cb333df7e80af524f6988ae1897c88caee2f88d81e029240103847f3839b11d6079c65fcc1d17299b1f06c8867e560e0f66248ad55b8e0011e91345de6d98dd80d5cbd8239f788ddbfd9d8d34446f1ac913c25ec3dbffa97dec7d16a7ee4ad84110947a2de86d2a3402781262cd424afe317d778b735b09148fd1fbb4ae9baa208fbcff49ceb1e9549d6bdf2acba3996f34a42aecda4a32ed56d23d8fdc234acf4064f9a3a68da89a6c3b6301141a60e86a70093d7cd644941f864a81bf35bd470893817780c463a389aafd42dc3bcf4deae9e855f1f3896324214cae85b0845cbd1a5d470159770e0b3e6c5ee24817d2a9061bf8da10c4ccc401a58ec53d0f4bc08a4f863181e191e10e84a5b738cdcd83738c8bdcaaca7277b44a8626896acdbce428904a59d2257f9c7cc9812f453c2cc931d3a06f006841d497a85c7de135696945db8cd5c3ac543a43ef9f8b5adbda40ef727e52e4fac00331444d507c0603b5c2ff2064e70c25586fbca8234702dbe96e76e8252d08e0e7458b19aeec71d2cf7258411a9e7986260d83135e818243a587f97737f9fbd2a20fd196f90ff5aeec57ce86f82da5064be8a75f8a16a74707a81b6c16db5e4291e4deae6e5b28530d34cb65ac23f34346c5d625cc0a1baabd2e55581b6603f1fe8647af3797fd216e11a2e7e2016972e703a488b1bfec5fdc96f50a4ad425272a8db9c78f3986930748c20631bd2a82dc7158c8cfd391909d1a37368a75d3cb17910242d23f1a62b8c6577a7d488b534f4891733c8bb76c1f3d45d7d70af60bb9f721a2685e05c3817c1a25a832ac2c07f87c363a0698e5be40576d8c65d7ab243c88b72b980d0ebabe7021d1a24d836e1cc90cdaff5efe9037a2284565ea90a591a86dc683c0c83bb58c8e12c04d0ea86dc3e227be52955ca4cde7412c888dcc057b1bf0de564d1bc927710413f6985fd75341b1c223b70daf33ce30751a221df2d6f237cb273bc1359089974bded655f4b221f86c8ca6cb99a7266fc0b3c53ffb7471cfec99d7aa06fc07426f046ed12851eb48a6cba24b5aebec1ad0583bb077dfc8d380005059803c83b2e441608b2ba2d42778a4f69c45c5994bc6dcb0cd5d308d8617dc2411149afb992dfe7ec95a6d3d121f29034a0db84a03e16cac9ffece41f79848d2ca663f9f4fe616347717da6ab93a070bde79562aea75f6add195bdba4686c623344572d94f1d46e630c9f3c184f91b819a459b1aec431a01cdf5435377a7bb43272182fbfa6ae5870c6e12d8b203b089fa0e55fb8e7a0221a651c940c35d27bcdb3830a2aaee80c3d0bca40675ccb9963d8d477a55ffd3f9caa424a4beb7c6d9790cd097b53c9b7292d99bfa3939a710aa381eb6b6a02bc51ce00d600d6a3f5c1823dac2c5e947d9d2c20ed2f2512f3e5fa37d34003d41a77ea3bf4afa3d55b7f91ae1e31abfd7a42357d66ade7ac708f975ed535e1027d24469d9113050ccb22b68ab71bc3f092375a482fd97a1c19952676db6629c1ffd041109a4d40f419715edf59a4c6c5453b043867f01e3f72568c0708974740d40c231df69a340ce0f54a18087e714f8d21e295e8d8ed716643e6c7bfd4e23e95e77320bc5009f5bd347f2bf196378966a4a5e687fde2f14db816df95906f0759e7e2e117b36b7c631061434fe2e3ba60a1a238704475c42e5fd32a6bd08829aa5ff5973d09f83da7355adaf191da382421593b0ffa31db657101b3515fda0cd41043b46627df901e2c536c6307704aed432dfc3351f60009c00e60b1cef4e7614df4dddffb0499f4b0787158247f6d6a17ed1e4710d1ef562662de8125934e1f497fa4a0d3505b5883d8afe849e3ce77cc6f68bd27ebcf6974bd38e1a327004481ee91552e931796ba04f6faf25670bf02656fc524ba0b18df200da0f6ba4a805cb8f0b5a00013450a6a543236db5d5986c650507e248366a541a3bcb4ec4c4c6304fb6e5a46afc2878d967152b4da1b2b8e56f1de529a3a6e1ff3cc3fbcf243569189f60172601df42c00d49401c25edb65898cab63ec3a5ab5c3f1e7424e977a0d7dece8b0e7f772a6f0bf6da4e68ca6ef31af8c9ba0475b9f1c79c5c37a54f3859e728a75f60dd7893172f80e328daaf1713f9652d83fbf01b3254aa7a265525fc208792461ddbd43189b60b701147d0835453cb69e0dcd94f016b811bf0a145a376a228d3f76e6f36c59e4ff4a674ce32f48347dd1660c05b40b524c902035dd457993dbd180fbb269554037a4ad70b2dbb08a4196fd90f1e836fed670e8993e6a1f790a057aba7d4e4f4ce4348cc5da2faead4c7092ec593f8a234958819"}], 0x13b8}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)="fa61d3ff8bf80a57e83a6ab34d4e8765044f90e58fcab24a4aa6c4c28a442d26c1b894d79a88305023d479f097a0440f4c699fb34981be4e5de81e95c23c0a854d17462be427336df708a0fe646ca5a272bde3a66c5919c4ace0fc7ab81a97258e4c67790b2a14f2a1efaea0d8c557bb3be14b72ed1d20f681a608c0924ab12c5f89102519619050844078ad0167e3d52c1a0d7aee9138a51511a04354f4d7a6dd358988681e0e035d0634f6a319", 0xae}, {&(0x7f0000000480)="088aa44cc33f1c35aaaf1595727c48bfdb97878bb8b9d39e35e3200a76f93d5a19f5c64285a27a8e2924e9", 0x2b}, {&(0x7f00000006c0)="4364776024a0cb66c4088d5b7857af168503bdd890e63d28b037dfc6a7b030ef8a5046b8c41896df1b114f108e18f5f24e454634611abe680fa006238006367f01d1a49eff95b431bd3b71fcc015d5e4deb4", 0x52}, {&(0x7f0000000740)="e7062cd855ee64854a97a27860f20fe3d6b73793e6c94d249ca58541efa23281f732ecf833285857e309d7a2caea964bbb97a7bb7665c56c989e443bcb704ba43c06fa39280b084e01f0ec589b7da258bb2d3a46e437ffa18b498874d10ae54f448e8579c82518567b8c75624c56", 0x6e}, {&(0x7f00000007c0)="c9dfa1708304ba3c1dafdc1c97275125c555b453955f1b1f4a7920bda39ba1d3cda667f6e5c1c20efa9f0044b0f7cadb3632e029c33203a79dbd16192e4a7e7d4ef5b4c15ead793cf9d5321f3dc7629021e657654d31d11b80830df472f49e2e3532cf240612bb2af70d05ea11a2f979", 0x70}, {&(0x7f0000000840)="1f6e24682755b20b5d006ccab51e38b2e6ac34df89aa50efdae0c3226f831c4047cf579eb8a5763c8a5b889e63b64975a4b2905e6f1e5faba7268508860a4cbfade90fc45af45380a3c3a2bd79028ad4329ddba5a56b6edbf15bd025156de2f1623a284fb1c5c505f36047e62d6c561d0ea2fb9fee450038c23a30ecda7a7b982e02cdc2de96ced68c1836ca7777fb7d8269237cc3212ee71f30fcf6728a8d8c826cfebdd5d4423d288410327c3ab8f7a3023638e17606b402081688bff4c4270effa6540dbf27ff8955d6112b6c86b720a171336b8a73e93126a93910b6f30bc5", 0xe1}], 0x6, &(0x7f00000009c0)=[{0x58, 0x108, 0x6b, "5d9a44d4ebda5fae157e1640616d52687ad41ba72da740cce181982db13211fe17028f2fdf21930c2452c7af505798c6db0b95614bdbeeb4663b0563eed64824cea347ae"}], 0x58}}, {{&(0x7f0000000a40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="81556b5a408e5fa8b0f25fea9e9f66265e0fbd7827b94d4299c6d824bc7ce2112adb561ee1dc256c4080905a66da472b1d635ffb3d2596a479b9adce2eec5a45ac0c7227453790be602bd21e07a3110e62617c276a6763d7be78be9a2dfc636f2ea5dac00786", 0x66}], 0x1, &(0x7f0000000b80)=[{0x58, 0x102, 0x9, "d9965b190f0eae74284c387673e002ab503728cecfa131a460d2b5fa3aa85f0da0319e9534f80a6fa51a9fb1e54fdc39f8ecc0e0edc040ba3f1a02f058638fca1cde1e1cf0bc4a"}, {0xc8, 0x109, 0x5, "631e65fb1d51b020ea0e07d5484d3c9729a2cda7857dd84b7464e4133ac2490636cc9c38ac3b6fd145fd450b5a248884d15a210d0df22e9d9585d42dad72ff75622fd0dc1febee011aa40e5b8b87672684389c6593c1945963dbff4745cd3325a07d6c589f9a33a3dadbb494f8d70f35a78c2c14462043b3caeaf68773ecbafdb4e29bd22ed4424b31e435cfe95f9dd19764973c6586b1daa411f0d1bb4c7141825ebbe47b811a7c142f8637a2cc817f6672f476b554"}], 0x120}}, {{&(0x7f0000000cc0)=@xdp={0x2c, 0x0, 0x0, 0x3b}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d40)="40391c919a2f68b800b6bb0eefc80cf03d", 0x11}, {&(0x7f0000003b00)="8f7cdad08d87f1b2615a18405bc07626accef77b10f598da2419fd256739e0ded22fe347f391a4e9c9cc31da53e977e0ea9c34db337c71c13f8669d3e4a8e1fbf150d1bcc68af2e5fad475b6b85d1e35aa188b48b6d3613d8e7ef19e022f6288f676d65fa20f542c7869471559c20a96ecfe5e485c6205c110797df261e3f332737b6f036c7081827ae17b8125a7a1a0321b551634694a820d14cc91c1b026bd4bb72455b9", 0xa5}, {&(0x7f0000003bc0)="0c472ec4714f790a374fe079c499fbcfa154ab53a6d7f8f640b113f8ea635c8bde34f646af09b6d8528d6e073a57bc21ff99d9b03d2446b0fe3b9ff5ab4383d03b893164fa69344c5a93f4e6d29738e39f2ce37fab6d368001c9d54278073c56d2e99bc36bf53ecbeb936e22aa23e30bc16f088c69a8f9ec9a8dd1a2cc481e66a9c64ba28639eeda197a8ef1e8242f391ec2d6a07f6d8929c639796dd4203d51aeffc62412ffabd15454df9bd9a5a80fd6b61f03b1a452f48824f249fe1af2c639abd0a2beec3d6a5d3fc312f7ccb221d4fde62061ce26efa926c0a84e922fa1fabcb5edc3a7e0383ecea0f8883ecba29088d3a91fbb2c", 0xf7}], 0x3, &(0x7f0000000dc0)}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003cc0)="5e2cffbb92db553519d73e8c7b3d16fc5da008c31dd42b79527d", 0x1a}, {&(0x7f0000003d00)="6416672840eedef681b2ad8a3888222e92f0889f25553afa79f4ac5fc57a2904ee3a57f32e6e1bfb6f097c7fe89a3cc742a71b0ca00fe33e9f7b251d15df652755f6f3c71aadfefcbf9cbdb7a49656c2de7a31cc883e3e9ffd1caed693d289b9357f042ac4defee6bf6189801c10cfee0bc5466c3ca2ad32c1861f6c8325bbc168ec9da4dfd316da9cff24582ef17923902e2d1abbf003d5c4a43a4e2e256d", 0x9f}], 0x2}}, {{&(0x7f0000003e00)=@can, 0x80, &(0x7f0000005180)=[{&(0x7f0000003e80)="df36d138db9ecb0f994087b7a39bb57cee05d83a0ad8ae", 0x17}, {&(0x7f0000003ec0)="02f324bf546f27648f9a96a5a2d2890f8b67827b23c577053f8c073df0d78e5a284428edd4279950ca02eaf5644babef37e19ccf6a8e65a4b56286286b1777b1c57877a42626e1a63250c1eab32629fa3cf593b0146a691ba77be19b1a26c8b5dcae924f71476cc0bf2fcc222d5433a43d531a273ab4623b658032b8aab374fe8fa4ff22259748726e54d5f5b6dd6fcb9c81ba1e6a5966c3ceed4855d56e3c459b0de076567f9d04741c232d6f60c41f11bc1272db00d09ea09d16670de0b26069f853fa4b8bc9885f7f83111c01ed2d716a815fe70116b57e5cf9138f8f", 0xde}, {&(0x7f0000003fc0)="cf9006d6197a727b6122be13648d94226c4b5dfd9edd2bd95772ca78e58a28316fdcd3d5d33fc4a657a79301754b064bd7146211026fee88a2994177f72669ab640c2b8afa7c9709f031593279fb81a3", 0x50}, {&(0x7f0000004040)="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", 0x1000}, {&(0x7f0000005040)="30e2eb3012be7f34c6d1578abc95aa22546fb22fb4d93d4954b371", 0x1b}, {&(0x7f0000005080)="1a1d5653d435230e6e70c68de771a76839269a665cb464041c1763c51a1399d5f266f70b7e8e0f88033857e4b1a2feec938d3b3b85ca5ba83bb24fe5cb53882800ef150d4659c8", 0x47}, {&(0x7f0000005100)="0c82244d2786849bb862c847fc288abad8a59373a6912b5cfb847486fdf48f59fbcf28ad0e0ccc320c3431a0f66c5cbeb3cd406fe4cf25063ac4f85ef362f76353b12e55e6a6caacf733c371776f67f51722f6e6f9c0d70daa3385", 0x5b}], 0x7}}], 0x6, 0x844) 1.380491465s ago: executing program 1 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8044) sendto$inet6(r3, &(0x7f00000000c0)="02f8a1", 0x3, 0x51, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @local, 0x9}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="92ea5497add1c9fed49d1dcd35fbb5fa10", 0x11) 175.720561ms ago: executing program 1 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20802c, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x20802c, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) open(&(0x7f0000000000)='./file1\x00', 0x400, 0x128) (async) r2 = open(&(0x7f0000000000)='./file1\x00', 0x400, 0x128) mknodat$loop(r2, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) 0s ago: executing program 3 (id=825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x82100, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = memfd_secret(0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000600)={0x0, &(0x7f0000000540)=""/129}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xe, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004191}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x275c8b4c32089c19}, {0x2, 0xa}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c060}, 0x4008880) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x10, 0x20, 0x1, 0x1d3, {{0x13, 0x4, 0x2, 0x24, 0x4c, 0x64, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@rr={0x7, 0x13, 0x20, [@remote, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x34}]}, @cipso={0x86, 0x13, 0x0, [{0x5, 0x6, "ac1599ff"}, {0x0, 0x7, "631b0586dc"}]}, @generic={0x83, 0xf, "11673c787e67e2e81bc4be48a0"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYRES16, @ANYRES32, @ANYBLOB="080001004ce1a2e208bc82480c7c633aa43e01c7f5c7a92409d5be0ed9fbc450a0bd57", @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="140002006c6f00000000000000000000000000001400020067726530000000000000000000000000140002006772657461703000000068ca9bbbc5e13e9549d7160000000000001400020065727370616e300000", @ANYRES32=r4, @ANYBLOB="c854266e", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES64=r4, @ANYBLOB="0d32d665ee38472e3f", @ANYRES32=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x8880}, 0x24044041) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, r2, 0x6a98047402e98331, 0x1000080, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20008800) kernel console output (not intermixed with test programs): d write } for pid=6382 comm="syz.4.114" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 107.205052][ T6390] tipc: Started in network mode [ 107.223020][ T6390] tipc: Node identity 0eab0e045ff6, cluster identity 4711 [ 107.305875][ T6390] tipc: Enabled bearer , priority 0 [ 107.381151][ T6390] mmap: syz.1.117 (6390) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.860219][ T6407] loop8: detected capacity change from 0 to 16384 [ 108.249613][ T6389] tipc: Disabling bearer [ 108.286715][ T6408] loop8: detected capacity change from 16384 to 0 [ 108.311107][ C1] blk_print_req_error: 10 callbacks suppressed [ 108.311125][ C1] I/O error, dev loop8, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 1 [ 108.450078][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 108.450090][ T30] audit: type=1400 audit(1756290064.633:296): avc: denied { mount } for pid=6405 comm="syz.2.121" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 108.622097][ T30] audit: type=1400 audit(1756290064.813:297): avc: denied { mount } for pid=6412 comm="syz.4.123" name="/" dev="rpc_pipefs" ino=9693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 108.666401][ T30] audit: type=1400 audit(1756290064.813:298): avc: denied { unmount } for pid=6412 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 108.686405][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.693908][ T30] audit: type=1400 audit(1756290064.813:299): avc: denied { mounton } for pid=6412 comm="syz.4.123" path="/22/file0" dev="rpc_pipefs" ino=9693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 108.773945][ T30] audit: type=1326 audit(1756290064.813:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9d7b8ebe9 code=0x0 [ 108.805953][ T30] audit: type=1400 audit(1756290064.813:301): avc: denied { create } for pid=6415 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.914700][ T977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.329501][ T30] audit: type=1400 audit(1756290065.513:302): avc: denied { ioctl } for pid=6415 comm="syz.1.122" path="socket:[9711]" dev="sockfs" ino=9711 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.353794][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.451693][ T6425] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 109.460829][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 109.557441][ T977] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 109.568450][ T977] usb 4-1: config 0 has no interface number 0 [ 109.583976][ T977] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 109.606748][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.622129][ T30] audit: type=1400 audit(1756290065.803:303): avc: denied { read } for pid=6432 comm="syz.0.128" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 109.669559][ T977] usb 4-1: Product: syz [ 109.673764][ T977] usb 4-1: Manufacturer: syz [ 109.693966][ T977] usb 4-1: SerialNumber: syz [ 109.709864][ T30] audit: type=1400 audit(1756290065.803:304): avc: denied { open } for pid=6432 comm="syz.0.128" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 109.753258][ T977] usb 4-1: config 0 descriptor?? [ 109.768232][ T977] redrat3 4-1:0.83: Couldn't find all endpoints [ 109.797366][ T30] audit: type=1400 audit(1756290065.813:305): avc: denied { ioctl } for pid=6432 comm="syz.0.128" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.521825][ T5927] usb 4-1: USB disconnect, device number 5 [ 110.993503][ T6460] syz.1.137 uses obsolete (PF_INET,SOCK_PACKET) [ 111.034572][ T6463] loop2: detected capacity change from 0 to 6 [ 111.053972][ T6463] Dev loop2: unable to read RDB block 6 [ 111.092451][ T6463] loop2: AHDI p1 [ 111.117242][ T6463] loop2: partition table partially beyond EOD, truncated [ 111.961799][ T6474] process 'syz.3.140' launched './file0' with NULL argv: empty string added [ 114.391316][ T6459] delete_channel: no stack [ 114.737565][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 114.744282][ T30] audit: type=1400 audit(1756290070.883:321): avc: denied { read } for pid=6486 comm="syz.4.145" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.820264][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.916900][ T30] audit: type=1400 audit(1756290070.903:322): avc: denied { open } for pid=6486 comm="syz.4.145" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.941460][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.157874][ T30] audit: type=1400 audit(1756290071.343:323): avc: denied { write } for pid=6486 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 115.326351][ T30] audit: type=1400 audit(1756290071.423:324): avc: denied { bind } for pid=6489 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.391674][ T6492] loop2: detected capacity change from 0 to 7 [ 115.410999][ T30] audit: type=1400 audit(1756290071.423:325): avc: denied { read write } for pid=6489 comm="syz.1.146" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.440455][ T6492] Dev loop2: unable to read RDB block 7 [ 115.452283][ T6492] loop2: unable to read partition table [ 115.464394][ T30] audit: type=1400 audit(1756290071.423:326): avc: denied { open } for pid=6489 comm="syz.1.146" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.486445][ T6492] loop2: partition table beyond EOD, truncated [ 115.490866][ T30] audit: type=1400 audit(1756290071.653:327): avc: denied { setopt } for pid=6484 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.523430][ T5927] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 115.533592][ T6492] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 115.617666][ T5219] Dev loop2: unable to read RDB block 7 [ 115.623300][ T5219] loop2: unable to read partition table [ 115.644026][ T5219] loop2: partition table beyond EOD, truncated [ 115.682896][ T30] audit: type=1400 audit(1756290071.873:328): avc: denied { ioctl } for pid=6499 comm="syz.2.150" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.718905][ T30] audit: type=1400 audit(1756290071.873:329): avc: denied { set_context_mgr } for pid=6499 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 115.738565][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.755918][ T6500] binder_alloc: binder_alloc_mmap_handler: 6499 200000ffd000-200001000000 already mapped failed -16 [ 115.759891][ T6502] binder: BINDER_SET_CONTEXT_MGR already set [ 115.776594][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.788312][ T30] audit: type=1400 audit(1756290071.943:330): avc: denied { map } for pid=6499 comm="syz.2.150" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.795656][ T5927] usb 2-1: not running at top speed; connect to a high speed hub [ 115.835076][ T6502] binder: 6499:6502 ioctl 4018620d 200000004a80 returned -16 [ 115.873279][ T5927] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 115.883967][ T5927] usb 2-1: config 0 has no interface number 0 [ 115.900483][ T5927] usb 2-1: config 0 interface 102 has no altsetting 0 [ 115.959988][ T5927] usb 2-1: New USB device found, idVendor=0908, idProduct=01ff, bcdDevice=c0.c8 [ 115.975917][ T6511] 9pnet_fd: Insufficient options for proto=fd [ 115.983136][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.036858][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 116.049364][ T6511] netlink: 256 bytes leftover after parsing attributes in process `syz.3.154'. [ 116.058647][ T5927] usb 2-1: Product: syz [ 116.062903][ T5927] usb 2-1: Manufacturer: syz [ 116.068858][ T6511] netlink: 48 bytes leftover after parsing attributes in process `syz.3.154'. [ 116.078496][ T5927] usb 2-1: SerialNumber: syz [ 116.095784][ T5927] usb 2-1: config 0 descriptor?? [ 116.773632][ T5927] hub 2-1:0.102: bad descriptor, ignoring hub [ 116.806949][ T5927] hub 2-1:0.102: probe with driver hub failed with error -5 [ 116.814816][ T5927] cp210x 2-1:0.102: cp210x converter detected [ 116.828571][ T5927] cp210x 2-1:0.102: failed to get vendor val 0x370b size 1: -71 [ 116.841561][ T6522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 116.853029][ T5927] cp210x 2-1:0.102: querying part number failed [ 117.013105][ T5927] usb 2-1: cp210x converter now attached to ttyUSB0 [ 117.599100][ T5927] usb 2-1: USB disconnect, device number 4 [ 117.640433][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 117.672104][ T5927] cp210x 2-1:0.102: device disconnected [ 117.964829][ T6547] FAULT_INJECTION: forcing a failure. [ 117.964829][ T6547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.001408][ T6547] CPU: 0 UID: 0 PID: 6547 Comm: syz.0.162 Not tainted syzkaller #0 PREEMPT(full) [ 118.001433][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 118.001443][ T6547] Call Trace: [ 118.001449][ T6547] [ 118.001456][ T6547] dump_stack_lvl+0x16c/0x1f0 [ 118.001481][ T6547] should_fail_ex+0x512/0x640 [ 118.001504][ T6547] _copy_from_user+0x2e/0xd0 [ 118.001529][ T6547] copy_msghdr_from_user+0x98/0x160 [ 118.001548][ T6547] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 118.001580][ T6547] ___sys_sendmsg+0xfe/0x1d0 [ 118.001600][ T6547] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.001650][ T6547] __sys_sendmsg+0x16d/0x220 [ 118.001674][ T6547] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.001710][ T6547] do_syscall_64+0xcd/0x4c0 [ 118.001731][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.001748][ T6547] RIP: 0033:0x7f6e34d8ebe9 [ 118.001762][ T6547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.001778][ T6547] RSP: 002b:00007f6e35b88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.001795][ T6547] RAX: ffffffffffffffda RBX: 00007f6e34fb6090 RCX: 00007f6e34d8ebe9 [ 118.001806][ T6547] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 118.001817][ T6547] RBP: 00007f6e35b88090 R08: 0000000000000000 R09: 0000000000000000 [ 118.001826][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.001836][ T6547] R13: 00007f6e34fb6128 R14: 00007f6e34fb6090 R15: 00007ffd4cee3908 [ 118.001860][ T6547] [ 118.229108][ T6534] rtc_cmos 00:00: Alarms can be up to one day in the future [ 118.248053][ T6552] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 118.255852][ T6552] netlink: 224 bytes leftover after parsing attributes in process `syz.3.163'. [ 118.749253][ T5977] rtc_cmos 00:00: Alarms can be up to one day in the future [ 118.765837][ T5927] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.153651][ T5977] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.161634][ T5977] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.169178][ T5977] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.176538][ T5977] rtc rtc0: __rtc_set_alarm: err=-22 [ 119.395188][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.476136][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 119.488113][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.527405][ T5927] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 119.579696][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.643959][ T6575] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 119.654525][ T5927] usb 3-1: Product: syz [ 119.675451][ T5927] usb 3-1: Manufacturer: syz [ 120.025786][ T6575] netlink: 224 bytes leftover after parsing attributes in process `syz.4.169'. [ 120.059851][ T5927] usb 3-1: SerialNumber: syz [ 120.086112][ T5927] usb 3-1: config 0 descriptor?? [ 120.095329][ T5927] usb 3-1: ucan: probing device on interface #0 [ 120.103842][ T5927] usb 3-1: ucan: invalid EP count (1) [ 120.133522][ T5927] usb 3-1: ucan: probe failed; try to update the device firmware [ 120.675881][ T6583] tipc: Enabled bearer , priority 0 [ 120.710672][ T6583] syzkaller0: entered promiscuous mode [ 120.718841][ T6583] syzkaller0: entered allmulticast mode [ 120.808333][ T6588] tipc: Started in network mode [ 120.813389][ T6588] tipc: Node identity d28db239ce58, cluster identity 4711 [ 120.821159][ T6588] tipc: Enabled bearer , priority 0 [ 120.835039][ T6583] tipc: Resetting bearer [ 120.844081][ T6582] tipc: Resetting bearer [ 120.870232][ T6582] tipc: Disabling bearer [ 120.886867][ T6588] syzkaller0: entered promiscuous mode [ 120.892351][ T6588] syzkaller0: entered allmulticast mode [ 120.932097][ T6588] FAULT_INJECTION: forcing a failure. [ 120.932097][ T6588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.945503][ T6588] CPU: 0 UID: 0 PID: 6588 Comm: syz.0.176 Not tainted syzkaller #0 PREEMPT(full) [ 120.945522][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 120.945528][ T6588] Call Trace: [ 120.945532][ T6588] [ 120.945537][ T6588] dump_stack_lvl+0x16c/0x1f0 [ 120.945554][ T6588] should_fail_ex+0x512/0x640 [ 120.945575][ T6588] _copy_from_user+0x2e/0xd0 [ 120.945598][ T6588] get_user_ifreq+0xf1/0x250 [ 120.945620][ T6588] sock_do_ioctl+0x16b/0x280 [ 120.945642][ T6588] ? __pfx_sock_do_ioctl+0x10/0x10 [ 120.945668][ T6588] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 120.945688][ T6588] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 120.945708][ T6588] sock_ioctl+0x227/0x6b0 [ 120.945724][ T6588] ? __pfx_sock_ioctl+0x10/0x10 [ 120.945738][ T6588] ? hook_file_ioctl_common+0x145/0x410 [ 120.945754][ T6588] ? selinux_file_ioctl+0x180/0x270 [ 120.945769][ T6588] ? selinux_file_ioctl+0xb4/0x270 [ 120.945785][ T6588] ? __pfx_sock_ioctl+0x10/0x10 [ 120.945801][ T6588] __x64_sys_ioctl+0x18b/0x210 [ 120.945818][ T6588] do_syscall_64+0xcd/0x4c0 [ 120.945838][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.945849][ T6588] RIP: 0033:0x7f6e34d8ebe9 [ 120.945859][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.945870][ T6588] RSP: 002b:00007f6e35ba9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.945880][ T6588] RAX: ffffffffffffffda RBX: 00007f6e34fb5fa0 RCX: 00007f6e34d8ebe9 [ 120.945887][ T6588] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 120.945894][ T6588] RBP: 00007f6e35ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 120.945900][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.945906][ T6588] R13: 00007f6e34fb6038 R14: 00007f6e34fb5fa0 R15: 00007ffd4cee3908 [ 120.945919][ T6588] [ 121.131013][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.198915][ T6587] tipc: Resetting bearer [ 121.327209][ T6587] tipc: Disabling bearer [ 121.496067][ T6584] delete_channel: no stack [ 121.546246][ T5927] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.218194][ T5927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.231337][ T5927] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 122.247373][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 122.247388][ T30] audit: type=1400 audit(1756290078.443:334): avc: denied { name_bind } for pid=6599 comm="syz.3.181" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.344405][ T5927] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.362791][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.365048][ T6608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.180'. [ 122.381663][ T5927] usb 2-1: Product: syz [ 122.387996][ T30] audit: type=1400 audit(1756290078.553:335): avc: denied { create } for pid=6604 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 122.456058][ T5927] usb 2-1: Manufacturer: syz [ 122.467525][ T5927] usb 2-1: SerialNumber: syz [ 122.495144][ T5927] cdc_mbim 2-1:1.0: skipping garbage [ 122.767371][ T6594] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 123.129542][ T9] usb 3-1: USB disconnect, device number 4 [ 123.242984][ T6618] syz.3.185 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.551663][ T6622] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 123.551995][ T5927] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 123.552016][ T5927] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 124.920046][ T30] audit: type=1400 audit(1756290080.143:336): avc: denied { getopt } for pid=6593 comm="syz.1.178" lport=51620 faddr=2001::1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 125.206406][ T5927] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 125.222407][ T5927] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 125.234883][ T5927] wwan wwan0: port wwan0mbim0 attached [ 125.336384][ T5927] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, be:3f:be:72:71:79 [ 125.389171][ T30] audit: type=1326 audit(1756290081.573:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c558ebe9 code=0x7fc00000 [ 125.412407][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.417703][ T5927] usb 2-1: USB disconnect, device number 5 [ 125.487932][ T5927] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 126.152239][ T5927] wwan wwan0: port wwan0mbim0 disconnected [ 127.464784][ T6630] delete_channel: no stack [ 128.242135][ T6679] netlink: 'syz.0.197': attribute type 4 has an invalid length. [ 128.300445][ T30] audit: type=1400 audit(1756290084.373:338): avc: denied { append } for pid=6669 comm="syz.0.197" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.887184][ T6685] IPVS: stopping backup sync thread 6695 ... [ 129.639120][ T30] audit: type=1400 audit(1756290085.833:339): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 130.247098][ T30] audit: type=1326 audit(1756290086.213:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d7b8ebe9 code=0x7ffc0000 [ 130.439519][ T975] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.555733][ T30] audit: type=1326 audit(1756290086.213:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fd9d7b8ebe9 code=0x7ffc0000 [ 130.584519][ T30] audit: type=1326 audit(1756290086.213:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d7b8ebe9 code=0x7ffc0000 [ 130.684389][ T30] audit: type=1326 audit(1756290086.213:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd9d7b8ebe9 code=0x7ffc0000 [ 130.716005][ T5977] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.734105][ T30] audit: type=1326 audit(1756290086.213:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d7b8ebe9 code=0x7ffc0000 [ 130.790309][ T30] audit: type=1326 audit(1756290086.213:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd9d7b8ebe9 code=0x7ffc0000 [ 130.813527][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.821251][ T975] usb 5-1: Using ep0 maxpacket: 32 [ 130.855664][ T975] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 130.863896][ T975] usb 5-1: config 0 has no interface number 0 [ 130.875891][ T975] usb 5-1: config 0 interface 155 has no altsetting 0 [ 130.883024][ T30] audit: type=1326 audit(1756290086.213:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d7b8ebe9 code=0x7ffc0000 [ 130.910236][ T5977] usb 4-1: Using ep0 maxpacket: 8 [ 130.922130][ T975] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=5c.4c [ 130.931493][ T5977] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 130.939927][ T5977] usb 4-1: config 0 has no interface number 0 [ 130.947797][ T30] audit: type=1326 audit(1756290086.213:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6708 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd9d7b8ebe9 code=0x7ffc0000 [ 130.972323][ T975] usb 5-1: New USB device strings: Mfr=189, Product=173, SerialNumber=88 [ 130.981870][ T975] usb 5-1: Product: syz [ 130.987241][ T5977] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 130.996601][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.012768][ T975] usb 5-1: Manufacturer: syz [ 131.038184][ T975] usb 5-1: SerialNumber: syz [ 131.045861][ T5977] usb 4-1: Product: syz [ 131.056329][ T5977] usb 4-1: Manufacturer: syz [ 131.061801][ T975] usb 5-1: config 0 descriptor?? [ 131.071126][ T5977] usb 4-1: SerialNumber: syz [ 131.092281][ T5977] usb 4-1: config 0 descriptor?? [ 131.292174][ T975] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.155/input/input9 [ 131.314725][ T5204] bcm5974 5-1:0.155: could not read from device [ 131.721478][ T5977] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 131.764588][ T975] usb 5-1: USB disconnect, device number 3 [ 131.898972][ T5977] peak_usb 4-1:0.56 can0: sending command failure: -8 [ 131.935749][ T5977] peak_usb 4-1:0.56 can0: sending command failure: -8 [ 132.011829][ T5977] peak_usb 4-1:0.56 can0: sending command failure: -8 [ 132.015898][ T6739] syzkaller1: entered promiscuous mode [ 132.045678][ T6739] syzkaller1: entered allmulticast mode [ 132.769906][ T5977] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -8 [ 132.800922][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.835675][ T975] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.047036][ T6745] ptrace attach of "./syz-executor exec"[5860] was attempted by "./syz-executor exec"[6745] [ 133.378170][ T975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.395189][ T975] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.604315][ T975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.617136][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.625278][ T975] usb 5-1: Product: syz [ 133.629566][ T975] usb 5-1: Manufacturer: syz [ 133.634161][ T975] usb 5-1: SerialNumber: syz [ 133.748977][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 133.748991][ T30] audit: type=1400 audit(1756290089.943:381): avc: denied { read } for pid=6747 comm="syz.1.216" path="socket:[12357]" dev="sockfs" ino=12357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.881492][ T30] audit: type=1400 audit(1756290090.063:382): avc: denied { read } for pid=6748 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.166479][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.190884][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.228252][ T975] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 134.302347][ T975] usb 5-1: USB disconnect, device number 4 [ 134.669318][ T975] usb 4-1: USB disconnect, device number 6 [ 134.775743][ T977] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 134.797911][ T30] audit: type=1400 audit(1756290090.993:383): avc: denied { read write } for pid=6756 comm="syz.2.219" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.837151][ T6759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.220'. [ 134.871667][ T30] audit: type=1400 audit(1756290090.993:384): avc: denied { open } for pid=6756 comm="syz.2.219" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.964666][ T6763] netlink: 'syz.2.219': attribute type 21 has an invalid length. [ 134.993244][ T6763] netlink: 128 bytes leftover after parsing attributes in process `syz.2.219'. [ 135.005786][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 135.030833][ T977] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 135.039322][ T6763] netlink: 'syz.2.219': attribute type 4 has an invalid length. [ 135.047094][ T6763] netlink: 3 bytes leftover after parsing attributes in process `syz.2.219'. [ 135.058427][ T977] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 135.086340][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.101699][ T6771] IPVS: stopping backup sync thread 6772 ... [ 135.107953][ T6772] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 135.120654][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.131201][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.141707][ T6771] FAULT_INJECTION: forcing a failure. [ 135.141707][ T6771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.155052][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.166969][ T6771] CPU: 1 UID: 0 PID: 6771 Comm: syz.3.223 Not tainted syzkaller #0 PREEMPT(full) [ 135.166991][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.167001][ T6771] Call Trace: [ 135.167007][ T6771] [ 135.167013][ T6771] dump_stack_lvl+0x16c/0x1f0 [ 135.167039][ T6771] should_fail_ex+0x512/0x640 [ 135.167063][ T6771] _copy_from_user+0x2e/0xd0 [ 135.167086][ T6771] copy_from_sockptr_offset.constprop.0+0x121/0x140 [ 135.167112][ T6771] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 135.167139][ T6771] ? tcp_setsockopt+0xae/0x100 [ 135.167159][ T6771] smc_setsockopt+0x299/0xa00 [ 135.167180][ T6771] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 135.167204][ T6771] ? __pfx_smc_setsockopt+0x10/0x10 [ 135.167230][ T6771] ? selinux_socket_setsockopt+0x6a/0x80 [ 135.167251][ T6771] ? __pfx_smc_setsockopt+0x10/0x10 [ 135.167272][ T6771] do_sock_setsockopt+0xf3/0x1d0 [ 135.167297][ T6771] __sys_setsockopt+0x1a0/0x230 [ 135.167317][ T6771] __x64_sys_setsockopt+0xbd/0x160 [ 135.167332][ T6771] ? do_syscall_64+0x91/0x4c0 [ 135.167349][ T6771] ? lockdep_hardirqs_on+0x7c/0x110 [ 135.167367][ T6771] do_syscall_64+0xcd/0x4c0 [ 135.167388][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.167406][ T6771] RIP: 0033:0x7f33b298ebe9 [ 135.167420][ T6771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.167436][ T6771] RSP: 002b:00007f33b38b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.167452][ T6771] RAX: ffffffffffffffda RBX: 00007f33b2bb5fa0 RCX: 00007f33b298ebe9 [ 135.167463][ T6771] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000004 [ 135.167472][ T6771] RBP: 00007f33b38b0090 R08: 0000000000000018 R09: 0000000000000000 [ 135.167481][ T6771] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 135.167489][ T6771] R13: 00007f33b2bb6038 R14: 00007f33b2bb5fa0 R15: 00007ffd7a389e68 [ 135.167510][ T6771] [ 135.169121][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8447, setting to 1024 [ 135.286193][ T975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.447017][ T977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.497877][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.576154][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 135.582991][ T975] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 135.590110][ T977] usb 5-1: can't set config #16, error -71 [ 135.591778][ T975] usb 1-1: config 0 has no interface number 0 [ 135.610193][ T975] usb 1-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=38.9d [ 135.619877][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.667295][ T975] usb 1-1: Product: syz [ 135.673336][ T977] usb 5-1: USB disconnect, device number 5 [ 135.678590][ T975] usb 1-1: Manufacturer: syz [ 135.690492][ T975] usb 1-1: SerialNumber: syz [ 135.709283][ T975] usb 1-1: config 0 descriptor?? [ 135.728132][ T975] keyspan 1-1:0.247: Keyspan - (without firmware) converter detected [ 136.208883][ T30] audit: type=1400 audit(1756290092.403:385): avc: denied { search } for pid=5514 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.259723][ T30] audit: type=1400 audit(1756290092.403:386): avc: denied { search } for pid=5514 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.299693][ T30] audit: type=1400 audit(1756290092.403:387): avc: denied { search } for pid=5514 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.382597][ T10] usb 1-1: USB disconnect, device number 3 [ 136.403866][ T30] audit: type=1400 audit(1756290092.403:388): avc: denied { read } for pid=5514 comm="dhcpcd" name="n106" dev="tmpfs" ino=2854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.426471][ T10] keyspan 1-1:0.247: device disconnected [ 136.453615][ T30] audit: type=1400 audit(1756290092.403:389): avc: denied { open } for pid=5514 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=2854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.530440][ T30] audit: type=1400 audit(1756290092.403:390): avc: denied { getattr } for pid=5514 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=2854 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.569876][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.583564][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.591421][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.638546][ T6806] net_ratelimit: 5 callbacks suppressed [ 136.638557][ T6806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.682117][ T6807] block nbd4: Attempted send on invalid socket [ 136.688507][ T6807] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 136.699454][ T6807] block nbd4: Attempted send on invalid socket [ 136.705804][ T6807] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 136.715240][ T6807] Mount JFS Failure: -5 [ 137.574559][ T6818] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 137.584824][ T6818] exFAT-fs (loop0): unable to read boot sector [ 137.591265][ T6818] exFAT-fs (loop0): failed to read boot sector [ 137.598012][ T6818] exFAT-fs (loop0): failed to recognize exfat type [ 139.114075][ T6833] batman_adv: batadv0: Adding interface: dummy0 [ 139.128299][ T6833] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.281050][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 139.281066][ T30] audit: type=1400 audit(1756290095.473:399): avc: denied { add_name } for pid=6794 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.309639][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.369845][ T30] audit: type=1400 audit(1756290095.473:400): avc: denied { create } for pid=6794 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.392211][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.427630][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 139.461829][ T6833] batman_adv: batadv0: Interface activated: dummy0 [ 139.735631][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 139.755589][ T6850] vlan2: entered allmulticast mode [ 139.768523][ T30] audit: type=1400 audit(1756290095.473:401): avc: denied { write } for pid=6794 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.bnep0.link" dev="tmpfs" ino=2895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.794587][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.865729][ T30] audit: type=1400 audit(1756290095.473:402): avc: denied { append } for pid=6794 comm="dhcpcd-run-hook" name="resolv.conf.bnep0.link" dev="tmpfs" ino=2895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.889899][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.898898][ T30] audit: type=1400 audit(1756290095.753:403): avc: denied { remove_name } for pid=6845 comm="rm" name="resolv.conf.bnep0.link" dev="tmpfs" ino=2895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.922263][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.929083][ T5853] Bluetooth: hci4: link tx timeout [ 139.934388][ T5853] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.944955][ T30] audit: type=1400 audit(1756290095.753:404): avc: denied { unlink } for pid=6845 comm="rm" name="resolv.conf.bnep0.link" dev="tmpfs" ino=2895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.008701][ T6852] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 140.531337][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 140.581731][ T5170] Bluetooth: hci4: link tx timeout [ 140.587046][ T5170] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.611625][ T5170] Bluetooth: hci4: link tx timeout [ 140.620623][ T5170] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.735279][ T5170] Bluetooth: hci4: link tx timeout [ 140.747349][ T5170] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.259621][ T5934] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.267182][ T5170] Bluetooth: hci4: link tx timeout [ 141.272283][ T5170] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.412746][ T30] audit: type=1400 audit(1756290097.603:405): avc: denied { setattr } for pid=6872 comm="syz.2.246" name="NETLINK" dev="sockfs" ino=11605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.469467][ T5934] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 141.501591][ T5934] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 141.591618][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.661687][ T5934] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 141.761490][ T5170] Bluetooth: hci4: link tx timeout [ 141.766772][ T5170] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.996445][ T5170] Bluetooth: hci4: command 0x0406 tx timeout [ 142.482719][ T5170] Bluetooth: hci4: link tx timeout [ 142.556860][ T30] audit: type=1400 audit(1756290098.693:406): avc: denied { accept } for pid=6863 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.585658][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 143.087547][ T30] audit: type=1400 audit(1756290099.183:407): avc: denied { ioctl } for pid=6903 comm="syz.1.251" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.723312][ T5934] usb 1-1: USB disconnect, device number 4 [ 145.092604][ T6933] fuse: Bad value for 'fd' [ 145.161235][ T9] Process accounting resumed [ 145.651612][ T30] audit: type=1400 audit(1756290101.743:408): avc: denied { name_bind } for pid=6943 comm="syz.0.261" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 145.701316][ T6953] warning: `syz.1.265' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.492562][ T6933] Process accounting resumed [ 147.306727][ T30] audit: type=1400 audit(1756290103.233:409): avc: denied { firmware_load } for pid=6968 comm="syz.3.269" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 147.369929][ T30] audit: type=1400 audit(1756290103.533:410): avc: denied { setopt } for pid=6971 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.401449][ T6972] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 148.139683][ T6973] syz.3.269 (6973) used greatest stack depth: 18952 bytes left [ 148.793923][ T6994] overlayfs: missing 'lowerdir' [ 150.352113][ T7019] syzkaller1: entered promiscuous mode [ 150.362433][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 150.390856][ T7019] syzkaller1: entered allmulticast mode [ 150.473445][ T7019] syzkaller1: left promiscuous mode [ 150.479722][ T7019] syzkaller1: left allmulticast mode [ 150.561935][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 150.574607][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 151.158497][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 151.168408][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 151.180751][ T7021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 151.481880][ T30] audit: type=1400 audit(1756290107.673:411): avc: denied { read write } for pid=7036 comm="syz.1.285" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 151.854372][ T30] audit: type=1400 audit(1756290107.703:412): avc: denied { open } for pid=7036 comm="syz.1.285" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 151.999194][ T7045] netlink: 68 bytes leftover after parsing attributes in process `syz.4.288'. [ 152.022673][ T30] audit: type=1400 audit(1756290107.763:413): avc: denied { getopt } for pid=7034 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.512400][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 152.804443][ T30] audit: type=1400 audit(1756290108.983:414): avc: denied { read write } for pid=7034 comm="syz.2.284" name="mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.043237][ T30] audit: type=1400 audit(1756290108.983:415): avc: denied { open } for pid=7034 comm="syz.2.284" path="/dev/input/mouse0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.069494][ T30] audit: type=1400 audit(1756290109.113:416): avc: denied { write } for pid=7049 comm="syz.0.289" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 153.103213][ T30] audit: type=1400 audit(1756290109.113:417): avc: denied { create } for pid=7049 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.193110][ T30] audit: type=1400 audit(1756290109.123:418): avc: denied { bind } for pid=7049 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.315535][ T30] audit: type=1400 audit(1756290109.123:419): avc: denied { connect } for pid=7049 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.804983][ T30] audit: type=1400 audit(1756290109.993:420): avc: denied { setopt } for pid=7068 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.806116][ T7069] netlink: 'syz.4.295': attribute type 10 has an invalid length. [ 154.135141][ T7078] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 154.135141][ T7078] program syz.3.297 not setting count and/or reply_len properly [ 154.549042][ T7069] team0: Port device dummy0 added [ 155.620571][ T7087] input: syz0 as /devices/virtual/input/input11 [ 155.652436][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 155.679046][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 156.301705][ T5934] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 156.769434][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 156.769463][ T30] audit: type=1326 audit(1756290112.963:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.4.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9d7b8e7eb code=0x7ffc0000 [ 156.798756][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.010958][ T5934] usb 5-1: device descriptor read/all, error -71 [ 157.257278][ T30] audit: type=1400 audit(1756290113.413:440): avc: denied { create } for pid=7108 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 157.528655][ T30] audit: type=1400 audit(1756290113.553:441): avc: denied { read } for pid=7109 comm="syz.1.303" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.582198][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.597651][ T30] audit: type=1400 audit(1756290113.563:442): avc: denied { open } for pid=7109 comm="syz.1.303" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 157.713449][ T7121] kvm: kvm [7118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10000d000 [ 157.735844][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 157.744967][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 157.757487][ T10] usb 3-1: config 0 has no interface number 0 [ 157.771456][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.778961][ T7121] kvm: kvm [7118]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 157.788928][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 157.805432][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 157.847133][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.855163][ T10] usb 3-1: Product: syz [ 157.864842][ T10] usb 3-1: Manufacturer: syz [ 157.871618][ T10] usb 3-1: SerialNumber: syz [ 157.878664][ T7121] kvm: kvm [7118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4080 [ 157.905078][ T10] usb 3-1: config 0 descriptor?? [ 157.913884][ T7121] kvm: kvm [7118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4080 [ 157.932176][ T7121] kvm: kvm [7118]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 157.945283][ T7121] kvm: kvm [7118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xd80 [ 157.991497][ T7121] kvm: kvm [7118]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc000 [ 158.728215][ T7153] netlink: 'syz.3.311': attribute type 16 has an invalid length. [ 158.738273][ T7153] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.311'. [ 158.758152][ T7153] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 158.788304][ T10] appletouch 3-1:0.85: Geyser mode initialized. [ 158.796673][ T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input12 [ 159.561527][ T7120] Bluetooth: MGMT ver 1.23 [ 159.592552][ T5934] usb 3-1: USB disconnect, device number 5 [ 159.706663][ T5934] appletouch 3-1:0.85: input: appletouch disconnected [ 159.811506][ T30] audit: type=1400 audit(1756290116.003:443): avc: denied { mount } for pid=7168 comm="+}[@" name="/" dev="ramfs" ino=13245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 159.893261][ T30] audit: type=1400 audit(1756290116.013:444): avc: denied { getopt } for pid=7168 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.952543][ T30] audit: type=1326 audit(1756290116.143:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="+}[@" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9d7b8ebe9 code=0x0 [ 160.065632][ T30] audit: type=1400 audit(1756290116.143:446): avc: denied { setopt } for pid=7174 comm="syz.3.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.383285][ T7195] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 160.383285][ T7195] program syz.3.320 not setting count and/or reply_len properly [ 161.947020][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 163.255612][ T30] audit: type=1400 audit(1756290119.433:447): avc: denied { map } for pid=7217 comm="syz.3.326" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.322602][ T30] audit: type=1400 audit(1756290119.433:448): avc: denied { execute } for pid=7217 comm="syz.3.326" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.360177][ T30] audit: type=1400 audit(1756290119.553:449): avc: denied { shutdown } for pid=7221 comm="syz.2.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.390711][ T7222] netlink: 'syz.2.327': attribute type 9 has an invalid length. [ 163.398503][ T7222] netlink: 'syz.2.327': attribute type 9 has an invalid length. [ 163.512594][ T7225] syzkaller1: entered promiscuous mode [ 163.548880][ T7225] syzkaller1: entered allmulticast mode [ 164.364517][ T7234] IPVS: stopping backup sync thread 7239 ... [ 164.412583][ T30] audit: type=1400 audit(1756290120.603:450): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 164.507411][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 164.618400][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 164.940154][ T30] audit: type=1400 audit(1756290121.133:451): avc: denied { bind } for pid=7244 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.023880][ T7255] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 165.023880][ T7255] program syz.4.335 not setting count and/or reply_len properly [ 165.418734][ T30] audit: type=1400 audit(1756290121.133:452): avc: denied { connect } for pid=7244 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.192504][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 166.364135][ T30] audit: type=1400 audit(1756290122.553:453): avc: denied { create } for pid=7278 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.419512][ T7273] kvm: kvm [7272]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10000d000 [ 166.442088][ T7273] kvm: kvm [7272]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 166.454332][ T7273] kvm: kvm [7272]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4080 [ 166.501880][ T7273] kvm: kvm [7272]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4080 [ 166.545016][ T7273] kvm: kvm [7272]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 166.625111][ T7273] kvm: kvm [7272]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xd80 [ 166.764489][ T7273] kvm: kvm [7272]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc000 [ 167.168378][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 167.345697][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 167.457280][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 167.495242][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 167.511497][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 167.523932][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 167.535997][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.564987][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 167.588735][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.615625][ T9] usb 5-1: Product: syz [ 167.626518][ T9] usb 5-1: Manufacturer: syz [ 167.651403][ T9] usb 5-1: SerialNumber: syz [ 167.666549][ T9] usb 5-1: config 0 descriptor?? [ 167.930865][ T9] appledisplay 5-1:0.0: Error while getting initial brightness: -90 [ 167.950751][ T9] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -90 [ 168.095777][ T49] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 168.272602][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.331219][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.439174][ T49] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 168.586848][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.810384][ T49] usb 1-1: config 0 descriptor?? [ 168.895665][ T9] usb 5-1: USB disconnect, device number 8 [ 169.072795][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.356'. [ 169.096945][ T7321] netlink: 'syz.2.356': attribute type 4 has an invalid length. [ 169.268867][ T7324] bridge_slave_0: left allmulticast mode [ 169.274662][ T7324] bridge_slave_0: left promiscuous mode [ 169.281780][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.546359][ T7324] bridge_slave_1: left allmulticast mode [ 170.552197][ T7324] bridge_slave_1: left promiscuous mode [ 170.558213][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.598961][ T49] razer 0003:1532:010E.0002: unknown main item tag 0x0 [ 170.652107][ T49] razer 0003:1532:010E.0002: unknown main item tag 0x0 [ 170.695981][ T49] razer 0003:1532:010E.0002: unknown main item tag 0x0 [ 170.733093][ T7324] bond0: (slave bond_slave_0): Releasing backup interface [ 170.745326][ T49] razer 0003:1532:010E.0002: unknown main item tag 0x0 [ 170.767055][ T49] razer 0003:1532:010E.0002: unknown main item tag 0x0 [ 170.781431][ T7324] bond0: (slave bond_slave_1): Releasing backup interface [ 170.840821][ T7324] team0: Port device team_slave_0 removed [ 170.847162][ T49] razer 0003:1532:010E.0002: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 170.883900][ T7324] team0: Port device team_slave_1 removed [ 170.963137][ T7324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.000035][ T7324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.015653][ T30] audit: type=1400 audit(1756290127.193:454): avc: denied { write } for pid=7331 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.050087][ T7324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.074045][ T7324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.139501][ T5927] usb 1-1: USB disconnect, device number 5 [ 171.830377][ T30] audit: type=1400 audit(1756290128.023:455): avc: denied { append } for pid=7348 comm="syz.1.362" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.854136][ T7349] comedi comedi2: comedi_config --init_data is deprecated [ 171.889246][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.363'. [ 172.685771][ T7366] tipc: Enabled bearer , priority 0 [ 172.775132][ T7371] syzkaller0: entered promiscuous mode [ 172.797517][ T7371] syzkaller0: entered allmulticast mode [ 172.969944][ T7366] tipc: Resetting bearer [ 173.005754][ T7363] tipc: Resetting bearer [ 173.187516][ T7363] tipc: Disabling bearer [ 173.211349][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 173.728937][ T7391] overlayfs: failed lookup in lower (newroot/72, name='bus', err=-40): overlapping layers [ 176.347702][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 176.624244][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.2.387'. [ 176.774229][ T30] audit: type=1400 audit(1756290132.813:456): avc: denied { nlmsg_read } for pid=7439 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.838893][ T7441] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 176.915995][ T7441] netlink: 224 bytes leftover after parsing attributes in process `syz.1.386'. [ 177.102271][ T30] audit: type=1400 audit(1756290133.293:457): avc: denied { ioctl } for pid=7443 comm="syz.4.388" path="socket:[14947]" dev="sockfs" ino=14947 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.170609][ T30] audit: type=1400 audit(1756290133.293:458): avc: denied { read } for pid=7443 comm="syz.4.388" path="socket:[14947]" dev="sockfs" ino=14947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.340409][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 177.392303][ T7454] macsec1: entered promiscuous mode [ 177.412817][ T7454] syzkaller0: entered promiscuous mode [ 177.485485][ T7454] batman_adv: batadv0: Adding interface: macsec1 [ 177.535658][ T7454] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.569187][ T7459] loop2: detected capacity change from 0 to 7 [ 177.584395][ T7459] Dev loop2: unable to read RDB block 7 [ 177.600199][ T7459] loop2: unable to read partition table [ 177.611082][ T7459] loop2: partition table beyond EOD, truncated [ 177.616342][ T7454] batman_adv: batadv0: Interface activated: macsec1 [ 177.618947][ T7459] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 177.822454][ T7453] batman_adv: batadv0: Interface deactivated: macsec1 [ 177.836434][ T7453] syzkaller0 (unregistering): left promiscuous mode [ 177.910850][ T7453] batman_adv: batadv0: Removing interface: macsec1 [ 178.266878][ T49] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.464968][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 178.475460][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 178.532809][ T49] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 178.541917][ T49] usb 1-1: config 0 has no interface number 0 [ 178.549801][ T49] usb 1-1: config 0 interface 184 has no altsetting 0 [ 178.564393][ T49] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.573912][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.602423][ T49] usb 1-1: Product: syz [ 178.617755][ T49] usb 1-1: Manufacturer: syz [ 178.646271][ T49] usb 1-1: SerialNumber: syz [ 178.675321][ T49] usb 1-1: config 0 descriptor?? [ 178.702095][ T49] smsc75xx v1.0.0 [ 179.086414][ T7486] netlink: 'syz.4.403': attribute type 2 has an invalid length. [ 179.402686][ T7492] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 179.515888][ T7492] netlink: 224 bytes leftover after parsing attributes in process `syz.1.404'. [ 179.576307][ T7479] delete_channel: no stack [ 180.153223][ T49] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 180.177849][ T49] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 180.195352][ T49] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 180.299097][ T49] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 180.309504][ T49] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 180.325858][ T49] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 180.340126][ T49] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 180.387242][ T49] usb 1-1: USB disconnect, device number 6 [ 180.861562][ T7509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.923599][ T7510] binder: binder_mmap: 7502 200000ffb000-200000fff000 bad vm_flags failed -1 [ 183.046922][ T7533] netlink: 68 bytes leftover after parsing attributes in process `syz.3.414'. [ 183.075666][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.414'. [ 183.547285][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.789722][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 183.814121][ T10] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 183.848861][ T10] usb 4-1: config 0 has no interface number 0 [ 183.868241][ T10] usb 4-1: config 0 interface 58 has no altsetting 0 [ 183.885843][ T975] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 183.904131][ T10] usb 4-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=43.1b [ 183.940250][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.956812][ T10] usb 4-1: Product: syz [ 183.981269][ T10] usb 4-1: Manufacturer: syz [ 183.992351][ T10] usb 4-1: SerialNumber: syz [ 184.181947][ T10] usb 4-1: config 0 descriptor?? [ 184.198768][ T975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.216454][ T10] sisusb 4-1:0.58: Invalid USB2VGA device [ 185.194365][ T10] sisusb 4-1:0.58: probe with driver sisusb failed with error -22 [ 185.204435][ T975] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.214157][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.225463][ T975] usb 5-1: Product: syz [ 185.575816][ T30] audit: type=1400 audit(1756290141.683:459): avc: denied { create } for pid=7562 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.774124][ T10] usb 4-1: USB disconnect, device number 7 [ 185.780064][ T975] usb 5-1: Manufacturer: syz [ 185.784659][ T975] usb 5-1: SerialNumber: syz [ 185.835678][ T5927] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.976995][ T5927] usb 2-1: device descriptor read/64, error -71 [ 185.984149][ T7581] fuse: Bad value for 'fd' [ 186.298621][ T5927] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.426470][ T7592] futex_wake_op: syz.0.429 tries to shift op by 36; fix this program [ 186.975683][ T5927] usb 2-1: device descriptor read/64, error -71 [ 187.109902][ T5927] usb usb2-port1: attempt power cycle [ 187.244168][ T7591] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 187.310245][ T975] cdc_ncm 5-1:1.0: bind() failure [ 187.358811][ T975] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 187.377930][ T975] cdc_ncm 5-1:1.1: bind() failure [ 187.523304][ T49] usb 5-1: USB disconnect, device number 9 [ 187.566596][ T5927] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 187.640770][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.662427][ T5927] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 187.716069][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.734567][ T5927] usb 2-1: config 0 descriptor?? [ 188.163801][ T5927] pantherlord 0003:0E8F:0003.0003: unknown main item tag 0x0 [ 188.182848][ T5927] pantherlord 0003:0E8F:0003.0003: unknown main item tag 0x0 [ 188.191064][ T5927] pantherlord 0003:0E8F:0003.0003: unknown main item tag 0x0 [ 188.262867][ T5927] pantherlord 0003:0E8F:0003.0003: hidraw0: USB HID v1.01 Device [HID 0e8f:0003] on usb-dummy_hcd.1-1/input0 [ 188.315768][ T5927] pantherlord 0003:0E8F:0003.0003: no output reports found [ 188.394081][ T5927] usb 2-1: USB disconnect, device number 8 [ 188.423594][ T7620] fido_id[7620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 189.165911][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.418086][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 189.458692][ T7643] kvm: kvm [7642]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10000d000 [ 189.465632][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.479328][ T7643] kvm: kvm [7642]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 189.533483][ T7643] kvm: kvm [7642]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x4080 [ 189.571572][ T10] usb 1-1: config 0 descriptor?? [ 189.607735][ T7643] kvm: kvm [7642]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4080 [ 189.624497][ T7643] kvm: kvm [7642]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 189.637417][ T7643] kvm: kvm [7642]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xd80 [ 189.649997][ T7643] kvm: kvm [7642]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc000 [ 189.971369][ T30] audit: type=1400 audit(1756290146.163:460): avc: denied { ioctl } for pid=7659 comm="syz.1.447" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 189.999967][ T7660] xt_socket: unknown flags 0xe4 [ 190.164944][ T7660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.447'. [ 190.651948][ T30] audit: type=1400 audit(1756290146.843:461): avc: denied { block_suspend } for pid=7661 comm="syz.2.448" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.916936][ T10] usb 1-1: Cannot set autoneg [ 190.922037][ T10] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 191.344334][ T30] audit: type=1400 audit(1756290147.453:462): avc: denied { getopt } for pid=7634 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.380551][ T977] usb 1-1: USB disconnect, device number 7 [ 191.411871][ T30] audit: type=1400 audit(1756290147.603:463): avc: denied { connect } for pid=7663 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.879785][ T7664] gre0: entered allmulticast mode [ 191.936146][ T7679] Failed to get privilege flags for destination (handle=0x2:0x3e) [ 191.947959][ T30] audit: type=1400 audit(1756290148.123:464): avc: denied { read } for pid=7678 comm="syz.4.451" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.043834][ T30] audit: type=1400 audit(1756290148.233:465): avc: denied { getopt } for pid=7680 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.142067][ T7683] capability: warning: `syz.1.453' uses 32-bit capabilities (legacy support in use) [ 192.476808][ T7696] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 192.503652][ T7696] netlink: 224 bytes leftover after parsing attributes in process `syz.4.454'. [ 193.227567][ T7711] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 193.342984][ T30] audit: type=1400 audit(1756290149.533:466): avc: denied { create } for pid=7698 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 194.003678][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.048232][ T30] audit: type=1400 audit(1756290150.233:467): avc: denied { accept } for pid=7719 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.626624][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 195.149929][ T30] audit: type=1400 audit(1756290151.343:468): avc: denied { connect } for pid=7714 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.318974][ T7735] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 195.318974][ T7735] program syz.2.467 not setting count and/or reply_len properly [ 195.668989][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 195.690275][ T10] usb 5-1: too many configurations: 231, using maximum allowed: 8 [ 195.711433][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 195.722914][ T10] usb 5-1: can't read configurations, error -61 [ 195.959632][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 196.087548][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 196.093653][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 196.101762][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 196.107850][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 196.568136][ T7708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 196.655752][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 196.738487][ T10] usb 5-1: too many configurations: 231, using maximum allowed: 8 [ 196.778865][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 196.798746][ T10] usb 5-1: can't read configurations, error -61 [ 196.838443][ T10] usb usb5-port1: attempt power cycle [ 196.914242][ T30] audit: type=1400 audit(1756290153.103:469): avc: denied { open } for pid=7748 comm="syz.0.471" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 197.002447][ T30] audit: type=1400 audit(1756290153.143:470): avc: denied { ioctl } for pid=7748 comm="syz.0.471" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x540b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 197.029390][ T7753] nfs: Unknown parameter '' [ 197.136884][ T30] audit: type=1400 audit(1756290153.223:471): avc: denied { append } for pid=7752 comm="syz.2.473" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.180372][ T30] audit: type=1400 audit(1756290153.373:472): avc: denied { setopt } for pid=7754 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.250967][ T30] audit: type=1400 audit(1756290153.403:473): avc: denied { bind } for pid=7757 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.644496][ T30] audit: type=1400 audit(1756290153.433:474): avc: denied { name_connect } for pid=7759 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 197.675867][ T5962] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 198.054346][ T7771] netlink: 68 bytes leftover after parsing attributes in process `syz.4.478'. [ 198.105332][ T5962] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.194136][ T5962] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.445230][ T5962] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.468093][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.484616][ T5962] usb 1-1: SerialNumber: syz [ 198.798449][ T5962] usb 1-1: 0:2 : does not exist [ 198.883024][ T5962] usb 1-1: unit 5: unexpected type 0x0e [ 198.883416][ T7783] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 198.954066][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.482'. [ 199.169799][ T5962] usb 1-1: USB disconnect, device number 8 [ 199.408234][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.907053][ T30] audit: type=1400 audit(1756290156.063:475): avc: denied { append } for pid=7799 comm="syz.0.488" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 199.972275][ T7808] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 199.996610][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 200.040127][ T7808] netlink: 224 bytes leftover after parsing attributes in process `syz.2.484'. [ 200.050047][ T7811] netlink: 14 bytes leftover after parsing attributes in process `syz.1.489'. [ 200.208006][ T7813] syzkaller1: entered promiscuous mode [ 200.221848][ T7813] syzkaller1: entered allmulticast mode [ 200.280925][ T30] audit: type=1400 audit(1756290156.473:476): avc: denied { shutdown } for pid=7816 comm="syz.0.490" laddr=fe80::b lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 201.151211][ T30] audit: type=1400 audit(1756290157.343:477): avc: denied { mount } for pid=7821 comm="syz.0.493" name="/" dev="configfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 201.208468][ T30] audit: type=1400 audit(1756290157.383:478): avc: denied { search } for pid=7821 comm="syz.0.493" name="/" dev="configfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.715783][ T7848] netlink: 'syz.1.500': attribute type 4 has an invalid length. [ 201.733104][ T7850] tmpfs: Bad value for 'mpol' [ 202.265841][ T30] audit: type=1400 audit(1756290158.453:479): avc: denied { ioctl } for pid=7858 comm="syz.0.502" path="socket:[17614]" dev="sockfs" ino=17614 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.291647][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.502'. [ 202.319085][ T7854] capability: warning: `syz.1.501' uses deprecated v2 capabilities in a way that may be insecure [ 202.335745][ T30] audit: type=1400 audit(1756290158.513:480): avc: denied { setattr } for pid=7853 comm="syz.1.501" name="seq" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 202.375852][ T7859] netlink: 'syz.0.502': attribute type 7 has an invalid length. [ 202.385773][ T7859] netlink: 'syz.0.502': attribute type 8 has an invalid length. [ 202.394285][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 202.745920][ T5927] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 202.984619][ T7878] netlink: 'syz.1.505': attribute type 1 has an invalid length. [ 203.077340][ T7878] netlink: 224 bytes leftover after parsing attributes in process `syz.1.505'. [ 203.135609][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 203.168377][ T5927] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 203.195933][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.568600][ T7886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.509'. [ 203.683918][ T5927] usb 4-1: config 0 descriptor?? [ 203.929737][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 204.171850][ T7892] netlink: 68 bytes leftover after parsing attributes in process `syz.0.511'. [ 204.576062][ T5927] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 204.584672][ T5927] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 204.596404][ T5927] magicmouse 0003:05AC:0269.0004: unknown main item tag 0x0 [ 204.619222][ T5927] magicmouse 0003:05AC:0269.0004: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 204.653911][ T5927] usb 4-1: USB disconnect, device number 8 [ 204.760302][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 204.826865][ T7893] fido_id[7893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 204.876924][ T30] audit: type=1400 audit(1756290161.073:481): avc: denied { ioctl } for pid=7894 comm="syz.2.512" path="socket:[16730]" dev="sockfs" ino=16730 ioctlcmd=0x45c0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 204.903280][ T7896] autofs: Bad value for 'fd' [ 204.935409][ T7899] overlayfs: failed to decode file handle (len=6, type=65535, flags=0, err=-22) [ 205.435101][ T7906] tipc: Enabled bearer , priority 0 [ 205.456309][ T7906] syzkaller0: entered promiscuous mode [ 205.462651][ T7906] syzkaller0: entered allmulticast mode [ 205.604137][ T7906] tipc: Resetting bearer [ 205.632200][ T7905] tipc: Resetting bearer [ 205.706406][ T7905] tipc: Disabling bearer [ 205.819093][ T7924] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 205.819093][ T7924] program syz.2.518 not setting count and/or reply_len properly [ 206.305628][ T975] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 206.606286][ T975] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 206.623376][ T975] usb 5-1: config 0 has no interface number 0 [ 206.634504][ T7930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 206.644262][ T975] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.664119][ T975] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 206.689533][ T975] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 206.689601][ T7928] netlink: 'syz.0.523': attribute type 29 has an invalid length. [ 206.742256][ T975] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 206.765233][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.830382][ T975] usb 5-1: config 0 descriptor?? [ 206.930399][ T975] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input14 [ 206.938572][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 206.970368][ C1] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 207.197158][ T5853] Bluetooth: hci4: link tx timeout [ 207.203315][ T5853] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.238794][ T30] audit: type=1400 audit(1756290163.423:482): avc: denied { append } for pid=7918 comm="syz.4.521" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 207.504803][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.762879][ T7945] block nbd3: Attempted send on invalid socket [ 207.769647][ T7945] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 207.979419][ T7957] netlink: 14 bytes leftover after parsing attributes in process `syz.1.527'. [ 208.083618][ T7958] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 208.110789][ T6626] Bluetooth: hci5: Frame reassembly failed (-84) [ 208.372326][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 208.532869][ T7957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.548339][ T7957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.564727][ T7957] bond0 (unregistering): Released all slaves [ 208.948766][ T7972] netlink: 'syz.2.533': attribute type 4 has an invalid length. [ 209.275754][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 209.879165][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 210.086197][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.111199][ T977] usb 5-1: USB disconnect, device number 13 [ 210.156592][ T5853] Bluetooth: hci5: command 0x1003 tx timeout [ 210.156659][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 210.461193][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.517367][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.545673][ T10] usb 4-1: Product: syz [ 210.551858][ T10] usb 4-1: Manufacturer: syz [ 210.572141][ T10] usb 4-1: SerialNumber: syz [ 210.594843][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 210.641895][ T975] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.965682][ T8013] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 210.973733][ T8013] netlink: 224 bytes leftover after parsing attributes in process `syz.1.538'. [ 211.027977][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 211.199679][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.229531][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.262753][ T5962] usb 4-1: USB disconnect, device number 9 [ 211.284453][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 211.334637][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 211.357839][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.368770][ T10] usb 1-1: Product: syz [ 211.373023][ T10] usb 1-1: Manufacturer: syz [ 211.377835][ T10] usb 1-1: SerialNumber: syz [ 211.388426][ T8009] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.397818][ T30] audit: type=1400 audit(1756290167.573:483): avc: denied { map } for pid=8025 comm="syz.2.543" path="socket:[17989]" dev="sockfs" ino=17989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.915806][ T975] usb 4-1: Service connection timeout for: 256 [ 211.947305][ T975] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 211.975530][ T8036] netlink: 6408 bytes leftover after parsing attributes in process `syz.4.545'. [ 211.988797][ T975] ath9k_htc: Failed to initialize the device [ 212.035078][ T5962] usb 4-1: ath9k_htc: USB layer deinitialized [ 212.179487][ T10] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 212.201144][ T10] cdc_ncm 1-1:1.0: bind() failure [ 212.240216][ T10] usbtest 1-1:1.0: Linux gadget zero [ 212.247927][ T10] usbtest 1-1:1.0: full-speed {control in/out int-in} tests (+alt) [ 212.287312][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 212.297880][ T10] cdc_ncm 1-1:1.1: bind() failure [ 212.325195][ T10] usbtest 1-1:1.1: couldn't get endpoints, -22 [ 212.536573][ T8050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.548'. [ 212.927960][ T10] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 212.988826][ T10] usb 1-1: USB disconnect, device number 9 [ 213.662665][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 213.759743][ T977] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 213.925949][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 213.965062][ T977] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 213.984472][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.019025][ T977] usb 5-1: config 0 descriptor?? [ 214.031023][ T977] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 214.415695][ T5927] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 214.545959][ T977] gspca_nw80x: reg_w err -110 [ 214.554002][ T977] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 214.608010][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 214.641916][ T5927] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 214.651210][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 214.659608][ T5927] usb 4-1: Product: syz [ 214.683495][ T5927] usb 4-1: Manufacturer: syz [ 214.695248][ T5927] usb 4-1: SerialNumber: syz [ 214.709557][ T5927] usb 4-1: config 0 descriptor?? [ 214.796075][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 214.977138][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 214.987959][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.556'. [ 216.029825][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 216.060305][ T8119] macsec1: entered promiscuous mode [ 216.205851][ T8119] syzkaller0: entered promiscuous mode [ 216.213977][ T8119] batman_adv: batadv0: Adding interface: macsec1 [ 216.221220][ T8119] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.345698][ T8119] batman_adv: batadv0: Interface activated: macsec1 [ 216.409929][ T8118] batman_adv: batadv0: Interface deactivated: macsec1 [ 216.447882][ T8118] syzkaller0 (unregistering): left promiscuous mode [ 216.468989][ T975] usb 5-1: USB disconnect, device number 14 [ 216.541721][ T8118] batman_adv: batadv0: Removing interface: macsec1 [ 217.064556][ T5962] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 218.034618][ T975] usb 4-1: USB disconnect, device number 10 [ 218.186051][ T5962] usb 1-1: Using ep0 maxpacket: 32 [ 218.198425][ T5962] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 218.223387][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.263403][ T5962] usb 1-1: config 0 descriptor?? [ 218.290925][ T5962] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state [ 218.301014][ T30] audit: type=1400 audit(1756290174.493:484): avc: denied { create } for pid=8155 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 218.316007][ T5962] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 218.359926][ T30] audit: type=1400 audit(1756290174.523:485): avc: denied { bind } for pid=8155 comm="syz.3.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 218.376072][ T5962] dvb_usb_anysee 1-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 218.403992][ T30] audit: type=1400 audit(1756290174.523:486): avc: denied { write } for pid=8155 comm="syz.3.570" path="socket:[18273]" dev="sockfs" ino=18273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 218.539020][ T30] audit: type=1400 audit(1756290174.673:487): avc: denied { bind } for pid=8163 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 218.778342][ T30] audit: type=1326 audit(1756290174.813:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8126 comm="syz.0.564" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e34d8ebe9 code=0x0 [ 219.004412][ T5962] usb 1-1: USB disconnect, device number 10 [ 219.853021][ T30] audit: type=1400 audit(1756290176.043:489): avc: denied { accept } for pid=8188 comm="syz.4.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 219.875750][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 220.534955][ T8206] 9pnet_fd: Insufficient options for proto=fd [ 220.716285][ T8207] tmpfs: Bad value for 'mpol' [ 220.907404][ T30] audit: type=1400 audit(1756290177.093:490): avc: denied { getopt } for pid=8208 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 220.938063][ T8220] netlink: 'syz.1.577': attribute type 39 has an invalid length. [ 221.009211][ T8222] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 221.130176][ T8224] netlink: 456 bytes leftover after parsing attributes in process `syz.4.582'. [ 221.181809][ T975] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 221.347353][ T30] audit: type=1400 audit(1756290177.543:491): avc: denied { module_load } for pid=8228 comm="syz.2.583" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 221.347408][ T8229] Invalid ELF header magic: != ELF [ 221.371036][ T975] usb 1-1: device descriptor read/64, error -71 [ 221.607709][ T975] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 221.796903][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 221.866157][ T975] usb 1-1: device descriptor read/64, error -71 [ 222.014005][ T975] usb usb1-port1: attempt power cycle [ 222.091677][ T30] audit: type=1400 audit(1756290178.283:492): avc: denied { read } for pid=8238 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.147064][ T30] audit: type=1400 audit(1756290178.343:493): avc: denied { setopt } for pid=8238 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.436827][ T975] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.556473][ T975] usb 1-1: device descriptor read/8, error -71 [ 223.204218][ T8265] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 223.275647][ T975] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 223.306267][ T975] usb 1-1: device descriptor read/8, error -71 [ 223.465342][ T975] usb usb1-port1: unable to enumerate USB device [ 223.491961][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 223.768932][ T8280] overlayfs: failed to resolve './file0': -2 [ 225.406401][ T8313] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 225.414207][ T8313] netlink: 5 bytes leftover after parsing attributes in process `syz.2.601'. [ 226.292871][ T8328] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 226.292871][ T8328] program syz.3.606 not setting count and/or reply_len properly [ 227.507995][ T8348] tipc: Started in network mode [ 227.512883][ T8348] tipc: Node identity f29974a6e606, cluster identity 4711 [ 227.523426][ T8348] tipc: Enabled bearer , priority 0 [ 228.039932][ T8355] trusted_key: encrypted_key: master key parameter '0@4=dz^Ǧ8$yr !c-z' is invalid [ 228.076218][ T8355] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 228.529198][ T5927] tipc: Node number set to 345994406 [ 228.541664][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 228.587254][ T8359] tipc: Started in network mode [ 228.592191][ T8359] tipc: Node identity d6ac9beaf44e, cluster identity 8 [ 228.604048][ T8359] tipc: Enabled bearer , priority 0 [ 229.178779][ T8362] tipc: Resetting bearer [ 229.191949][ T8372] syzkaller0: entered promiscuous mode [ 229.217935][ T8372] syzkaller0: entered allmulticast mode [ 229.272186][ T30] audit: type=1400 audit(1756290185.463:494): avc: denied { watch_mount watch_reads } for pid=8375 comm="syz.1.618" path="/139/file1" dev="tmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.332391][ T8358] tipc: Disabling bearer [ 229.342708][ T30] audit: type=1400 audit(1756290185.473:495): avc: denied { read } for pid=8375 comm="syz.1.618" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 229.531737][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 229.534387][ T30] audit: type=1400 audit(1756290185.473:496): avc: denied { open } for pid=8375 comm="syz.1.618" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 229.570571][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'. [ 230.214378][ T8376] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.220843][ T8346] tipc: Resetting bearer [ 230.230832][ T30] audit: type=1400 audit(1756290186.413:497): avc: denied { setattr } for pid=8388 comm="syz.3.620" name="ALG" dev="sockfs" ino=19612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 230.307798][ T8376] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 230.337700][ T8346] tipc: Disabling bearer [ 230.339364][ T8376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.362638][ T30] audit: type=1400 audit(1756290186.553:498): avc: denied { audit_write } for pid=8393 comm="syz.3.622" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 230.364105][ T8376] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.427797][ T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.440736][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.453394][ T8376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.461013][ T8376] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 230.466283][ T30] audit: type=1107 audit(1756290186.553:499): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='M=' [ 230.467712][ T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.513118][ T8376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.521436][ T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.538279][ T8376] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 230.551973][ T8376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 230.582664][ T30] audit: type=1400 audit(1756290186.553:500): avc: denied { mounton } for pid=8393 comm="syz.3.622" path="/newroot/proc/379/ns/mnt" dev="proc" ino=19626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 230.606424][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.835656][ T5962] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 230.843387][ T5977] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 230.956880][ T8385] delete_channel: no stack [ 230.965351][ T30] audit: type=1400 audit(1756290187.153:501): avc: denied { module_request } for pid=8399 comm="syz.1.624" kmod="bt-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 230.972945][ T8398] block device autoloading is deprecated and will be removed. [ 231.087506][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.099243][ T5962] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.111101][ T5977] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 231.124786][ T5962] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.173441][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.192076][ T5962] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.192104][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.197652][ T8407] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 231.203769][ T5859] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 231.211236][ T30] audit: type=1400 audit(1756290187.413:502): avc: denied { relabelto } for pid=8406 comm="syz.2.626" name="123" dev="tmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 231.281649][ T5977] usb 4-1: config 0 descriptor?? [ 231.291211][ T30] audit: type=1400 audit(1756290187.423:503): avc: denied { connect } for pid=8403 comm="syz.1.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 231.363869][ T8411] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[8411] [ 231.410126][ T8413] loop2: detected capacity change from 0 to 6 [ 231.418744][ T8413] Dev loop2: unable to read RDB block 6 [ 231.424397][ T8413] loop2: AHDI p1 [ 231.428842][ T8413] loop2: partition table partially beyond EOD, truncated [ 231.511696][ T5962] usb 1-1: GET_CAPABILITIES returned 0 [ 231.521708][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.534053][ T5962] usbtmc 1-1:16.0: can't read capabilities [ 231.540609][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.787320][ T5977] logitech-djreceiver 0003:046D:C52F.0005: item fetching failed at offset 0/6 [ 231.995864][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 232.067127][ T5977] logitech-djreceiver 0003:046D:C52F.0005: logi_dj_probe: parse failed [ 232.076753][ T5977] logitech-djreceiver 0003:046D:C52F.0005: probe with driver logitech-djreceiver failed with error -22 [ 232.250576][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.290634][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.633'. [ 232.301684][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.400104][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 232.515446][ T8433] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 232.515446][ T8433] program syz.1.634 not setting count and/or reply_len properly [ 232.552736][ T5859] Bluetooth: hci2: command 0x0406 tx timeout [ 232.559137][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 232.565251][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 232.969534][ T5934] usb 1-1: USB disconnect, device number 15 [ 233.201289][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'. [ 233.213402][ T8439] fuse: Unknown parameter '' [ 233.298018][ T8444] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 233.823912][ T5934] usb 4-1: USB disconnect, device number 11 [ 234.092913][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 234.535940][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 234.635650][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 234.641712][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 234.971914][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 234.971933][ T30] audit: type=1400 audit(1756290191.113:512): avc: denied { read write } for pid=8473 comm="syz.0.644" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 235.003464][ T30] audit: type=1400 audit(1756290191.123:513): avc: denied { open } for pid=8473 comm="syz.0.644" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 235.028391][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.981838][ T8497] binder: BINDER_SET_CONTEXT_MGR already set [ 236.987921][ T8497] binder: 8491:8497 ioctl 4018620d 200000004a80 returned -16 [ 237.175826][ T5920] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 238.047496][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.058052][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.072942][ T5920] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 238.090198][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.263745][ T5920] usb 2-1: Product: syz [ 238.270852][ T5920] usb 2-1: Manufacturer: syz [ 238.275464][ T5920] usb 2-1: SerialNumber: syz [ 238.282752][ T5920] usb 2-1: config 0 descriptor?? [ 238.379359][ T8513] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 238.379359][ T8513] program syz.2.654 not setting count and/or reply_len properly [ 239.060132][ T5920] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 239.587948][ T8522] tipc: Enabled bearer , priority 0 [ 239.631273][ T8522] syzkaller0: entered promiscuous mode [ 239.636933][ T8522] syzkaller0: entered allmulticast mode [ 239.797992][ T8493] tipc: Resetting bearer [ 239.937495][ T8493] tipc: Disabling bearer [ 240.595659][ T5920] tipc: Node number set to 1365052932 [ 240.866506][ T30] audit: type=1400 audit(1756290196.823:514): avc: denied { watch } for pid=8529 comm="syz.4.659" path="/131/bus" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.868066][ T8535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.660'. [ 240.909780][ T30] audit: type=1400 audit(1756290196.823:515): avc: denied { watch_sb } for pid=8529 comm="syz.4.659" path="/131/bus" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 241.189539][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 241.284190][ T5920] usb 2-1: USB disconnect, device number 9 [ 241.462879][ T30] audit: type=1400 audit(1756290197.643:516): avc: denied { lock } for pid=8545 comm="syz.0.662" path="socket:[18988]" dev="sockfs" ino=18988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 241.528984][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 241.713613][ T8551] macsec1: entered promiscuous mode [ 241.722599][ T8553] netlink: 256 bytes leftover after parsing attributes in process `syz.0.665'. [ 241.748835][ T8551] syzkaller0: entered promiscuous mode [ 241.827368][ T8551] batman_adv: batadv0: Adding interface: macsec1 [ 241.834984][ T8553] netlink: 48 bytes leftover after parsing attributes in process `syz.0.665'. [ 241.858971][ T8551] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.967085][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 242.005764][ T8551] batman_adv: batadv0: Interface activated: macsec1 [ 242.113718][ T8548] batman_adv: batadv0: Interface deactivated: macsec1 [ 242.140461][ T8548] syzkaller0 (unregistering): left promiscuous mode [ 242.402517][ T8548] batman_adv: batadv0: Removing interface: macsec1 [ 245.927588][ T8605] tipc: Enabled bearer , priority 0 [ 246.174009][ T8609] syzkaller0: entered promiscuous mode [ 246.179580][ T8609] syzkaller0: entered allmulticast mode [ 246.719310][ T8601] tipc: Resetting bearer [ 246.735290][ T8601] tipc: Disabling bearer [ 248.583615][ T8630] IPVS: stopping backup sync thread 8631 ... [ 248.590799][ T8631] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 511, id = 0 [ 249.404048][ T8642] netlink: 'syz.1.688': attribute type 4 has an invalid length. [ 249.743189][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 249.941451][ T8662] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 249.941451][ T8662] program syz.3.691 not setting count and/or reply_len properly [ 250.816799][ T8658] tmpfs: Unknown parameter 'mpW\elative:4,7' [ 250.906099][ T8658] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 250.915065][ T8658] netlink: 228 bytes leftover after parsing attributes in process `syz.1.694'. [ 250.937321][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 250.949069][ T8658] NCSI netlink: No device for ifindex 0 [ 251.363603][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'. [ 251.543038][ T8680] bridge_slave_0: left allmulticast mode [ 251.548779][ T8680] bridge_slave_0: left promiscuous mode [ 251.555958][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.726657][ T975] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 252.741839][ T8680] bridge_slave_1: left allmulticast mode [ 252.752511][ T8680] bridge_slave_1: left promiscuous mode [ 252.759421][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.809165][ T8680] bond0: (slave bond_slave_0): Releasing backup interface [ 252.859952][ T975] usb 1-1: config 0 has an invalid interface number: 139 but max is 0 [ 252.869558][ T8680] bond0: (slave bond_slave_1): Releasing backup interface [ 252.877080][ T975] usb 1-1: config 0 has no interface number 0 [ 252.883337][ T975] usb 1-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 252.894959][ T975] usb 1-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 252.906856][ T975] usb 1-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 252.919845][ T975] usb 1-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 252.941001][ T975] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 252.950814][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.960791][ T975] usb 1-1: Product: syz [ 252.965121][ T975] usb 1-1: Manufacturer: syz [ 252.974977][ T975] usb 1-1: SerialNumber: syz [ 253.001212][ T975] usb 1-1: config 0 descriptor?? [ 253.009919][ T8668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.018494][ T8668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 253.339065][ T8680] team0: Port device team_slave_0 removed [ 253.376491][ T8680] team0: Port device team_slave_1 removed [ 253.548230][ T975] mct_u232 1-1:0.139: MCT U232 converter detected [ 253.559245][ T975] usb 1-1: MCT U232 converter now attached to ttyUSB0 [ 253.575869][ T975] usb 1-1: USB disconnect, device number 16 [ 253.583424][ T975] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 253.583951][ T975] mct_u232 1-1:0.139: device disconnected [ 254.345418][ T8708] netlink: 32 bytes leftover after parsing attributes in process `syz.4.709'. [ 255.081117][ T30] audit: type=1400 audit(1756290211.273:517): avc: denied { write } for pid=8730 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 255.100377][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.617165][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.824905][ T8737] FAULT_INJECTION: forcing a failure. [ 255.824905][ T8737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.852511][ T8720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.895880][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.0.717 Not tainted syzkaller #0 PREEMPT(full) [ 255.895907][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.895917][ T8737] Call Trace: [ 255.895923][ T8737] [ 255.895930][ T8737] dump_stack_lvl+0x16c/0x1f0 [ 255.895957][ T8737] should_fail_ex+0x512/0x640 [ 255.895981][ T8737] should_fail_alloc_page+0xe7/0x130 [ 255.896005][ T8737] prepare_alloc_pages+0x3c2/0x610 [ 255.896034][ T8737] ? rcu_is_watching+0x12/0xc0 [ 255.896060][ T8737] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 255.896081][ T8737] ? is_bpf_text_address+0x8a/0x1a0 [ 255.896100][ T8737] ? bpf_ksym_find+0x127/0x1c0 [ 255.896123][ T8737] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 255.896147][ T8737] ? is_bpf_text_address+0x94/0x1a0 [ 255.896165][ T8737] ? kernel_text_address+0x8d/0x100 [ 255.896188][ T8737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 255.896217][ T8737] ? __lock_acquire+0x62e/0x1ce0 [ 255.896248][ T8737] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.896271][ T8737] ? policy_nodemask+0xea/0x4e0 [ 255.896293][ T8737] alloc_pages_mpol+0x1fb/0x550 [ 255.896315][ T8737] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 255.896337][ T8737] ? __lock_acquire+0x62e/0x1ce0 [ 255.896367][ T8737] folio_alloc_mpol_noprof+0x36/0x2f0 [ 255.896392][ T8737] vma_alloc_folio_noprof+0xed/0x1e0 [ 255.896415][ T8737] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 255.896446][ T8737] do_pte_missing+0x2230/0x3ba0 [ 255.896474][ T8737] ? find_held_lock+0x2b/0x80 [ 255.896506][ T8737] __handle_mm_fault+0x152a/0x2a50 [ 255.896535][ T8737] ? mt_find+0x3ef/0xa30 [ 255.896572][ T8737] ? __pfx___handle_mm_fault+0x10/0x10 [ 255.896596][ T8737] ? __pfx_mt_find+0x10/0x10 [ 255.896631][ T8737] ? find_vma+0xbf/0x140 [ 255.896650][ T8737] ? __pfx_find_vma+0x10/0x10 [ 255.896673][ T8737] handle_mm_fault+0x589/0xd10 [ 255.896700][ T8737] ? __bpf_trace_exceptions+0x1/0x40 [ 255.896730][ T8737] do_user_addr_fault+0x7a6/0x1370 [ 255.896751][ T8737] ? rcu_is_watching+0x12/0xc0 [ 255.896775][ T8737] exc_page_fault+0x5c/0xb0 [ 255.896794][ T8737] asm_exc_page_fault+0x26/0x30 [ 255.896811][ T8737] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 255.896838][ T8737] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 255.896855][ T8737] RSP: 0018:ffffc900107176e8 EFLAGS: 00050202 [ 255.896871][ T8737] RAX: 0000000000000001 RBX: 0000000000000c71 RCX: 0000000000000831 [ 255.896882][ T8737] RDX: ffffed1006841dd2 RSI: ffff88803420e65b RDI: 0000200000004000 [ 255.896893][ T8737] RBP: 0000000000000c71 R08: 0000000000000000 R09: ffffed1006841dd1 [ 255.896903][ T8737] R10: ffff88803420ee8b R11: 0000000000000000 R12: 0000000000000000 [ 255.896913][ T8737] R13: ffffc90010717c00 R14: ffff88803420e21b R15: 0000200000003bc0 [ 255.896939][ T8737] _copy_to_iter+0x4eb/0x1710 [ 255.896970][ T8737] ? __pfx__copy_to_iter+0x10/0x10 [ 255.896995][ T8737] ? __skb_recv_datagram+0x1b2/0x220 [ 255.897030][ T8737] ? __pfx___skb_recv_datagram+0x10/0x10 [ 255.897060][ T8737] simple_copy_to_iter+0x46/0x90 [ 255.897087][ T8737] __skb_datagram_iter+0x129/0x900 [ 255.897111][ T8737] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 255.897139][ T8737] ? skb_recv_datagram+0x88/0xc0 [ 255.897170][ T8737] skb_copy_datagram_iter+0x40/0x50 [ 255.897199][ T8737] netlink_recvmsg+0x27e/0xa90 [ 255.897223][ T8737] ? __pfx_netlink_recvmsg+0x10/0x10 [ 255.897247][ T8737] ? iovec_from_user+0xbb/0x140 [ 255.897278][ T8737] ____sys_recvmsg+0x5f6/0x6b0 [ 255.897309][ T8737] ? __pfx_____sys_recvmsg+0x10/0x10 [ 255.897344][ T8737] ? kfree+0x24f/0x4d0 [ 255.897368][ T8737] ? __lock_acquire+0x62e/0x1ce0 [ 255.897400][ T8737] ___sys_recvmsg+0x114/0x1a0 [ 255.897420][ T8737] ? __pfx____sys_recvmsg+0x10/0x10 [ 255.897458][ T8737] ? __pfx___might_resched+0x10/0x10 [ 255.897487][ T8737] do_recvmmsg+0x2fe/0x750 [ 255.897511][ T8737] ? __pfx_do_recvmmsg+0x10/0x10 [ 255.897538][ T8737] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 255.897569][ T8737] ? __fget_files+0x20e/0x3c0 [ 255.897596][ T8737] __x64_sys_recvmmsg+0x22a/0x280 [ 255.897617][ T8737] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 255.897648][ T8737] do_syscall_64+0xcd/0x4c0 [ 255.897670][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.897687][ T8737] RIP: 0033:0x7f6e34d8ebe9 [ 255.897701][ T8737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.897717][ T8737] RSP: 002b:00007f6e35ba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 255.897732][ T8737] RAX: ffffffffffffffda RBX: 00007f6e34fb5fa0 RCX: 00007f6e34d8ebe9 [ 255.897743][ T8737] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 255.897754][ T8737] RBP: 00007f6e35ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 255.897764][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.897775][ T8737] R13: 00007f6e34fb6038 R14: 00007f6e34fb5fa0 R15: 00007ffd4cee3908 [ 255.897799][ T8737] [ 256.523176][ T8743] block nbd1: Attempted send on invalid socket [ 256.530840][ T8743] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 256.598419][ T30] audit: type=1400 audit(1756290212.783:518): avc: denied { setattr } for pid=8746 comm="syz.2.720" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.621971][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.655997][ T8743] block nbd1: Attempted send on invalid socket [ 256.664293][ T8743] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 256.677857][ T8743] Mount JFS Failure: -5 [ 256.983856][ T30] audit: type=1400 audit(1756290212.793:519): avc: denied { setattr } for pid=8746 comm="syz.2.720" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 257.366156][ T30] audit: type=1800 audit(1756290213.533:520): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.720" name="/kvm" dev="devtmpfs" ino=84 res=0 errno=0 [ 260.036476][ T8778] delete_channel: no stack [ 260.296286][ T8801] netlink: 'syz.4.733': attribute type 4 has an invalid length. [ 265.396359][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 266.095026][ T8894] futex_wake_op: syz.0.757 tries to shift op by 36; fix this program [ 266.104784][ T8894] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 266.585374][ T8881] delete_channel: no stack [ 266.960088][ T8907] FAULT_INJECTION: forcing a failure. [ 266.960088][ T8907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.985154][ T8907] CPU: 0 UID: 0 PID: 8907 Comm: syz.0.763 Not tainted syzkaller #0 PREEMPT(full) [ 266.985181][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.985192][ T8907] Call Trace: [ 266.985198][ T8907] [ 266.985205][ T8907] dump_stack_lvl+0x16c/0x1f0 [ 266.985230][ T8907] should_fail_ex+0x512/0x640 [ 266.985253][ T8907] _copy_from_user+0x2e/0xd0 [ 266.985277][ T8907] copy_msghdr_from_user+0x98/0x160 [ 266.985297][ T8907] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 266.985330][ T8907] ___sys_sendmsg+0xfe/0x1d0 [ 266.985350][ T8907] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.985401][ T8907] __sys_sendmsg+0x16d/0x220 [ 266.985421][ T8907] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.985456][ T8907] do_syscall_64+0xcd/0x4c0 [ 266.985479][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.985498][ T8907] RIP: 0033:0x7f6e34d8ebe9 [ 266.985512][ T8907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.985532][ T8907] RSP: 002b:00007f6e35ba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.985548][ T8907] RAX: ffffffffffffffda RBX: 00007f6e34fb5fa0 RCX: 00007f6e34d8ebe9 [ 266.985560][ T8907] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 266.985571][ T8907] RBP: 00007f6e35ba9090 R08: 0000000000000000 R09: 0000000000000000 [ 266.985581][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.985591][ T8907] R13: 00007f6e34fb6038 R14: 00007f6e34fb5fa0 R15: 00007ffd4cee3908 [ 266.985616][ T8907] [ 267.665236][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 267.881740][ T8921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.245053][ T30] audit: type=1400 audit(1756290224.433:521): avc: denied { map } for pid=8933 comm="syz.3.769" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 268.269705][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.603607][ T8936] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 268.616385][ T8920] IPVS: stopping backup sync thread 8936 ... [ 268.824144][ T8917] delete_channel: no stack [ 269.092921][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 269.467995][ T8953] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 269.592605][ T30] audit: type=1326 audit(1756290225.783:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b298ebe9 code=0x7ffc0000 [ 269.726041][ T30] audit: type=1326 audit(1756290225.783:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f33b298ebe9 code=0x7ffc0000 [ 269.754257][ T30] audit: type=1326 audit(1756290225.783:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b298ebe9 code=0x7ffc0000 [ 269.883930][ T30] audit: type=1326 audit(1756290225.783:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33b298ebe9 code=0x7ffc0000 [ 269.978293][ T49] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 270.254948][ T49] usb 4-1: config 27 has an invalid descriptor of length 54, skipping remainder of the config [ 270.313708][ T49] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 270.390315][ T49] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.431679][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.440520][ T30] audit: type=1326 audit(1756290225.783:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b298ebe9 code=0x7ffc0000 [ 270.641685][ T30] audit: type=1326 audit(1756290225.783:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33b298ebe9 code=0x7ffc0000 [ 270.665434][ T30] audit: type=1326 audit(1756290225.783:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b298ebe9 code=0x7ffc0000 [ 271.220590][ T5977] usb 4-1: USB disconnect, device number 12 [ 271.231145][ T30] audit: type=1326 audit(1756290225.783:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f33b298ebe9 code=0x7ffc0000 [ 271.270818][ T30] audit: type=1326 audit(1756290225.783:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8952 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b298ebe9 code=0x7ffc0000 [ 272.259786][ T9008] cifs: Unknown parameter 'F:v9^ƞ8T\8Vp' [ 272.339985][ T9006] [U] [ 272.496284][ T9016] netlink: 148 bytes leftover after parsing attributes in process `syz.4.785'. [ 272.566678][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 272.918707][ T9023] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 272.949188][ T9023] netlink: 224 bytes leftover after parsing attributes in process `syz.0.786'. [ 273.474346][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 273.888305][ T9029] mkiss: ax0: crc mode is auto. [ 275.668346][ T9068] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 275.693600][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 275.693632][ T30] audit: type=1400 audit(1756290231.693:563): avc: denied { mounton } for pid=9060 comm="syz.4.801" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 276.080608][ T9070] netlink: 'syz.3.802': attribute type 16 has an invalid length. [ 276.257646][ T9070] netlink: 'syz.3.802': attribute type 17 has an invalid length. [ 276.282944][ T30] audit: type=1400 audit(1756290232.473:564): avc: denied { append } for pid=9072 comm="syz.0.798" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 277.080126][ T9067] netlink: 408 bytes leftover after parsing attributes in process `syz.3.802'. [ 277.130475][ T9067] netlink: 88 bytes leftover after parsing attributes in process `syz.3.802'. [ 277.165309][ T49] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 277.360631][ T5977] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 277.386646][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 277.395473][ T49] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 277.440267][ T49] usb 3-1: config 0 has no interface number 0 [ 277.454742][ T49] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 24720, setting to 1024 [ 277.599760][ T5977] usb 1-1: Using ep0 maxpacket: 32 [ 277.599918][ T1091] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 277.605348][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 277.619613][ T49] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 277.636145][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 277.837001][ T5977] usb 1-1: config 0 has an invalid interface number: 160 but max is 0 [ 277.858282][ T49] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 277.885611][ T5977] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 277.903037][ T49] usb 3-1: Product: syz [ 277.913775][ T5977] usb 1-1: config 0 has no interface number 0 [ 277.918574][ T49] usb 3-1: SerialNumber: syz [ 277.999958][ T49] usb 3-1: config 0 descriptor?? [ 278.005685][ T5977] usb 1-1: config 0 interface 160 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 278.019943][ T49] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 278.045683][ T5977] usb 1-1: config 0 interface 160 has no altsetting 0 [ 278.050474][ T49] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input16 [ 278.078033][ T5977] usb 1-1: New USB device found, idVendor=7392, idProduct=7318, bcdDevice=36.4e [ 278.095594][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.141851][ T5977] usb 1-1: Product: syz [ 278.146229][ T5977] usb 1-1: Manufacturer: syz [ 278.155867][ T5977] usb 1-1: SerialNumber: syz [ 278.192438][ T5977] usb 1-1: config 0 descriptor?? [ 278.299683][ T9124] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 278.499499][ T49] usb 1-1: USB disconnect, device number 17 [ 278.545237][ T9127] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 278.545237][ T9127] program syz.3.812 not setting count and/or reply_len properly [ 279.130758][ T9133] tipc: Enabled bearer , priority 0 [ 279.141147][ T9133] syzkaller0: entered promiscuous mode [ 279.149950][ T9133] syzkaller0: entered allmulticast mode [ 279.192035][ T9133] tipc: Resetting bearer [ 279.366202][ T9132] tipc: Resetting bearer [ 279.603821][ T9132] tipc: Disabling bearer [ 279.685709][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 280.343545][ T30] audit: type=1400 audit(1756290236.513:565): avc: denied { bind } for pid=9151 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 280.391127][ T9160] netlink: 'syz.4.819': attribute type 4 has an invalid length. [ 280.424556][ T9160] netlink: 'syz.4.819': attribute type 4 has an invalid length. [ 280.675587][ T30] audit: type=1400 audit(1756290236.863:566): avc: denied { getopt } for pid=9151 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.733634][ T9160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=9160 comm=syz.4.819 [ 281.755701][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 281.987287][ T9179] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 282.002821][ T30] audit: type=1400 audit(1756290238.193:567): avc: denied { create } for pid=9178 comm="syz.1.824" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 282.017764][ T975] usb 3-1: USB disconnect, device number 6 [ 282.023728][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 282.036107][ C1] ------------[ cut here ]------------ [ 282.041804][ C1] URB ffff88802855df00 submitted while active [ 282.048361][ C1] WARNING: CPU: 1 PID: 30 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1519/0x1770 [ 282.057817][ C1] Modules linked in: [ 282.061909][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted syzkaller #0 PREEMPT(full) [ 282.070736][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.080771][ C1] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 282.086394][ C1] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 3f 84 7a fa c6 05 9d a4 52 09 01 90 48 c7 c7 a0 02 74 8c 48 89 de e8 e8 29 39 fa 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 282.105981][ C1] RSP: 0018:ffffc90000a08a80 EFLAGS: 00010086 [ 282.112030][ C1] RAX: 0000000000000000 RBX: ffff88802855df00 RCX: ffffc900023e1000 [ 282.119980][ C1] RDX: 0000000000040000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 282.127933][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 282.135883][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 282.143833][ C1] R13: ffff88802a31a857 R14: ffff88802aacb920 R15: 000000000000000f [ 282.151785][ C1] FS: 0000000000000000(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 282.160701][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.167266][ C1] CR2: 00007fffa07010e8 CR3: 000000007d340000 CR4: 00000000003526f0 [ 282.175218][ C1] Call Trace: [ 282.178476][ C1] [ 282.181304][ C1] ? find_held_lock+0x2b/0x80 [ 282.185969][ C1] ? __pfx____ratelimit+0x10/0x10 [ 282.190979][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 282.196344][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 282.201715][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 282.206904][ C1] dummy_timer+0x1814/0x3a30 [ 282.211484][ C1] ? find_held_lock+0x2b/0x80 [ 282.216147][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 282.221778][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 282.227404][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 282.233376][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 282.238298][ C1] ? rcu_is_watching+0x12/0xc0 [ 282.243049][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 282.248839][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 282.253756][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 282.258950][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 282.264650][ C1] ? read_tsc+0x9/0x20 [ 282.268711][ C1] hrtimer_run_softirq+0x17d/0x350 [ 282.273808][ C1] handle_softirqs+0x216/0x8e0 [ 282.278565][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 282.283841][ C1] __irq_exit_rcu+0x109/0x170 [ 282.288502][ C1] irq_exit_rcu+0x9/0x30 [ 282.292728][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 282.298357][ C1] [ 282.301269][ C1] [ 282.304180][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 282.310141][ C1] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 282.315844][ C1] Code: 00 e8 52 d5 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 90 e9 20 00 48 85 db 0f 85 55 01 00 00 e8 12 ee 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 97 49 87 [ 282.335436][ C1] RSP: 0018:ffffc90000a679c8 EFLAGS: 00000293 [ 282.341486][ C1] RAX: ffffffff8f2ecc58 RBX: 0000000000000000 RCX: ffffffff819a9de0 [ 282.349438][ C1] RDX: ffff88801eaac880 RSI: ffffffff819a9dee RDI: 0000000000000007 [ 282.357389][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 282.365342][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8f2ecc58 [ 282.373290][ C1] R13: ffffffff8f2ecc00 R14: ffffc90000a67a58 R15: dffffc0000000000 [ 282.381250][ C1] ? console_flush_all+0x990/0xc60 [ 282.386348][ C1] ? console_flush_all+0x99e/0xc60 [ 282.391446][ C1] ? console_flush_all+0x99e/0xc60 [ 282.396547][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 282.401996][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 282.407543][ C1] console_unlock+0xd8/0x210 [ 282.412116][ C1] ? __pfx_console_unlock+0x10/0x10 [ 282.417298][ C1] ? do_raw_spin_unlock+0xd1/0x230 [ 282.422395][ C1] ? _printk+0xc7/0x100 [ 282.426529][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 282.432317][ C1] vprintk_emit+0x418/0x6d0 [ 282.436810][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 282.441818][ C1] ? find_held_lock+0x2b/0x80 [ 282.446485][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 282.452713][ C1] _printk+0xc7/0x100 [ 282.456678][ C1] ? __pfx__printk+0x10/0x10 [ 282.461250][ C1] ? netlink_has_listeners+0x20f/0x430 [ 282.466690][ C1] ? __pfx____ratelimit+0x10/0x10 [ 282.471697][ C1] ? kauditd_hold_skb+0x1bc/0x250 [ 282.476711][ C1] kauditd_hold_skb+0x205/0x250 [ 282.481553][ C1] kauditd_send_queue+0x239/0x290 [ 282.486568][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 282.491930][ C1] kauditd_thread+0x623/0xa70 [ 282.496599][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 282.501787][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 282.507846][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.513028][ C1] ? __kthread_parkme+0x19e/0x250 [ 282.518042][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 282.523228][ C1] kthread+0x3c5/0x780 [ 282.527279][ C1] ? __pfx_kthread+0x10/0x10 [ 282.531850][ C1] ? rcu_is_watching+0x12/0xc0 [ 282.536601][ C1] ? __pfx_kthread+0x10/0x10 [ 282.541171][ C1] ret_from_fork+0x5d7/0x6f0 [ 282.545740][ C1] ? __pfx_kthread+0x10/0x10 [ 282.550311][ C1] ret_from_fork_asm+0x1a/0x30 [ 282.555071][ C1] [ 282.558071][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.565329][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted syzkaller #0 PREEMPT(full) [ 282.574155][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.584191][ C1] Call Trace: [ 282.587452][ C1] [ 282.590281][ C1] dump_stack_lvl+0x3d/0x1f0 [ 282.594854][ C1] vpanic+0x6e8/0x7a0 [ 282.598826][ C1] ? __pfx_vpanic+0x10/0x10 [ 282.603325][ C1] ? usb_submit_urb+0x1519/0x1770 [ 282.608330][ C1] panic+0xca/0xd0 [ 282.612040][ C1] ? __pfx_panic+0x10/0x10 [ 282.616454][ C1] check_panic_on_warn+0xab/0xb0 [ 282.621371][ C1] __warn+0xf6/0x3c0 [ 282.625245][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 282.630254][ C1] ? usb_submit_urb+0x1519/0x1770 [ 282.635260][ C1] report_bug+0x3c3/0x580 [ 282.639571][ C1] ? usb_submit_urb+0x1519/0x1770 [ 282.644583][ C1] handle_bug+0x184/0x210 [ 282.648897][ C1] exc_invalid_op+0x17/0x50 [ 282.653386][ C1] asm_exc_invalid_op+0x1a/0x20 [ 282.658220][ C1] RIP: 0010:usb_submit_urb+0x1519/0x1770 [ 282.663834][ C1] Code: fd eb cb bb fe ff ff ff e9 96 f3 ff ff e8 3f 84 7a fa c6 05 9d a4 52 09 01 90 48 c7 c7 a0 02 74 8c 48 89 de e8 e8 29 39 fa 90 <0f> 0b 90 90 e9 ac fe ff ff bb f8 ff ff ff e9 66 f3 ff ff 48 89 ef [ 282.683423][ C1] RSP: 0018:ffffc90000a08a80 EFLAGS: 00010086 [ 282.689473][ C1] RAX: 0000000000000000 RBX: ffff88802855df00 RCX: ffffc900023e1000 [ 282.697423][ C1] RDX: 0000000000040000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 282.705375][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 282.713325][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 282.721279][ C1] R13: ffff88802a31a857 R14: ffff88802aacb920 R15: 000000000000000f [ 282.729236][ C1] ? __warn_printk+0x1a5/0x350 [ 282.733994][ C1] ? find_held_lock+0x2b/0x80 [ 282.738657][ C1] ? __pfx____ratelimit+0x10/0x10 [ 282.743666][ C1] cm109_urb_irq_callback+0x2ed/0xb80 [ 282.749030][ C1] __usb_hcd_giveback_urb+0x38b/0x610 [ 282.754392][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 282.759584][ C1] dummy_timer+0x1814/0x3a30 [ 282.764165][ C1] ? find_held_lock+0x2b/0x80 [ 282.768829][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 282.774459][ C1] ? debug_object_deactivate+0x1ec/0x3a0 [ 282.780080][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 282.786053][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 282.790972][ C1] ? rcu_is_watching+0x12/0xc0 [ 282.795722][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 282.801511][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 282.806430][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 282.811621][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 282.817323][ C1] ? read_tsc+0x9/0x20 [ 282.821389][ C1] hrtimer_run_softirq+0x17d/0x350 [ 282.826488][ C1] handle_softirqs+0x216/0x8e0 [ 282.831244][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 282.836519][ C1] __irq_exit_rcu+0x109/0x170 [ 282.841182][ C1] irq_exit_rcu+0x9/0x30 [ 282.845407][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 282.851020][ C1] [ 282.853930][ C1] [ 282.856860][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 282.862825][ C1] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 282.868529][ C1] Code: 00 e8 52 d5 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 90 e9 20 00 48 85 db 0f 85 55 01 00 00 e8 12 ee 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 97 49 87 [ 282.888117][ C1] RSP: 0018:ffffc90000a679c8 EFLAGS: 00000293 [ 282.894167][ C1] RAX: ffffffff8f2ecc58 RBX: 0000000000000000 RCX: ffffffff819a9de0 [ 282.902118][ C1] RDX: ffff88801eaac880 RSI: ffffffff819a9dee RDI: 0000000000000007 [ 282.910080][ C1] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 282.918050][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8f2ecc58 [ 282.926014][ C1] R13: ffffffff8f2ecc00 R14: ffffc90000a67a58 R15: dffffc0000000000 [ 282.933975][ C1] ? console_flush_all+0x990/0xc60 [ 282.939078][ C1] ? console_flush_all+0x99e/0xc60 [ 282.944179][ C1] ? console_flush_all+0x99e/0xc60 [ 282.949279][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 282.954731][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 282.960268][ C1] console_unlock+0xd8/0x210 [ 282.964844][ C1] ? __pfx_console_unlock+0x10/0x10 [ 282.970026][ C1] ? do_raw_spin_unlock+0xd1/0x230 [ 282.975122][ C1] ? _printk+0xc7/0x100 [ 282.979259][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 282.985047][ C1] vprintk_emit+0x418/0x6d0 [ 282.989539][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 282.994550][ C1] ? find_held_lock+0x2b/0x80 [ 282.999218][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 283.005449][ C1] _printk+0xc7/0x100 [ 283.009417][ C1] ? __pfx__printk+0x10/0x10 [ 283.013992][ C1] ? netlink_has_listeners+0x20f/0x430 [ 283.019434][ C1] ? __pfx____ratelimit+0x10/0x10 [ 283.024447][ C1] ? kauditd_hold_skb+0x1bc/0x250 [ 283.029460][ C1] kauditd_hold_skb+0x205/0x250 [ 283.034301][ C1] kauditd_send_queue+0x239/0x290 [ 283.039313][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 283.044676][ C1] kauditd_thread+0x623/0xa70 [ 283.049344][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 283.054534][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 283.060595][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.065781][ C1] ? __kthread_parkme+0x19e/0x250 [ 283.070803][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 283.075991][ C1] kthread+0x3c5/0x780 [ 283.080043][ C1] ? __pfx_kthread+0x10/0x10 [ 283.084614][ C1] ? rcu_is_watching+0x12/0xc0 [ 283.089364][ C1] ? __pfx_kthread+0x10/0x10 [ 283.093936][ C1] ret_from_fork+0x5d7/0x6f0 [ 283.098509][ C1] ? __pfx_kthread+0x10/0x10 [ 283.103100][ C1] ret_from_fork_asm+0x1a/0x30 [ 283.107861][ C1] [ 283.111063][ C1] Kernel Offset: disabled [ 283.115372][ C1] Rebooting in 86400 seconds..