last executing test programs: 9.301403383s ago: executing program 3 (id=318): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) setgroups(0x700, &(0x7f0000000280)) (fail_nth: 4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) write$cgroup_type(r5, &(0x7f0000000180), 0x9) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) 8.431563888s ago: executing program 1 (id=323): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400100bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000a5b000/0x2000)=nil, 0x2000}, 0x1}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, &(0x7f0000000400)=ANY=[], 0x30}], 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14d51beca400010000000000000000000700000a140000001100010000000000000000000500000a063226eb857401736b7479258dfda0475089800f6b58770000000000"], 0x28}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380), &(0x7f0000000480)=0x8) 8.292107506s ago: executing program 4 (id=324): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0), 0x80002, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000a00)={0x800, 0x258, 0x400, 0x1e0, 0x4da4, 0x7fffffff, 0x10, 0x2, {0x8000}, {0x9, 0xffff}, {0x7, 0xfffff737}, {0x7, 0x5, 0x1}, 0x0, 0x2, 0x6, 0x3ff, 0x1, 0xd, 0x2, 0x6, 0x8, 0x6, 0x8, 0x7f, 0x0, 0x200, 0x0, 0x6}) ioctl$TCFLSH(r3, 0x400455c8, 0x4) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e0d05c9000100009dff5e62103030"], 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000000580)=[{{&(0x7f0000000240)=@generic={0x11, "a000b9d61cdc15c4bfc7e049064bbbd6999eae3be0ac6f68d6fbfb0ed0cb259e9c53e54a32aa85cce6e53615e06f42918e8509786ca3e5aad940333b382f3c3fa03d68ef4f286010802347f9766539b7df8308fa38797ff884bbb7c48472af174168fc33f20985795a65c8d6a7a20f59c05dbb232978b98ec466eecbe45c"}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)="417363d08e12815a0a4cda54223583af8d163cbfd78d6afc853d837c17fc15f7e185b84f3418004c0e2a46472a7910dd6f07de25d8db8c327b501d52b96b3f28dca0636e9ca0182e38371e6a9fb75aa3f57dfe95f0f8e83a8b10586953c8e087459ba3d5dc5401e6a16a2483e6bd33a42aefe1b14ce08588e37b91668344ffe9b83fdf47d6f466cce6d51e0af4bff3e2a0820a01f2a45a8f1577fac2088862ae142ff502ea278a2869be2028fcce3b3bc65f5470f1cc0415832e5aa69ba267e3b7f9d93dc4cd37221db7b3ec8c30c0c15642197e44e04d8a3c0c8c6a49", 0xdd}], 0x1}}], 0x1, 0x20000000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x101000) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x85, 0x1000004f}, 0x2c) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000180), 0xfffffffffffffea3) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xfffffd2c, &(0x7f0000000100)}, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000100)=[{0x2, 0x0, {0x0, 0xff, 0x4}, {0x0, 0xff, 0x2}, 0xfc, 0xfe}, {0x1, 0x0, {0x0, 0x0, 0x3}, {0x0, 0x1, 0x1}, 0xfc, 0xfd}, {0x3, 0x1, {0x1, 0xf0, 0x5}, {0x1, 0xff}, 0xff, 0xff}], 0x60) 6.894703534s ago: executing program 3 (id=325): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffc, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f00001b4000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f00000002c0)=ANY=[]) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 6.622441116s ago: executing program 3 (id=326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="520389", 0x3}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc041) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x11, 0x1, 0x0, "0de7611efdb4f5ffffffe86200", 0x30313953}) 6.354687194s ago: executing program 1 (id=327): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpriority(0x2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r4 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r4, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000003ec50701feffff617affffffe8979e017c00"], 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 6.094638175s ago: executing program 2 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a32000000000809004000000001080004400000000008000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) 5.756338924s ago: executing program 2 (id=329): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280), 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/111, 0x6f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r6}, &(0x7f00000007c0), &(0x7f0000000800)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r6, &(0x7f0000000240), 0x0}, 0x20) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="d872cbdc66148f587ca46616d594b50b852ed22609c0d0d58d19d7fe26461cb99cdb05310236881b220d7809da697ef1d589984566b19f8042cc96839532fa1a4452ffd8ff2ead6a173a20095c6009fe43daa44ccbf133a34e43d6b60cbef79b4dec9c29d521f4f6f5521b1e5abaffe5ab27405add2da12cb92d0ca5374883e5f4b611db906c04f7bd5a06eec902548eec9e65874680b56bbf47688bde18e7e79a344c746aa823c72b90417edfd48e8b192993b23ab7907bed15e0621e5667a85e31fbe8c7a275789763698f1459b72113034254e023f2b84a22f12d3b211de596c10c2e2263a1b705a6f6d8fa54", 0xee, r7) 5.559589833s ago: executing program 0 (id=330): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x4e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf2505000000080009000900000005000200000000008926e879154d136e5cc82692857cdbeca50285e003320bb902fc3d853e6c2c485387597197eb006f2ad16ca7608202de4bb384a811c41f53bee78dd66255e4e8d15315f8e3ed0167a878b69a53db816f3a72744eff15e5c5a0bc92c8bb61aed9a9258fb704a0abe05b4405c23b28d425df8bb74032fc697a65dec5f3cfa4d6ee1e8a9bfda70751e7b4ff01935bf23adfbba28dafa81b49a34df6b7100d458c5154bab33695c470e0bd7f3458f365c6d972ee8c64f6fa1035f74f9490804d95a80a97a385d31fc91a319d864dba5d327782d56f6b4166ecd8"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x80045438, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002a00)=""/4102, 0x1006}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2}, 0x1801}], 0x1, 0x120, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@private1, @in=@local, 0x0, 0xb, 0x0, 0x0, 0x2, 0x0, 0x20, 0xae}, {0x0, 0x0, 0xffffffffffffffff}, {0x200000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffff8}}, 0xe8) capset(&(0x7f0000000440)={0x19980330}, &(0x7f00000003c0)={0xfff, 0x101, 0x0, 0x81, 0xffffffbb}) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7fbd}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4005}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x28}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3dd9f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900"/275], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 4.805044451s ago: executing program 1 (id=331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x74000000) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000000000)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000002c0)=0x24f8, 0x4) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 4.542784619s ago: executing program 4 (id=332): r0 = syz_open_dev$dri(0x0, 0x1, 0x80841) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000240)={0x8}) 4.529639723s ago: executing program 0 (id=333): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000040)={0x3, 0x1, [0x7, 0x4, 0x2, 0xd05, 0x7, 0x1, 0x5, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpid() get_robust_list(r1, &(0x7f0000000200)=0x0, &(0x7f0000000240)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 4.301728069s ago: executing program 3 (id=334): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000940), 0xa70a, 0x0) getresuid(&(0x7f0000002040), &(0x7f0000002080)=0x0, &(0x7f00000020c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = getpgid(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000004140)='./file0\x00', &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000004200)='./file0\x00', &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r3, &(0x7f0000004300)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000300)="6de25e14582dde05b15bf4d6734150df873fa6abda50af0ef90bff48c9834ac3ecdae8bf9a08b08926f4b3774633eeab1108bf8ce1d191caef3d523b27aa4007d4665de6495e173e919a6ac35f297eaddd94c64e88ce08dbd197f2a71f80441ef071e338cbf850ac1f761ca7366d6d2c8b42ec0d50f1dd4b4b6e86901ed196abb9b89888ed8c8b1810fffecb68f611df0a5416225d54f4ab09025d5e2b48c60ecd4389a676df5158743cac70c5434d8fe1bf597954ab81c78323f2ebb065aa9bcb57eadd", 0xc4}], 0x1, 0x0, 0x0, 0x1}}, {{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000280)="bb0624c868916b984bb108c747bee1afcac88bfb8d5be7b817f019dd55ba783dd9", 0x21}, {&(0x7f0000000500)="e29fc5223a4eb7ce32f71af6901f819b31869d2019885d3c788efcfb68df78cedc813085309d14edcb212df5728eb7157c0417a00c7ea2a3ddc431907a406bc436f37c885ee59dd28ef2d537eda5b2963775f7197eeea06a82cb09ab278902d48cb1bb6a741934a4b4ab4607d73ebffd4f77e95f140db69a476cc6ec6ed3c98fd87d05c6db039304af171c6208cba5e4ae13c3d76bd70e70abff6c1e25d2b590f81698d951654706f692d4bdc6bebc50e02eac51c3c3fb2123634816778190fbca583dc799688cc0ae49761a345de374751cc6d5e45a49335cd50ecdf9042e273661a756023f31b1225faa97d6de5fda8ce531", 0xf3}, {&(0x7f0000000600)="863165f6d34a94e9c7cda0779162aff9ceff24729e6a1bb90064478c53158d59de14bfe56f7e11da6a8d45679dfc9923cba0eeb2fb12aa006f44a941d846a552ea596667b3ccc57994635765f5f7748300ed23f9a7d367f931110e461a08561dc0091f0cbd9aa4cf03c7ee6554fdcbd9e376ddc41be9326730adaedd61c96380187c6d38f50af4b1277e975728738509c02de17a5b72fe76935671aa0ecfb61956ce2c5a5824366e288c2d0d2b02690642d2cfd47d1afbb999", 0xb9}, {&(0x7f00000006c0)="1f74aae958ee2577d7f3ae38a1f51bd87e59713adfa35791d174a1b96e9e4bbb36891207ef1cdf80e022d3edf66c6202a8dfe5e358149b52e6eed84e1a51858a56525f049c8fdc6a25b964196705506c3689a12266f6f6a944622c534341214bf859e5d2ebb9b0891c393573a3dd0aad33fc63dd293f11e778c60c68c6193f1ff8cc5226dc957d9bd3b619cec8d8d514da23f8ae19321748177d94517421bf3f1d0de88d6155a89b3681767aed13b0d36954560decf3003a034dba266a354d8c856d85", 0xc3}], 0x4, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x20, 0x1, 0x1, [r1, r5, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2, r7, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r1, r8, r4, 0xffffffffffffffff, r0, r3, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x28, 0x1, 0x1, [r3, r1, r3, r0, r3, r4]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, r4, r9]}}], 0x120, 0x80}}, {{&(0x7f00000043c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="2e7dbbf2084797200f9f7b6195f8389d69149405c5a33e7f0c0eabfb896616ef640e9749b2a4a44b93bb315dfa49bd759780720fef19368f2c086bf855d6233b8a4d3d68f0106e8ce42d463ff86d2fcc55bb1498784ceda6db4c2fbc2291b577a0c56b1d2deb8932e3c5dc04cb04b9af35827ba6ed22dc7130aeeef43dde512ab9e49d91a0a2e56676602be5aeba625a45efb4eff3a8b209ebdd5003448d21", 0x9f}, {&(0x7f0000001c00)="398a1cd50c8fbde6a0c87bb818896fb7a910e60f2688b067eb2487ef9342e819", 0x20}, {&(0x7f0000001c40)="42472db788025b316c09fc88eeea34aa892fbe362e883b19fca7e1609ccc2987918f3ab5f2e6eed49b2ebdddab591db21a912fed317ff7e1c5745d742877f0e7d29f00af93a1f921256bc858e654ab00ba9f4df076e20839ba747eb244c94dc6688f99093f22b023e56cf116510e805a3b4b1e461cd1cc89ac70967b73aa", 0x7e}, {&(0x7f0000001d00)="7c7077793403423298573c3dce52ab39c623163180fe0d1c8c5fedac2e103028fdc03fe90ef1f8bd8f79af2c31d30279866346e68c27c0d30d91ddb8b3ceb53832036a9c4c259c2fd41eb43a798c762af1f63b1fd600fd3a5c13c22d8ada59c30ba9e808e41844bb10f1ef5cfd512757719e5b6af56c0069a6da0a850a6f67c07e6e4743d44cb3d1a69ca00b610fec1c25e2b8bc2c596c24e05c4876cc52519d28f064dbf45232d28f82e4c29f839eb974a5d79d347f537222ca2fe4bbcf9fb6510243f8d65e2ee0349f234be1b4787f1c663f3f4976a70c81f21c53d53eb07ef6c4d1111fa183c01bdc0c18bc", 0xed}, {&(0x7f0000001e00)="3133149c47490b1f940d01", 0xb}, {&(0x7f0000001e40)="6b2de698326182e40e009007b0021055a068fb286b00e04bf2a64130a1eee1739d3ff4f781117b3d74a49cfe6fdcc6659f5d3169b894c0312c820bcce2a03d9f5fe7a6cca23f53bbf4168e212a5605a074908562bf8c2e029c3cf4403be22602bf5af0cdfb06248faf32bcd7b9af50664b8972f99e25e63542fd9fad838ffee3b79eb89d83092458c745585bc9fd2dbd78539ece718bd0f6e70e10df26bde16e9faa02c5ab337444e2dcdc896d2e85f2db01051314ecca88951bebce562c2762481ac533d2293c89d5da4f006a8952c072d3ba", 0xd3}, {&(0x7f0000001f40)="f48f52aea1bb2066920e6c01827898ac4946ff95f7b59da5839375df0732deceb801011f8c45649da8f72369f12007afcb0527b779b1bf1b1bd1c19dacdd79f8d6e058367780ef83a110043409f549916ca9a3d9fbed305c8e2e631421fc313b85f9f0b96eeac5d76c5f6fde7fe18c9d01b2477e908b", 0x76}], 0x8, &(0x7f00000042c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x40, 0x20040c0}}], 0x3, 0x4011) sendfile(r1, r1, 0x0, 0x200000) 4.027888007s ago: executing program 4 (id=335): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000075da903b00000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffc0, 0x6, 0x800, 0x1000000, 0x709d}, 0x7, 0x1, 0x7, 0xfffffffe, 0xb38, 0xe, 0x3, 0xc, 0x1, 0x30, {0x99, 0x7, 0x6, 0x401, 0x6, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffff0900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x25}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket(0x1d, 0x2, 0x6) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa0000380000000000019078ac1e0001ac1414aa0b009078120002282500000000640000002f00007f000001ac1414aaeafa09bf1f000000"], 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r12, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', r11, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10, 0x5, 0x100}, 0x10}, 0x94) 4.02538588s ago: executing program 0 (id=336): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x8, 0x7, 0xffffffff, 0xc}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$netlink(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prlimit64(0x0, 0x8, &(0x7f0000000400)={0x2, 0x81}, &(0x7f0000000440)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000033bc0e00000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) 3.457301709s ago: executing program 1 (id=337): ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000440)={{@hyper, 0x4}, 0x1, 0x100000001, 0x8000000000000000, 0xfffffffffffffff9, 0x200, 0xa, 0x85c, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0xffffffffffffffed}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) close_range(r2, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x60, 0x80800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) r9 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0xac102) ioctl$BLKREPORTZONE(r9, 0xc0101282, &(0x7f0000000680)={0x7f}) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)=0x200009) read$dsp(r6, &(0x7f00000011c0)=""/4106, 0x100a) syz_open_dev$MSR(&(0x7f0000000180), 0x300, 0x0) 3.456435635s ago: executing program 4 (id=338): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400100bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000a5b000/0x2000)=nil, 0x2000}, 0x1}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, &(0x7f0000000400)=ANY=[], 0x30}], 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14d51beca400010000000000000000000700000a140000001100010000000000000000000500000a063226eb857401736b7479258dfda0475089800f6b58770000000000"], 0x28}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380), &(0x7f0000000480)=0x8) 3.303837271s ago: executing program 2 (id=339): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400100bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000a5b000/0x2000)=nil, 0x2000}, 0x1}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, &(0x7f0000000400)=ANY=[], 0x30}], 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14d51beca400010000000000000000000700000a140000001100010000000000000000000500000a063226eb857401736b7479258dfda0475089800f6b58770000000000"], 0x28}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380), &(0x7f0000000480)=0x8) 2.226494741s ago: executing program 1 (id=340): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000040)={0x3, 0x1, [0x7, 0x4, 0x2, 0xd05, 0x7, 0x1, 0x5, 0x2]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpid() get_robust_list(r1, &(0x7f0000000200)=0x0, &(0x7f0000000240)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 1.463590299s ago: executing program 3 (id=341): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x8, 0x7, 0xffffffff, 0xc}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$netlink(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prlimit64(0x0, 0x8, &(0x7f0000000400)={0x2, 0x81}, &(0x7f0000000440)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x8000000010, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000033bc0e00000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) 1.345629301s ago: executing program 4 (id=342): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private}}}}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x7, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc5, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0x8, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x8, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x2}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x8, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x7, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x1ff, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x3}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae47, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x3de, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x401, 0x4, 0xffffffff, 0x80}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x5}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1000, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0x0, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x2, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x1, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x3, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x4, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x0, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x0, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5, 0x3}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x8, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x8, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x7, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x9, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x2}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000040)={@my=0x0, 0x6}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001380)={0x0, 0x4}) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'pids'}, {0x2d, 'cpuacct'}, {0x2b, 'net'}]}, 0x14) 1.284884685s ago: executing program 2 (id=343): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x1) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e040f2d20"], 0x7) 1.227503298s ago: executing program 1 (id=344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="520389", 0x3}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0xc041) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x11, 0x1, 0x0, "0de7611efdb4f5ffffffe86200", 0x30313953}) 1.170568982s ago: executing program 4 (id=345): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r2, 0x6000000) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000001080)) r4 = fanotify_init(0x200, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x71, 0x40000009, r5, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x4000) (async) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r6, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0), 0xe7, 0x0, 0x1, 0x7}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x32, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 1.139665195s ago: executing program 0 (id=346): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="800037e92207009e", 0x8, 0x40894, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x17, 0x2, 0xff}, {0x6, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r10, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x150, 0x0, 0x0, [{{0x3, 0x2, 0x37a, 0x6, 0x9b, 0xc4b0, {0x0, 0x4, 0x8fb, 0x2000000ec3, 0x7, 0x8, 0x7f, 0xfffff5e3, 0x1, 0xa000, 0x5, r8, r9, 0xfffff077, 0xa}}, {0x4, 0x4, 0x8, 0x800, 'rootmode'}}, {{0x100003, 0x2, 0x900000000000000, 0x1ff, 0x4, 0x2, {0x6, 0x10, 0xc6, 0xffffffffffffffff, 0x2, 0xffffffffffffff81, 0x80, 0x5, 0x4000402, 0xc000, 0xff, r8, 0x0, 0x4, 0x4a}}, {0x6, 0x10000, 0x8, 0x2, 'rootmode'}}]}, 0x0, 0x0, 0x0}) 749.898108ms ago: executing program 0 (id=347): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48001059, r2, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xc, 0x4, 0x4, 0x3abe, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001ac0)={0xffffffffffffffff, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000001bc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0x68, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10) sendmmsg$inet(r7, &(0x7f0000001f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="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", 0xff}], 0x1, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf86}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x184, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @cipso={0x86, 0x60, 0x1, [{0x1, 0xf, "53da1c14e95866fed553b478e7"}, {0x6, 0xb, "7579258fdf450810ea"}, {0x0, 0xe, "78b347175ac92bc030eff61b"}, {0x5, 0x7, "4ee4fe9493"}, {0x5, 0x2}, {0x6, 0xa, "e5f20683906d21eb"}, {0x1, 0xe, "c6c0ae0cd22d2add8448cbb5"}, {0x1, 0x11, "176473e842101ed0f5eb6d71eac432"}]}, @timestamp={0x44, 0x8, 0x2a, 0x0, 0x6, [0x4]}, @timestamp_prespec={0x44, 0x4c, 0x82, 0x3, 0x1, [{@private=0xa010101, 0x8}, {@multicast2, 0x5}, {@local, 0x7}, {@multicast2, 0x6}, {@remote, 0x9}, {@broadcast, 0x2}, {@broadcast, 0xfffffff9}, {@broadcast}, {@broadcast, 0x8}]}, @noop, @cipso={0x86, 0x3e, 0x3, [{0x0, 0x5, "7cc0a3"}, {0x7, 0xf, "b1144fcdeb46d9ec90381134d8"}, {0x4, 0xe, "af29127e7807584fb8928395"}, {0x5, 0xd, "a52dfb29acec0f5b614a1b"}, {0x1, 0x9, "da2cbcfe03d66f"}]}, @ssrr={0x89, 0x23, 0x2a, [@local, @multicast2, @loopback, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @broadcast]}, @cipso={0x86, 0x56, 0x1, [{0x5, 0x2}, {0x5, 0x8, "dc060e7d7e57"}, {0x1, 0xb, "2b281653aa546b89bb"}, {0x7, 0x7, "8c419c134d"}, {0x7, 0xe, "d9c94936764644a517982740"}, {0x2, 0x9, "5d5f9e188a122d"}, {0x2, 0xf, "10f1ffd88a70c5cb91759abe73"}, {0x6859957403fa0f7e, 0x3, "14"}, {0x6, 0x8, "9fb82504456b"}, {0x5, 0x3, '5'}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x208}}, {{&(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000640)="003d26fdab61e8f0902dbd16d161ece7579d5acd5d33b6815e29dda6c8afa14308f6f5c25ec916884abd63775fb7851dab3b259de1292b0ad001c1bae563bf98de23d6b25ffb44643d4220731b491ca3612b4fd6c144ac0d7f82bb39186b40d82b120d8c3abc4c178e6880f804b66cecf213de6f2ead747f2bb9abd1c81d5bb928e65a98ebf84bd2eaa2dbae1d490fb9b045862b4f52397e19460ac9dfd78bf50ae3f77e", 0xa4}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="77c3dcd358cec74bce47d7bac0bab96f518b84bcbbbd70278fc9399b08cb3ce1b69e6ec07517cc38bede0753e8178cf73c3acca5142b4706afbcb48b93901165238121736d62b32aadcbac7bf750", 0x4e}, {&(0x7f0000001780)="eccb37e09dc357157d6f0e87384d058e45a08c7eff3436d890d5ae338ef4d9b6cc9bf034c67a4e3e864398a942aadb4bb16448227dedfe97bf9fdbf1dd1d5199dbf6a7097ea24c1a9e8b9c33d7fd78fd279b4ce781bff401e349bb66f5934f24869576f443a33630680780e0f04570f8949e3dd5fb117a5e0e894c1e86de7030d879503bd3250a2831fec46c774d8a0c30a910369619d8a6a81b46af832cbafd5c0cfb15961dc982855c2a7cef8ba767def70186b632", 0xb6}, {&(0x7f0000001840)="c12c86dabd82cb22e37809f9ab7f743803a0e94fc95f7f6c0d99f037e3eec2a134bf5c093fab1bc35cd1eace647cf84768568a647f0aa0ed707678c18583837db341563eb4395861679d61530b0b6323fd1a264e370ed6654c5039c44280fa4715be84ea66774d1bef43ed04e8949e1b0e19c28785796dd41bbcb026a25b2b6d0f515877474bb2ad2e9ca6604322879e275ea9ff111f0cb83405432ac8c092b4b7e353e4c80bfdb2c2996b15d5834caf195df37ce66288801b41aa842cd1555fb8489ecc5ea7b5320aa3e3bd170ee130c1377e4e8320b4b757e9387e21516c94b04557ff47f55f3f68c6a8b9cf48bab5ebe7a073abe35487c3daba6873", 0xfd}, {&(0x7f0000001940)="e25a1b72466dfa76ad6ba7801ceacc7dd8c269b3147f88c251d7b619100bb7ecaa3c1de848b2e6763bae33e20329325bc826681b548c1e36150d6445f36864538515eb200e197de0f5b286452b5f76b1bf3542728c2bfd3434c06c299fd9523adebed5e0be88995a22070daaebd24934e31d89c1cb1c16bcdc645bb93ca672a66ef7304e7fc1b439792fe7f72d5218e0f9a3e26adc6bcdd4209bff5a8af1ee331a1faf8288c70bd7f014a30682dd3d01c23f1ba0e956519d3f4199a04cad14225d4cece8559d2e24704f", 0xca}], 0x6}}, {{&(0x7f0000000380)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001ac0), 0x0, &(0x7f0000001e00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x33}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x515}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0xb}, @loopback}}}], 0xf8}}], 0x66, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000040)={0x0, 0xb}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x3a) syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x40) modify_ldt$write(0x1, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x46, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000914303b9850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r13}, 0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 625.107419ms ago: executing program 0 (id=348): ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x8008700b, 0x0) unshare(0x8040480) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x8, 0xcb, 0x4}, 0x1c) dup3(r4, r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0xffff, 0x81, 0x10000, 0x94d4, 0xff, 0xdf9, 0x7, 0xc13, r5}, &(0x7f0000000140)=0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001800)=@raw={'raw\x00', 0x9, 0x3, 0x1c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'veth1_virt_wifi\x00', 'veth0_to_hsr\x00', {0xff}, {0x80}, 0x5e, 0x0, 0x23}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @local, 0x0, 0xffffffff, 'veth0_macvtap\x00', 'syzkaller0\x00', {0xff}, {}, 0x1, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) unshare(0x2a020480) 154.74353ms ago: executing program 2 (id=349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x10000000000000, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000014c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0xa, 0x4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x2a}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 147.213801ms ago: executing program 3 (id=350): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75f800"/192], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000400)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r4 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3d0}) close(r4) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00'}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000fcdbdf252e00000008", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x8894}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x33, 0x1, 0xe1bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 0s ago: executing program 2 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000040)={0x3, 0x8, {0x0}, {}, 0x7, 0x632c}) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) kernel console output (not intermixed with test programs): x timeout [ 61.957840][ T5814] Bluetooth: hci0: command tx timeout [ 61.957896][ T5823] Bluetooth: hci3: command tx timeout [ 61.974651][ T5811] veth1_macvtap: entered promiscuous mode [ 62.023848][ T5823] Bluetooth: hci2: command tx timeout [ 62.053189][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.067665][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.098840][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.116074][ T5810] veth0_vlan: entered promiscuous mode [ 62.128019][ T5810] veth1_vlan: entered promiscuous mode [ 62.137127][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.147013][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.156406][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.165656][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.185284][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.256685][ T5821] veth0_vlan: entered promiscuous mode [ 62.277796][ T5810] veth0_macvtap: entered promiscuous mode [ 62.294709][ T5808] veth0_vlan: entered promiscuous mode [ 62.306672][ T5810] veth1_macvtap: entered promiscuous mode [ 62.323473][ T5821] veth1_vlan: entered promiscuous mode [ 62.357225][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.369745][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.369827][ T5808] veth1_vlan: entered promiscuous mode [ 62.403588][ T5817] veth0_vlan: entered promiscuous mode [ 62.432035][ T5821] veth0_macvtap: entered promiscuous mode [ 62.440566][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.450794][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.451922][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.467092][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.476633][ T5821] veth1_macvtap: entered promiscuous mode [ 62.488456][ T5817] veth1_vlan: entered promiscuous mode [ 62.497346][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.507581][ T5810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.516370][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.525165][ T5810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.543456][ T30] audit: type=1400 audit(1751057330.928:88): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.8IG6XT/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.575645][ T5808] veth0_macvtap: entered promiscuous mode [ 62.591962][ T30] audit: type=1400 audit(1751057330.928:89): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.598581][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.614992][ T30] audit: type=1400 audit(1751057330.928:90): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.8IG6XT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.646317][ T5817] veth0_macvtap: entered promiscuous mode [ 62.661441][ T30] audit: type=1400 audit(1751057330.928:91): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 62.664836][ T5808] veth1_macvtap: entered promiscuous mode [ 62.689621][ T30] audit: type=1400 audit(1751057330.928:92): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.8IG6XT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 62.717538][ T30] audit: type=1400 audit(1751057330.928:93): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/root/syzkaller.8IG6XT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.747482][ T30] audit: type=1400 audit(1751057330.938:94): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.771333][ T30] audit: type=1400 audit(1751057330.948:95): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.795538][ T30] audit: type=1400 audit(1751057330.958:96): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="gadgetfs" ino=6365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 62.799347][ T5817] veth1_macvtap: entered promiscuous mode [ 62.847693][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.881048][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.906745][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.923679][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.932645][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.941345][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.957184][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.995244][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.017810][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.043460][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.076672][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.080384][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.097633][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.102981][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.107612][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.122898][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.136057][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.146425][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.156874][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.166713][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.238574][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.247908][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.311061][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.348565][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.429428][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.452690][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.471965][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.472700][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.618656][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.618674][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.742494][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.742513][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.781956][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.781975][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.049288][ T5823] Bluetooth: hci3: command tx timeout [ 64.066013][ T51] Bluetooth: hci1: command tx timeout [ 64.066203][ T5822] Bluetooth: hci0: command tx timeout [ 64.071725][ T5814] Bluetooth: hci4: command tx timeout [ 64.105230][ T51] Bluetooth: hci2: command tx timeout [ 64.453822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.591963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.919680][ T5947] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 64.952157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.962029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 65.302354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.622409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.631048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.639603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.648127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.656595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.719637][ T5962] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 65.797857][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'. [ 65.809405][ T5963] netlink: 124 bytes leftover after parsing attributes in process `syz.0.11'. [ 66.102123][ T51] Bluetooth: hci3: command tx timeout [ 66.107551][ T51] Bluetooth: hci1: command tx timeout [ 66.112964][ T51] Bluetooth: hci0: command tx timeout [ 66.118324][ T51] Bluetooth: hci4: command tx timeout [ 66.166494][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 66.166509][ T30] audit: type=1400 audit(1751057334.548:184): avc: denied { write } for pid=5971 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.191992][ C1] vkms_vblank_simulate: vblank timer overrun [ 66.201218][ T5814] Bluetooth: hci2: command tx timeout [ 66.267746][ T30] audit: type=1400 audit(1751057334.648:185): avc: denied { read } for pid=5973 comm="syz.2.14" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.290606][ C1] vkms_vblank_simulate: vblank timer overrun [ 66.299779][ T5956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.355343][ T30] audit: type=1400 audit(1751057334.648:186): avc: denied { open } for pid=5973 comm="syz.2.14" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.379142][ C1] vkms_vblank_simulate: vblank timer overrun [ 66.385709][ T30] audit: type=1400 audit(1751057334.678:187): avc: denied { create } for pid=5973 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.592755][ T43] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 66.600882][ T30] audit: type=1400 audit(1751057334.968:188): avc: denied { create } for pid=5980 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 66.761615][ T30] audit: type=1400 audit(1751057335.078:189): avc: denied { create } for pid=5975 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.834402][ T43] usb 3-1: Invalid ep0 maxpacket: 32 [ 66.866228][ T30] audit: type=1400 audit(1751057335.088:190): avc: denied { write } for pid=5975 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.886498][ T30] audit: type=1400 audit(1751057335.138:191): avc: denied { write } for pid=5980 comm="syz.3.17" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.909453][ C1] vkms_vblank_simulate: vblank timer overrun [ 66.918938][ T30] audit: type=1400 audit(1751057335.148:192): avc: denied { ioctl } for pid=5980 comm="syz.3.17" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.943722][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.124286][ T30] audit: type=1400 audit(1751057335.148:193): avc: denied { read } for pid=5980 comm="syz.3.17" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.162045][ T43] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 67.511698][ T43] usb 3-1: Invalid ep0 maxpacket: 32 [ 67.517304][ T43] usb usb3-port1: attempt power cycle [ 68.237786][ T43] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 68.287736][ T43] usb 3-1: Invalid ep0 maxpacket: 32 [ 68.502977][ T5998] netlink: 80 bytes leftover after parsing attributes in process `syz.3.21'. [ 68.532461][ T43] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 68.616562][ T5998] netlink: 5 bytes leftover after parsing attributes in process `syz.3.21'. [ 68.633111][ T43] usb 3-1: Invalid ep0 maxpacket: 32 [ 68.639183][ T43] usb usb3-port1: unable to enumerate USB device [ 69.148259][ T43] IPVS: starting estimator thread 0... [ 69.157380][ T6007] ALSA: mixer_oss: invalid OSS volume '' [ 69.316007][ T6012] IPVS: using max 42 ests per chain, 100800 per kthread [ 70.913978][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.916535][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.046265][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.195281][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 71.195296][ T30] audit: type=1400 audit(1751057339.578:212): avc: denied { create } for pid=6045 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 71.223556][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 71.235567][ T6047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.33'. [ 71.248811][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 71.249602][ T6048] Zero length message leads to an empty skb [ 71.269469][ T30] audit: type=1400 audit(1751057339.608:213): avc: denied { create } for pid=6045 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.304997][ T30] audit: type=1400 audit(1751057339.608:214): avc: denied { setopt } for pid=6045 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.324111][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.343176][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.347472][ T30] audit: type=1400 audit(1751057339.608:215): avc: denied { ioctl } for pid=6045 comm="syz.4.33" path="socket:[8341]" dev="sockfs" ino=8341 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 71.406938][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 71.424482][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.447969][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.495969][ T43] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 71.507622][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.534578][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.544060][ T43] usb 1-1: Product: syz [ 71.548454][ T43] usb 1-1: Manufacturer: syz [ 71.553454][ T43] usb 1-1: SerialNumber: syz [ 71.587055][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.602191][ T43] usb 1-1: config 0 descriptor?? [ 71.643060][ T30] audit: type=1400 audit(1751057340.018:216): avc: denied { write } for pid=6055 comm="syz.3.36" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.654220][ T43] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 71.726916][ T30] audit: type=1400 audit(1751057340.028:217): avc: denied { open } for pid=6055 comm="syz.3.36" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.730883][ T43] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card [ 71.785285][ T43] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 71.809807][ T30] audit: type=1400 audit(1751057340.028:218): avc: denied { ioctl } for pid=6055 comm="syz.3.36" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.908399][ T30] audit: type=1400 audit(1751057340.288:219): avc: denied { name_bind } for pid=6050 comm="syz.2.34" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 71.914803][ T43] usb 1-1: USB disconnect, device number 2 [ 72.081458][ T30] audit: type=1400 audit(1751057340.318:220): avc: denied { node_bind } for pid=6050 comm="syz.2.34" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 72.221720][ T5890] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.294956][ T30] audit: type=1400 audit(1751057340.348:221): avc: denied { bind } for pid=6060 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.671678][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 74.079493][ T5890] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 74.087786][ T5890] usb 4-1: config 0 has no interface number 0 [ 74.094064][ T5890] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.114597][ T5890] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.124687][ T5890] usb 4-1: config 0 interface 8 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.137718][ T5890] usb 4-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 74.148064][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.203373][ T5890] usb 4-1: config 0 descriptor?? [ 74.375114][ T6070] capability: warning: `syz.0.40' uses 32-bit capabilities (legacy support in use) [ 74.674205][ T6076] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 74.681911][ T6076] netlink: 224 bytes leftover after parsing attributes in process `syz.0.40'. [ 75.137768][ T5868] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.475032][ T5890] usbhid 4-1:0.8: can't add hid device: -71 [ 75.515381][ T5890] usbhid 4-1:0.8: probe with driver usbhid failed with error -71 [ 75.607702][ T5890] usb 4-1: USB disconnect, device number 2 [ 75.742183][ T5926] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 76.012509][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.041761][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.144343][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.218989][ T5868] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.251689][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.288544][ T5926] usb 3-1: config 6 has an invalid interface number: 190 but max is 0 [ 76.297762][ T5868] usb 5-1: config 0 descriptor?? [ 76.327295][ T5926] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 76.367974][ T5926] usb 3-1: config 6 has no interface number 0 [ 76.405097][ T5926] usb 3-1: config 6 interface 190 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 1023 [ 76.413679][ T6094] binder: 6091:6094 ioctl c0306201 200000000640 returned -22 [ 76.422886][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 76.422899][ T30] audit: type=1400 audit(1751057344.798:234): avc: denied { read } for pid=6091 comm="syz.1.46" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.440277][ T5926] usb 3-1: config 6 interface 190 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 76.678913][ T30] audit: type=1400 audit(1751057344.798:235): avc: denied { open } for pid=6091 comm="syz.1.46" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.822190][ T5926] usb 3-1: config 6 interface 190 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 76.996722][ T6075] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.670961][ T5875] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 78.042914][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 78.051680][ T30] audit: type=1400 audit(1751057344.798:236): avc: denied { ioctl } for pid=6091 comm="syz.1.46" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.078499][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 78.085306][ T5926] usb 3-1: config 6 interface 190 altsetting 2 endpoint 0x9 has invalid maxpacket 1007, setting to 64 [ 78.096550][ T6075] ceph: No mds server is up or the cluster is laggy [ 78.113427][ T5875] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 78.113453][ T5875] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 78.113470][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 78.113518][ T5875] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 78.113554][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.113576][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 78.113601][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 78.113625][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 78.116243][ T5875] usb 1-1: string descriptor 0 read error: -22 [ 78.116367][ T5875] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 78.116388][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.121893][ T5875] usb 1-1: config 0 descriptor?? [ 78.122544][ T6093] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 78.123825][ T5875] hub 1-1:0.0: bad descriptor, ignoring hub [ 78.123845][ T5875] hub 1-1:0.0: probe with driver hub failed with error -5 [ 78.139179][ T5875] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 78.157520][ T5926] usb 3-1: config 6 interface 190 has no altsetting 0 [ 78.200022][ T30] audit: type=1400 audit(1751057344.808:237): avc: denied { read open } for pid=6095 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.335140][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.368633][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.719691][ T30] audit: type=1400 audit(1751057344.808:238): avc: denied { getattr } for pid=6095 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.746907][ T5926] usb 3-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=82.89 [ 78.756254][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.810339][ T5926] usb 3-1: can't set config #6, error -71 [ 78.873868][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 78.882703][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 79.005539][ T5926] usb 3-1: USB disconnect, device number 6 [ 79.012215][ T30] audit: type=1400 audit(1751057345.418:239): avc: denied { watch } for pid=6097 comm="syz.3.48" path="/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.166348][ T5922] usb 1-1: USB disconnect, device number 3 [ 79.166395][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 79.245743][ T30] audit: type=1400 audit(1751057345.418:240): avc: denied { watch_sb watch_reads } for pid=6097 comm="syz.3.48" path="/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.322764][ T5868] usbhid 5-1:0.0: can't add hid device: -71 [ 79.342062][ T5868] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.374702][ T30] audit: type=1400 audit(1751057345.428:241): avc: denied { execute } for pid=6097 comm="syz.3.48" path="/11/file1" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.403969][ T30] audit: type=1400 audit(1751057346.538:242): avc: denied { read } for pid=5170 comm="acpid" name="mouse1" dev="devtmpfs" ino=2799 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.427430][ T5868] usb 5-1: USB disconnect, device number 2 [ 79.431190][ T30] audit: type=1400 audit(1751057346.538:243): avc: denied { bind } for pid=6073 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.150056][ T9] cfg80211: failed to load regulatory.db [ 81.416367][ T6169] Bluetooth: (null): Too short H5 packet [ 81.571748][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.821757][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 81.828536][ T9] usb 2-1: config 0 has no interfaces? [ 81.859824][ T9] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 81.911803][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.930463][ T9] usb 2-1: Product: syz [ 81.962981][ T9] usb 2-1: Manufacturer: syz [ 81.967606][ T9] usb 2-1: SerialNumber: syz [ 81.998510][ T9] usb 2-1: config 0 descriptor?? [ 82.051692][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 82.051711][ T30] audit: type=1400 audit(1751057350.348:276): avc: denied { write } for pid=6180 comm="syz.0.63" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.259962][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 82.354876][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 82.714815][ T9] usb 2-1: USB disconnect, device number 2 [ 82.758538][ T30] audit: type=1400 audit(1751057351.138:277): avc: denied { bind } for pid=6186 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.886485][ T30] audit: type=1400 audit(1751057351.138:278): avc: denied { name_bind } for pid=6186 comm="syz.0.65" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.907986][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.420337][ T30] audit: type=1400 audit(1751057351.138:279): avc: denied { node_bind } for pid=6186 comm="syz.0.65" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 83.451752][ T5926] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 83.469891][ T30] audit: type=1400 audit(1751057351.158:280): avc: denied { write } for pid=6186 comm="syz.0.65" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.502754][ T30] audit: type=1400 audit(1751057351.158:281): avc: denied { connect } for pid=6186 comm="syz.0.65" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.524485][ T30] audit: type=1400 audit(1751057351.168:282): avc: denied { name_connect } for pid=6186 comm="syz.0.65" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.278281][ T30] audit: type=1400 audit(1751057352.088:283): avc: denied { create } for pid=6196 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.381957][ T5926] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 84.451812][ T30] audit: type=1400 audit(1751057352.098:284): avc: denied { write } for pid=6196 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.475358][ T5926] usb 1-1: config 0 has no interface number 0 [ 84.510360][ T5926] usb 1-1: config 0 interface 66 has no altsetting 0 [ 84.517402][ T5926] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 84.527509][ T30] audit: type=1400 audit(1751057352.098:285): avc: denied { read } for pid=6196 comm="syz.4.67" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.547345][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.566002][ T5926] usb 1-1: config 0 descriptor?? [ 85.316491][ T9] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 85.513020][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.68'. [ 85.593679][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 85.641755][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.853513][ T9] usb 5-1: config 0 descriptor?? [ 85.888050][ T9] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 86.272774][ T5926] pegasus 1-1:0.66: probe with driver pegasus failed with error -32 [ 86.365250][ T6230] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 86.374094][ T6230] netlink: 224 bytes leftover after parsing attributes in process `syz.1.73'. [ 87.008876][ T43] usb 1-1: USB disconnect, device number 4 [ 87.397109][ T5926] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.723049][ T5926] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 87.729575][ T9] pwc: Failed to set LED on/off time (-71) [ 87.731230][ T5926] usb 4-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 87.731250][ T5926] usb 4-1: config 0 has no interface number 0 [ 87.763615][ T9] pwc: send_video_command error -71 [ 87.844814][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 88.061978][ T5852] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 88.191161][ T5926] usb 4-1: config 0 interface 184 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 88.208426][ T5926] usb 4-1: New USB device found, idVendor=0489, idProduct=e0b4, bcdDevice=28.33 [ 88.217508][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.227629][ T5926] usb 4-1: config 0 descriptor?? [ 88.236080][ T5926] option 4-1:0.184: GSM modem (1-port) converter detected [ 88.241231][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 88.256411][ T9] usb 5-1: USB disconnect, device number 3 [ 88.401746][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 88.458303][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.479139][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.506374][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 88.506389][ T30] audit: type=1400 audit(1751057356.888:292): avc: denied { create } for pid=6235 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 88.546476][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.305497][ T30] audit: type=1400 audit(1751057357.668:293): avc: denied { read write } for pid=6232 comm="syz.0.76" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.481966][ T5852] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 89.524907][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.691074][ T30] audit: type=1400 audit(1751057357.668:294): avc: denied { open } for pid=6232 comm="syz.0.76" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.738195][ T5852] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 89.756490][ T5852] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.764615][ T5852] usb 3-1: Manufacturer: syz [ 89.774394][ T5852] usb 3-1: config 0 descriptor?? [ 89.788516][ T30] audit: type=1400 audit(1751057358.158:295): avc: denied { create } for pid=6271 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 90.068268][ T30] audit: type=1400 audit(1751057358.448:296): avc: denied { read write } for pid=6286 comm="syz.0.85" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.227140][ T30] audit: type=1400 audit(1751057358.448:297): avc: denied { open } for pid=6286 comm="syz.0.85" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.343455][ T5875] usb 4-1: USB disconnect, device number 3 [ 90.363144][ T5875] option 4-1:0.184: device disconnected [ 90.392720][ T5852] rc_core: IR keymap rc-hauppauge not found [ 90.398648][ T5852] Registered IR keymap rc-empty [ 90.467852][ T30] audit: type=1400 audit(1751057358.508:298): avc: denied { ioctl } for pid=6286 comm="syz.0.85" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 90.501747][ T6300] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 90.509333][ T6300] netlink: 224 bytes leftover after parsing attributes in process `syz.1.87'. [ 90.944072][ T6252] GUP no longer grows the stack in syz.2.78 (6252): 200000009000-20000000a000 (200000005000) [ 90.991863][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 91.054339][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.86'. [ 91.071286][ T30] audit: type=1400 audit(1751057359.038:299): avc: denied { ioctl } for pid=6247 comm="syz.2.78" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x542a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 91.162189][ T6252] CPU: 0 UID: 0 PID: 6252 Comm: syz.2.78 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 91.162216][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.162227][ T6252] Call Trace: [ 91.162232][ T6252] [ 91.162239][ T6252] dump_stack_lvl+0x16c/0x1f0 [ 91.162269][ T6252] gup_vma_lookup+0x1d2/0x220 [ 91.162297][ T6252] __get_user_pages+0x271/0x3b80 [ 91.162323][ T6252] ? __pfx___get_user_pages+0x10/0x10 [ 91.162338][ T6252] ? __pfx_down_read_killable+0x10/0x10 [ 91.162360][ T6252] ? __lock_acquire+0x622/0x1c90 [ 91.162385][ T6252] __gup_longterm_locked+0x20d/0x1840 [ 91.162406][ T6252] ? try_get_folio+0x1d2/0x730 [ 91.162430][ T6252] ? __pfx___gup_longterm_locked+0x10/0x10 [ 91.162449][ T6252] ? try_get_folio+0x255/0x730 [ 91.162480][ T6252] gup_fast_fallback+0x1ab3/0x29e0 [ 91.162513][ T6252] ? __pfx_gup_fast_fallback+0x10/0x10 [ 91.162529][ T6252] ? find_held_lock+0x2b/0x80 [ 91.162555][ T6252] ? __lock_acquire+0xb8a/0x1c90 [ 91.162587][ T6252] get_user_pages_fast+0xa7/0xf0 [ 91.162603][ T6252] ? __pfx_get_user_pages_fast+0x10/0x10 [ 91.162622][ T6252] ? iov_iter_advance+0x1e3/0x6c0 [ 91.162652][ T6252] __iov_iter_get_pages_alloc+0x81b/0x2050 [ 91.162679][ T6252] ? rcu_is_watching+0x12/0xc0 [ 91.162700][ T6252] ? trace_contention_end+0xdd/0x130 [ 91.162736][ T6252] ? __mutex_lock+0x1ca/0xb90 [ 91.162760][ T6252] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 91.162785][ T6252] ? pipe_lock+0x64/0x80 [ 91.162810][ T6252] ? __pfx___mutex_lock+0x10/0x10 [ 91.162835][ T6252] ? iovec_from_user+0xbb/0x140 [ 91.162866][ T6252] iov_iter_get_pages2+0xa3/0x100 [ 91.162892][ T6252] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 91.162917][ T6252] ? wait_for_space+0x232/0x2e0 [ 91.162941][ T6252] ? add_to_pipe+0x181/0x3b0 [ 91.162963][ T6252] __do_sys_vmsplice+0xa47/0x1180 [ 91.162991][ T6252] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 91.163013][ T6252] ? futex_private_hash_put+0xc7/0x240 [ 91.163037][ T6252] ? futex_hash_put+0x3e/0x50 [ 91.163105][ T6252] ? do_syscall_64+0xcd/0x4c0 [ 91.163127][ T6252] do_syscall_64+0xcd/0x4c0 [ 91.163153][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.163170][ T6252] RIP: 0033:0x7f70a718e929 [ 91.163184][ T6252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.163199][ T6252] RSP: 002b:00007f70a7fc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 91.163216][ T6252] RAX: ffffffffffffffda RBX: 00007f70a73b6080 RCX: 00007f70a718e929 [ 91.163224][ T6252] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 000000000000000c [ 91.163231][ T6252] RBP: 00007f70a7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 91.163237][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.163243][ T6252] R13: 0000000000000000 R14: 00007f70a73b6080 R15: 00007ffe264d1998 [ 91.163257][ T6252] [ 91.509106][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 91.531741][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 91.539760][ T30] audit: type=1400 audit(1751057359.568:300): avc: denied { write } for pid=6299 comm="syz.0.88" name="ptype" dev="proc" ino=4026533096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.540271][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 91.563345][ T5852] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 91.631246][ T5852] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 91.713656][ T30] audit: type=1400 audit(1751057360.028:301): avc: denied { map } for pid=6306 comm="syz.1.90" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 91.713751][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 91.773088][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 91.791764][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 91.799320][ T6308] loop6: detected capacity change from 0 to 63 [ 91.822221][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 91.841830][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 91.881933][ T5875] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 91.891516][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.239709][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.273950][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.291784][ T5868] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.311815][ T5875] usb 4-1: device descriptor read/64, error -71 [ 92.352763][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.519827][ T5852] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.588881][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 92.781279][ T5852] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 92.781303][ T5852] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 92.793091][ T5875] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 92.822041][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 92.855483][ T5890] usb 3-1: USB disconnect, device number 7 [ 92.863059][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 92.863088][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 92.863114][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 92.863134][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 92.863158][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 92.866386][ T5868] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 92.866411][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.866429][ T5868] usb 1-1: Product: syz [ 92.866442][ T5868] usb 1-1: Manufacturer: syz [ 92.866455][ T5868] usb 1-1: SerialNumber: syz [ 92.868626][ T5868] usb 1-1: config 0 descriptor?? [ 92.948003][ T5875] usb 4-1: device descriptor read/64, error -71 [ 93.057515][ T5875] usb usb4-port1: attempt power cycle [ 93.863553][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.871598][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.906428][ T5875] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 93.924335][ T5875] usb 4-1: device descriptor read/8, error -71 [ 93.949348][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.961477][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.961829][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.963409][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.963879][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.964191][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.965947][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.966293][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.966921][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.967235][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.967555][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.968063][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.968381][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.968692][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.969005][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.969326][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.969637][ T5868] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 93.969671][ T5868] input input8: Timeout waiting for response from device. [ 93.976086][ T5868] usb 1-1: USB disconnect, device number 5 [ 94.175257][ T5875] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 94.392274][ T5875] usb 4-1: device not accepting address 7, error -71 [ 94.393993][ T5875] usb usb4-port1: unable to enumerate USB device [ 94.932291][ T5875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 95.354842][ T5875] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.364992][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.373220][ T5875] usb 4-1: Product: syz [ 95.378803][ T5875] usb 4-1: Manufacturer: syz [ 95.383539][ T5875] usb 4-1: SerialNumber: syz [ 95.402082][ T5875] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 95.418960][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 95.418969][ T30] audit: type=1400 audit(1751057363.798:303): avc: denied { firmware_load } for pid=5868 comm="kworker/0:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 95.485308][ T5868] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 95.762924][ T30] audit: type=1400 audit(1751057364.148:304): avc: denied { ioctl } for pid=6344 comm="syz.3.100" path="socket:[9509]" dev="sockfs" ino=9509 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.897779][ T6360] SELinux: Context system_u:object_r:tpm_device_t:s0 is not valid (left unmapped). [ 96.097200][ T30] audit: type=1400 audit(1751057364.188:305): avc: denied { write } for pid=6344 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.179937][ T6364] capability: warning: `syz.0.104' uses deprecated v2 capabilities in a way that may be insecure [ 96.212574][ T30] audit: type=1400 audit(1751057364.278:306): avc: denied { mac_admin } for pid=6344 comm="syz.3.100" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.250786][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 96.314098][ T30] audit: type=1400 audit(1751057364.378:307): avc: denied { relabelto } for pid=6344 comm="syz.3.100" name="18" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 96.340390][ T30] audit: type=1400 audit(1751057364.428:308): avc: denied { associate } for pid=6344 comm="syz.3.100" name="18" dev="tmpfs" ino=107 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tpm_device_t:s0" [ 96.367826][ T30] audit: type=1400 audit(1751057364.428:309): avc: denied { read } for pid=6344 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.387402][ T5875] usb 4-1: USB disconnect, device number 8 [ 96.465921][ T6358] syz.4.103 (6358) used greatest stack depth: 19112 bytes left [ 96.535885][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 96.581711][ T5868] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 96.589097][ T5868] ath9k_htc: Failed to initialize the device [ 96.607584][ T5875] usb 4-1: ath9k_htc: USB layer deinitialized [ 96.729000][ T6374] netlink: 'syz.4.107': attribute type 12 has an invalid length. [ 96.765168][ T43] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.781708][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.842690][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 96.871711][ T5882] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.879276][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.891221][ T43] usb 1-1: config 0 descriptor?? [ 96.974154][ T30] audit: type=1400 audit(1751057365.328:310): avc: denied { remove_name } for pid=5811 comm="syz-executor" name="binderfs" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 97.035913][ T5882] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 97.051850][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.244768][ T30] audit: type=1400 audit(1751057365.328:311): avc: denied { rmdir } for pid=5811 comm="syz-executor" name="18" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 97.245731][ T5882] usb 2-1: config 0 descriptor?? [ 97.329791][ T5882] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 97.369428][ T43] apple 0003:05AC:027A.0001: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 97.528304][ T6381] pim6reg: entered allmulticast mode [ 97.541793][ T6381] pim6reg: left allmulticast mode [ 97.804388][ T6364] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 97.941936][ T6364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.944826][ T5882] gspca_cpia1: usb_control_msg 05, error -110 [ 98.951854][ T5882] gspca_cpia1: usb_control_msg 01, error -32 [ 98.969646][ T5882] gspca_cpia1: usb_control_msg 01, error -32 [ 98.976644][ T5882] gspca_cpia1: usb_control_msg 01, error -32 [ 98.990656][ T5882] gspca_cpia1: usb_control_msg 01, error -32 [ 99.228673][ T30] audit: type=1400 audit(1751057367.608:312): avc: denied { mount } for pid=6363 comm="syz.0.104" name="/" dev="overlay" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.291718][ T5882] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 99.292748][ T5926] usb 1-1: USB disconnect, device number 6 [ 99.311973][ T6393] openvswitch: netlink: Flow key attr not present in new flow. [ 99.321527][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.330186][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.549632][ T6399] /dev/nullb0: Can't open blockdev [ 99.691584][ T5926] usb 2-1: USB disconnect, device number 3 [ 99.809003][ T6402] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 99.835916][ T6402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 100.355823][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 100.414595][ T6396] bridge_slave_0: left allmulticast mode [ 100.456752][ T6396] bridge_slave_0: left promiscuous mode [ 100.468725][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.574059][ T5926] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.608694][ T6396] bridge_slave_1: left allmulticast mode [ 100.651850][ T6396] bridge_slave_1: left promiscuous mode [ 100.660772][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.681814][ T5922] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 100.720716][ T6396] bond0: (slave bond_slave_0): Releasing backup interface [ 100.731726][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 100.740321][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 100.761702][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.781761][ T5926] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.807849][ T5926] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 100.808897][ T6396] bond0: (slave bond_slave_1): Releasing backup interface [ 100.819465][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 100.863458][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.880409][ T5922] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.896138][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.906781][ T5922] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.930710][ T5926] usb 1-1: config 0 descriptor?? [ 100.958755][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.026005][ T6407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.051853][ T6396] team0: Port device team_slave_0 removed [ 101.071232][ T5922] usb 3-1: config 0 descriptor?? [ 101.102335][ T6396] team0: Port device team_slave_1 removed [ 101.124689][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.171861][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 101.171878][ T30] audit: type=1400 audit(1751057369.528:316): avc: denied { connect } for pid=6418 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.246695][ T5922] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 101.254224][ T5922] dvb-usb: bulk message failed: -22 (3/0) [ 101.257484][ T6396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.308450][ T5922] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 101.332298][ T5922] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 101.372278][ T5922] usb 3-1: media controller created [ 101.377693][ T30] audit: type=1400 audit(1751057369.538:317): avc: denied { ioctl } for pid=6418 comm="syz.1.120" path="socket:[9809]" dev="sockfs" ino=9809 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.411257][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.488844][ T6396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.496181][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.537729][ T6428] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.627569][ T6429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11747 sclass=netlink_route_socket pid=6429 comm=syz.0.115 [ 101.664044][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 101.670581][ T5922] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 101.714537][ T6423] lo: entered promiscuous mode [ 101.770085][ T30] audit: type=1400 audit(1751057370.148:318): avc: denied { block_suspend } for pid=6405 comm="syz.0.115" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.808371][ T6423] tunl0: entered promiscuous mode [ 101.829826][ T6423] gre0: entered promiscuous mode [ 101.852170][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 101.916929][ T5922] dvb-usb: schedule remote query interval to 150 msecs. [ 102.091864][ T5922] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 102.099970][ T30] audit: type=1400 audit(1751057370.298:319): avc: denied { mount } for pid=6405 comm="syz.0.115" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.123037][ T6423] gretap0: entered promiscuous mode [ 102.130624][ T6429] nfs: Unknown parameter 'usrquota0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] 0 [ 102.130624][ T6429] ' [ 102.275915][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 102.278693][ T5868] usb 3-1: USB disconnect, device number 8 [ 102.285034][ T5922] dvb-usb: error while querying for an remote control event. [ 102.299013][ T6423] erspan0: entered promiscuous mode [ 102.311482][ T6423] ip_vti0: entered promiscuous mode [ 102.321501][ T6423] ip6_vti0: entered promiscuous mode [ 102.333120][ T6423] sit0: entered promiscuous mode [ 102.347307][ T6423] ip6tnl0: entered promiscuous mode [ 102.522193][ T6423] ip6gre0: entered promiscuous mode [ 102.615729][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 102.722750][ T6439] mmap: syz.3.121 (6439) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.854327][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 102.951182][ T5868] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 102.969071][ T6423] syz_tun: entered promiscuous mode [ 103.142033][ T5814] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 103.249915][ T6423] ip6gretap0: entered promiscuous mode [ 103.298904][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.306828][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.330802][ T6423] bridge0: entered promiscuous mode [ 103.340209][ T6423] vcan0: entered promiscuous mode [ 103.350988][ T6423] bond0: entered promiscuous mode [ 103.356473][ T6423] bond_slave_0: entered promiscuous mode [ 103.364935][ T6423] bond_slave_1: entered promiscuous mode [ 103.385232][ T6423] team0: entered promiscuous mode [ 103.392134][ T6423] team_slave_0: entered promiscuous mode [ 103.398424][ T6423] team_slave_1: entered promiscuous mode [ 103.411460][ T6423] dummy0: entered promiscuous mode [ 103.437024][ T6423] nlmon0: entered promiscuous mode [ 103.443260][ T6423] caif0: entered promiscuous mode [ 103.448818][ T6423] batadv0: entered promiscuous mode [ 103.465555][ T6423] vxcan0: entered promiscuous mode [ 103.485360][ T6423] vxcan1: entered promiscuous mode [ 103.560199][ T30] audit: type=1400 audit(1751057371.938:320): avc: denied { read write } for pid=6443 comm="syz.2.123" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.826117][ T6423] veth0: entered promiscuous mode [ 103.857257][ T6423] veth1: entered promiscuous mode [ 103.878470][ T30] audit: type=1400 audit(1751057371.938:321): avc: denied { open } for pid=6443 comm="syz.2.123" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 103.906213][ T6423] wg0: entered promiscuous mode [ 103.948676][ T6423] wg1: entered promiscuous mode [ 103.961173][ T6423] wg2: entered promiscuous mode [ 103.984573][ T6423] veth0_to_bridge: entered promiscuous mode [ 103.999278][ T6423] veth1_to_bridge: entered promiscuous mode [ 104.015983][ T6423] veth0_to_bond: entered promiscuous mode [ 104.022453][ T30] audit: type=1400 audit(1751057372.408:322): avc: denied { write } for pid=6443 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.048313][ T6423] veth1_to_bond: entered promiscuous mode [ 104.061129][ T6423] veth0_to_team: entered promiscuous mode [ 104.103932][ T30] audit: type=1400 audit(1751057372.448:323): avc: denied { mounton } for pid=6449 comm="syz.4.125" path="/29/file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.142801][ T6423] veth1_to_team: entered promiscuous mode [ 104.154310][ T30] audit: type=1400 audit(1751057372.458:324): avc: denied { mount } for pid=6449 comm="syz.4.125" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.190668][ T6423] veth0_to_batadv: entered promiscuous mode [ 104.191193][ T6451] netlink: 'syz.4.125': attribute type 39 has an invalid length. [ 104.216456][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.224355][ T6423] batadv_slave_0: entered promiscuous mode [ 104.233189][ T6423] veth1_to_batadv: entered promiscuous mode [ 104.241000][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.261044][ T5875] usb 1-1: USB disconnect, device number 7 [ 104.515766][ T6458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6458 comm=syz.2.126 [ 104.607184][ T6423] batadv_slave_1: entered promiscuous mode [ 104.615244][ T6423] xfrm0: entered promiscuous mode [ 104.625178][ T6423] veth0_to_hsr: entered promiscuous mode [ 104.634042][ T6423] veth1_to_hsr: entered promiscuous mode [ 104.653574][ T6423] hsr0: entered promiscuous mode [ 104.663536][ T6423] veth1_virt_wifi: entered promiscuous mode [ 104.678172][ T6423] veth0_virt_wifi: entered promiscuous mode [ 104.687195][ T6423] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 104.707377][ T6423] vlan0: entered promiscuous mode [ 104.712761][ T6423] vlan1: entered promiscuous mode [ 104.738453][ T6423] macvlan0: entered promiscuous mode [ 104.748611][ T6423] macvlan1: entered promiscuous mode [ 104.756428][ T6423] ipvlan0: entered promiscuous mode [ 104.767253][ T6423] ipvlan1: entered promiscuous mode [ 104.778258][ T6423] macvtap0: entered promiscuous mode [ 104.797898][ T6423] macsec0: entered promiscuous mode [ 104.816877][ T6423] geneve0: entered promiscuous mode [ 104.844547][ T6460] Cannot find add_set index 0 as target [ 104.869065][ T6423] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.878323][ T6423] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.888295][ T6423] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.900615][ T6423] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.950658][ T6423] geneve1: entered promiscuous mode [ 104.973973][ T6423] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 105.015022][ T6423] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 105.056952][ T6423] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 105.093403][ T6423] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 105.145271][ T6423] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 105.183718][ T6423] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 105.194373][ T6423] syzkaller1: entered promiscuous mode [ 105.199915][ T6423] syztnl1: entered promiscuous mode [ 105.271841][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 105.280906][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 105.522199][ T30] audit: type=1400 audit(1751057373.908:325): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 105.951565][ T5875] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 106.112070][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 106.121573][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 106.189832][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.227898][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.239097][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 106.249016][ T5875] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 107.108246][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.226613][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 107.226627][ T30] audit: type=1400 audit(1751057375.598:327): avc: denied { mount } for pid=6461 comm="syz.3.128" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 107.236525][ T5875] usb 3-1: config 0 descriptor?? [ 107.345647][ T30] audit: type=1400 audit(1751057375.728:328): avc: denied { create } for pid=6481 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.379681][ T6466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.055103][ T6466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11747 sclass=netlink_route_socket pid=6466 comm=syz.2.131 [ 108.251449][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.131'. [ 108.261460][ T6493] nfs: Unknown parameter 'usrquota' [ 108.309636][ T30] audit: type=1400 audit(1751057376.678:329): avc: denied { ioctl } for pid=6486 comm="syz.3.136" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 108.952737][ T30] audit: type=1400 audit(1751057890.283:330): avc: denied { connect } for pid=6495 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.281553][ T30] audit: type=1400 audit(1751057890.283:331): avc: denied { bind } for pid=6495 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.301418][ T30] audit: type=1400 audit(1751057890.283:332): avc: denied { write } for pid=6495 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.421826][ T30] audit: type=1400 audit(1751057890.303:333): avc: denied { create } for pid=6495 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.481681][ T5814] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 109.609753][ T6505] veth0_macvtap: left promiscuous mode [ 109.653901][ T6505] macvtap0: refused to change device tx_queue_len [ 110.696423][ T5868] usb 3-1: USB disconnect, device number 9 [ 111.677487][ T30] audit: type=1400 audit(1751057893.053:334): avc: denied { bind } for pid=6519 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.983275][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 111.993053][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 112.002015][ T6542] netlink: 'syz.3.153': attribute type 20 has an invalid length. [ 112.868099][ T5875] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 113.041716][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 113.295721][ T6564] fuse: root generation should be zero [ 113.756225][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 113.862833][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.872643][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.882421][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 113.892350][ T5875] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 113.901448][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.013419][ T5875] usb 3-1: config 0 descriptor?? [ 114.022109][ T6550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.964970][ T6550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.155'. [ 115.014451][ T6550] nfs: Unknown parameter 'usrquota' [ 115.475195][ T30] audit: type=1400 audit(1751057896.843:335): avc: denied { getopt } for pid=6575 comm="syz.4.161" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.557545][ T30] audit: type=1400 audit(1751057896.853:336): avc: denied { create } for pid=6575 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 115.577758][ T30] audit: type=1400 audit(1751057896.853:337): avc: denied { setopt } for pid=6575 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.392446][ T30] audit: type=1400 audit(1751057897.233:338): avc: denied { create } for pid=6576 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.434854][ T30] audit: type=1400 audit(1751057897.303:339): avc: denied { read } for pid=6576 comm="syz.1.160" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.495927][ T30] audit: type=1400 audit(1751057897.313:340): avc: denied { open } for pid=6576 comm="syz.1.160" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.523504][ T30] audit: type=1400 audit(1751057897.353:341): avc: denied { write } for pid=6576 comm="syz.1.160" path="socket:[10192]" dev="sockfs" ino=10192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.622903][ T5926] usb 3-1: USB disconnect, device number 10 [ 116.639005][ T5814] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 118.202734][ T6603] loop6: detected capacity change from 0 to 524287999 [ 118.254099][ T6603] afs: Unknown parameter 'dy' [ 118.278141][ T5819] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 118.310891][ T30] audit: type=1400 audit(1751057899.673:342): avc: denied { watch_mount watch_reads } for pid=6599 comm="syz.3.167" path="/33/file0" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.484051][ T30] audit: type=1400 audit(1751057899.863:343): avc: denied { write } for pid=6614 comm="syz.2.171" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.417840][ T6649] SELinux: policydb string SE L)nux does not match my string SE Linux [ 120.426494][ T30] audit: type=1400 audit(1751057901.793:344): avc: denied { load_policy } for pid=6648 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 120.511492][ T6649] SELinux: failed to load policy [ 120.919789][ T6659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.941814][ T30] audit: type=1400 audit(1751057902.313:345): avc: denied { unlink } for pid=6658 comm="syz.2.186" name="#1" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.038796][ T30] audit: type=1400 audit(1751057902.403:346): avc: denied { write } for pid=6663 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 121.532204][ T30] audit: type=1400 audit(1751057902.423:347): avc: denied { create } for pid=6658 comm="syz.2.186" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.570278][ T30] audit: type=1400 audit(1751057902.423:348): avc: denied { link } for pid=6658 comm="syz.2.186" name="#3" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.594519][ T30] audit: type=1400 audit(1751057902.423:349): avc: denied { rename } for pid=6658 comm="syz.2.186" name="#4" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 121.606624][ T6671] hsr0: entered promiscuous mode [ 121.691688][ T30] audit: type=1400 audit(1751057903.063:350): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.926243][ T6681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'. [ 121.959158][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.968176][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.983703][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.991231][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.017157][ T30] audit: type=1400 audit(1751057903.383:351): avc: denied { read } for pid=6684 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.121707][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.271683][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 122.384327][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.394620][ T43] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 122.403238][ T43] usb 5-1: config 0 has no interface number 0 [ 122.412487][ T43] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 122.426394][ T43] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 122.441370][ T43] usb 5-1: config 0 interface 88 has no altsetting 0 [ 122.842603][ T43] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 122.854886][ T43] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 122.863062][ T43] usb 5-1: Product: syz [ 122.870884][ T43] usb 5-1: Manufacturer: syz [ 122.875638][ T43] usb 5-1: SerialNumber: syz [ 122.996217][ T43] usb 5-1: config 0 descriptor?? [ 123.297052][ T30] audit: type=1400 audit(1751057904.663:352): avc: denied { bind } for pid=6699 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.325036][ T30] audit: type=1400 audit(1751057904.683:353): avc: denied { ioctl } for pid=6699 comm="syz.1.198" path="socket:[10964]" dev="sockfs" ino=10964 ioctlcmd=0x703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.521134][ T30] audit: type=1400 audit(1751057904.893:354): avc: denied { read write } for pid=6677 comm="syz.4.192" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.127632][ T43] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input10 [ 124.292548][ T43] usb 5-1: USB disconnect, device number 4 [ 125.083767][ T5829] udevd[5829]: Error opening device "/dev/input/event4": No such device [ 125.459964][ T5829] udevd[5829]: Unable to EVIOCGABS device "/dev/input/event4" [ 126.844983][ T5926] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.030341][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 127.030359][ T30] audit: type=1400 audit(1751057907.733:356): avc: denied { getopt } for pid=6725 comm="syz.0.203" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.217966][ T5829] udevd[5829]: Unable to EVIOCGABS device "/dev/input/event4" [ 127.429118][ T30] audit: type=1400 audit(1751057908.793:357): avc: denied { append } for pid=6734 comm="syz.4.205" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 127.735877][ T30] audit: type=1400 audit(1751057909.113:358): avc: denied { bind } for pid=6739 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.826690][ T6742] loop6: detected capacity change from 0 to 63 [ 127.931688][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.949696][ T30] audit: type=1400 audit(1751057909.293:359): avc: denied { map } for pid=6739 comm="syz.3.207" path="socket:[11118]" dev="sockfs" ino=11118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 127.982796][ T5819] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.001130][ T5819] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.041043][ T5819] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.084565][ T5819] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.136158][ T5819] Buffer I/O error on dev loop6, logical block 0, async page read [ 128.136592][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.193701][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.234300][ T43] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 128.270032][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.304416][ T43] usb 5-1: config 0 descriptor?? [ 128.867545][ T6735] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 128.891776][ T30] audit: type=1400 audit(1751057910.263:360): avc: denied { read write } for pid=6734 comm="syz.4.205" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 128.991761][ T30] audit: type=1400 audit(1751057910.263:361): avc: denied { open } for pid=6734 comm="syz.4.205" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.658339][ T6763] input: syz0 as /devices/virtual/input/input11 [ 130.351782][ T30] audit: type=1400 audit(1751057910.973:362): avc: denied { name_bind } for pid=6760 comm="syz.0.213" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 130.621486][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 130.630595][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 130.962941][ T43] usb 5-1: USB disconnect, device number 5 [ 131.382157][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.653986][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.681003][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.747090][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.059773][ T43] usb 5-1: config 0 descriptor?? [ 132.348882][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.531719][ T5852] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.766739][ T5852] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 132.802241][ T5852] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 132.978532][ T5852] usb 2-1: config 220 has no interface number 2 [ 132.985570][ T5852] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 132.998846][ T5852] usb 2-1: config 220 interface 0 has no altsetting 0 [ 133.005916][ T5852] usb 2-1: config 220 interface 76 has no altsetting 0 [ 133.013055][ T5852] usb 2-1: config 220 interface 1 has no altsetting 0 [ 133.022479][ T5852] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 133.022627][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.022645][ T5852] usb 2-1: Product: syz [ 133.022658][ T5852] usb 2-1: Manufacturer: syz [ 133.022671][ T5852] usb 2-1: SerialNumber: syz [ 133.124767][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 133.255829][ T5852] usb 2-1: selecting invalid altsetting 0 [ 133.256144][ T5852] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 133.256169][ T5852] usb 2-1: No valid video chain found. [ 133.327290][ T5852] usb 2-1: selecting invalid altsetting 0 [ 133.327308][ T5852] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 133.365475][ T5852] usb 2-1: USB disconnect, device number 4 [ 133.433231][ T6817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.433435][ T6817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.433981][ T30] audit: type=1400 audit(1751057914.813:363): avc: denied { append } for pid=6770 comm="syz.4.216" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.437005][ T6817] syz.4.216: attempt to access beyond end of device [ 133.437005][ T6817] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 133.437073][ T6817] qnx6: unable to read the first superblock [ 133.437162][ T6817] syz.4.216: attempt to access beyond end of device [ 133.437162][ T6817] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 133.437208][ T6817] qnx6: unable to read the first superblock [ 133.437212][ T6817] qnx6: unable to read the first superblock [ 133.584413][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.718616][ T6823] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 133.718751][ T6823] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 133.734733][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 134.126005][ T6815] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 134.178783][ T30] audit: type=1400 audit(1751057915.553:364): avc: denied { create } for pid=6828 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.228472][ T30] audit: type=1400 audit(1751057915.583:365): avc: denied { read } for pid=6828 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.258206][ T6834] SELinux: policydb string SE L)nux does not match my string SE Linux [ 134.267200][ T5875] IPVS: starting estimator thread 0... [ 134.267676][ T6834] SELinux: failed to load policy [ 134.329253][ T30] audit: type=1400 audit(1751057915.633:366): avc: denied { create } for pid=6828 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 134.356002][ T30] audit: type=1400 audit(1751057915.633:367): avc: denied { write } for pid=6828 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 134.514230][ T6836] IPVS: using max 39 ests per chain, 93600 per kthread [ 135.090083][ T30] audit: type=1400 audit(1751057916.463:368): avc: denied { create } for pid=6847 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 135.126134][ T6848] tmpfs: Bad value for 'mpol' [ 135.150087][ T30] audit: type=1400 audit(1751057916.513:369): avc: denied { ioctl } for pid=6847 comm="syz.1.239" path="socket:[11729]" dev="sockfs" ino=11729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 135.211909][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 135.258686][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 135.272033][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 135.323956][ T43] usb 5-1: USB disconnect, device number 6 [ 136.941066][ T5852] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.111677][ T5852] usb 2-1: Using ep0 maxpacket: 8 [ 137.125155][ T6878] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 137.132927][ T6878] netlink: 224 bytes leftover after parsing attributes in process `syz.0.248'. [ 137.462958][ T5814] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 137.472113][ T5814] Bluetooth: hci4: Injecting HCI hardware error event [ 137.494590][ T51] Bluetooth: hci4: hardware error 0x00 [ 137.918163][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 137.939463][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.961698][ T5852] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.971430][ T5852] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 138.003378][ T5852] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 138.086945][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.384547][ T5852] usb 2-1: config 0 descriptor?? [ 138.539699][ T6875] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.781367][ T6886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'. [ 138.816940][ T6886] netem: invalid attributes len -4 [ 138.832116][ T6886] netem: change failed [ 138.877468][ T6889] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.898970][ T30] audit: type=1400 audit(1751057920.273:370): avc: denied { write } for pid=6883 comm="syz.2.250" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 139.097746][ T6875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11747 sclass=netlink_route_socket pid=6875 comm=syz.1.247 [ 139.192185][ T6898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.247'. [ 139.222431][ T6898] nfs: Unknown parameter 'usrquota' [ 139.471823][ T43] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 139.551731][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 139.634064][ T43] usb 1-1: Invalid ep0 maxpacket: 16 [ 139.812028][ T43] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 140.089886][ T43] usb 1-1: Invalid ep0 maxpacket: 16 [ 140.109349][ T43] usb usb1-port1: attempt power cycle [ 140.145968][ T6908] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.158072][ T6908] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 140.170508][ T6908] bridge_slave_0: default FDB implementation only supports local addresses [ 140.185148][ T30] audit: type=1400 audit(1751057921.563:371): avc: denied { read } for pid=6907 comm="syz.4.257" path="socket:[11840]" dev="sockfs" ino=11840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.209348][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.341717][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 140.381735][ T5875] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.467605][ T5814] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 140.475675][ T43] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 140.494953][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.526976][ T43] usb 1-1: Invalid ep0 maxpacket: 16 [ 140.528876][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.538030][ T5922] usb 2-1: USB disconnect, device number 5 [ 140.561001][ T5875] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 140.571962][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.579981][ T5875] usb 4-1: Product: syz [ 140.584801][ T5875] usb 4-1: Manufacturer: syz [ 140.595363][ T5875] usb 4-1: SerialNumber: syz [ 140.600157][ T5882] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.609521][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.618384][ T5882] usb 3-1: SerialNumber: syz [ 140.623772][ T5875] usb 4-1: config 0 descriptor?? [ 140.639239][ T5875] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 140.668355][ T43] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 140.702108][ T43] usb 1-1: Invalid ep0 maxpacket: 16 [ 140.708271][ T43] usb usb1-port1: unable to enumerate USB device [ 140.854804][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.868618][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.885858][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.896340][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.991873][ T5882] usb 3-1: 0:2 : does not exist [ 141.100257][ T5882] usb 3-1: USB disconnect, device number 11 [ 141.412146][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 141.852601][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.122611][ T6931] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.133752][ T6931] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 142.624928][ T30] audit: type=1400 audit(1751057924.003:372): avc: denied { setopt } for pid=6925 comm="syz.4.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.644136][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.208748][ T6947] FAULT_INJECTION: forcing a failure. [ 143.208748][ T6947] name failslab, interval 1, probability 0, space 0, times 0 [ 143.232191][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.1.266 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 143.232218][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.232229][ T6947] Call Trace: [ 143.232235][ T6947] [ 143.232242][ T6947] dump_stack_lvl+0x16c/0x1f0 [ 143.232274][ T6947] should_fail_ex+0x512/0x640 [ 143.232297][ T6947] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 143.232328][ T6947] should_failslab+0xc2/0x120 [ 143.232353][ T6947] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 143.232375][ T6947] ? vm_area_dup+0x27/0x8d0 [ 143.232399][ T6947] vm_area_dup+0x27/0x8d0 [ 143.232421][ T6947] __split_vma+0x18e/0x1070 [ 143.232446][ T6947] ? __pfx___split_vma+0x10/0x10 [ 143.232466][ T6947] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 143.232495][ T6947] ? unwind_get_return_address+0x59/0xa0 [ 143.232533][ T6947] vma_modify+0x16dc/0x2030 [ 143.232556][ T6947] ? _parse_integer_limit+0x17f/0x1d0 [ 143.232577][ T6947] ? __pfx_vma_modify+0x10/0x10 [ 143.232605][ T6947] vma_modify_flags+0x212/0x2d0 [ 143.232627][ T6947] ? __pfx_vma_modify_flags+0x10/0x10 [ 143.232661][ T6947] ? may_expand_vm+0xe8/0x430 [ 143.232682][ T6947] mprotect_fixup+0x2b3/0xb10 [ 143.232707][ T6947] ? __pfx_mprotect_fixup+0x10/0x10 [ 143.232726][ T6947] ? selinux_file_mprotect+0x15b/0x600 [ 143.232755][ T6947] do_mprotect_pkey+0x9ca/0xd50 [ 143.232783][ T6947] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 143.232805][ T6947] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 143.232839][ T6947] ? __fget_files+0x20e/0x3c0 [ 143.232871][ T6947] ? __pfx_ksys_write+0x10/0x10 [ 143.232899][ T6947] __x64_sys_mprotect+0x78/0xc0 [ 143.232918][ T6947] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.232941][ T6947] do_syscall_64+0xcd/0x4c0 [ 143.232968][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.232985][ T6947] RIP: 0033:0x7fd35e78e929 [ 143.233000][ T6947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.233017][ T6947] RSP: 002b:00007fd35f5f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 143.233034][ T6947] RAX: ffffffffffffffda RBX: 00007fd35e9b5fa0 RCX: 00007fd35e78e929 [ 143.233046][ T6947] RDX: 0000000000000006 RSI: 0000000000004000 RDI: 0000200000546000 [ 143.233056][ T6947] RBP: 00007fd35f5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 143.233066][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.233076][ T6947] R13: 0000000000000000 R14: 00007fd35e9b5fa0 R15: 00007ffc00852698 [ 143.233100][ T6947] [ 143.489617][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.558376][ T5922] usb 4-1: USB disconnect, device number 10 [ 143.658671][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 143.776127][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 144.101456][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 144.396170][ T30] audit: type=1400 audit(1751057925.743:373): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 144.482512][ T6963] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 145.005799][ T30] audit: type=1400 audit(1751057925.923:374): avc: denied { create } for pid=6971 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.025111][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.031713][ T30] audit: type=1400 audit(1751057925.923:375): avc: denied { setopt } for pid=6971 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.052679][ T30] audit: type=1400 audit(1751057926.003:376): avc: denied { bind } for pid=6971 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.098372][ T30] audit: type=1400 audit(1751057926.003:377): avc: denied { name_bind } for pid=6971 comm="syz.3.271" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 145.133665][ T30] audit: type=1400 audit(1751057926.003:378): avc: denied { node_bind } for pid=6971 comm="syz.3.271" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 145.159434][ T30] audit: type=1400 audit(1751057926.003:379): avc: denied { write } for pid=6971 comm="syz.3.271" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.185215][ T30] audit: type=1400 audit(1751057926.003:380): avc: denied { connect } for pid=6971 comm="syz.3.271" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.209980][ T30] audit: type=1400 audit(1751057926.003:381): avc: denied { name_connect } for pid=6971 comm="syz.3.271" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 145.242701][ T30] audit: type=1400 audit(1751057926.113:382): avc: denied { create } for pid=6971 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.288885][ T6977] netlink: 'syz.1.270': attribute type 12 has an invalid length. [ 145.657524][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 145.800236][ T6987] fuse: Unknown parameter 's$0x0000000000000006' [ 146.205147][ T6996] hugetlbfs: syz.2.276 (6996): Using mlock ulimits for SHM_HUGETLB is obsolete [ 146.507269][ T7004] FAULT_INJECTION: forcing a failure. [ 146.507269][ T7004] name failslab, interval 1, probability 0, space 0, times 0 [ 146.520455][ T7004] CPU: 1 UID: 0 PID: 7004 Comm: syz.4.279 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 146.520480][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.520490][ T7004] Call Trace: [ 146.520496][ T7004] [ 146.520503][ T7004] dump_stack_lvl+0x16c/0x1f0 [ 146.520533][ T7004] should_fail_ex+0x512/0x640 [ 146.520556][ T7004] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 146.520585][ T7004] should_failslab+0xc2/0x120 [ 146.520612][ T7004] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 146.520638][ T7004] ? kstrdup_const+0x63/0x80 [ 146.520665][ T7004] kstrdup+0x53/0x100 [ 146.520685][ T7004] kstrdup_const+0x63/0x80 [ 146.520707][ T7004] alloc_vfsmnt+0xea/0x730 [ 146.520726][ T7004] clone_mnt+0x6d/0xff0 [ 146.520744][ T7004] ? copy_tree+0x50d/0xa20 [ 146.520767][ T7004] ? copy_mnt_ns+0x1ac/0xac0 [ 146.520797][ T7004] copy_tree+0x38d/0xa20 [ 146.520828][ T7004] copy_mnt_ns+0x1ac/0xac0 [ 146.520851][ T7004] ? trace_kmem_cache_alloc+0x28/0xc0 [ 146.520880][ T7004] ? create_new_namespaces+0x30/0xa90 [ 146.520907][ T7004] create_new_namespaces+0xd3/0xa90 [ 146.520929][ T7004] ? bpf_lsm_capable+0x9/0x10 [ 146.520947][ T7004] ? security_capable+0x7e/0x260 [ 146.520970][ T7004] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 146.520994][ T7004] ksys_unshare+0x45b/0xa40 [ 146.521026][ T7004] ? __pfx_ksys_unshare+0x10/0x10 [ 146.521049][ T7004] ? ksys_write+0x1ac/0x250 [ 146.521080][ T7004] __x64_sys_unshare+0x31/0x40 [ 146.521104][ T7004] do_syscall_64+0xcd/0x4c0 [ 146.521130][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.521147][ T7004] RIP: 0033:0x7f51d938e929 [ 146.521161][ T7004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.521177][ T7004] RSP: 002b:00007f51da181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 146.521194][ T7004] RAX: ffffffffffffffda RBX: 00007f51d95b5fa0 RCX: 00007f51d938e929 [ 146.521205][ T7004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480 [ 146.521215][ T7004] RBP: 00007f51da181090 R08: 0000000000000000 R09: 0000000000000000 [ 146.521225][ T7004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.521235][ T7004] R13: 0000000000000000 R14: 00007f51d95b5fa0 R15: 00007ffe610e7e38 [ 146.521259][ T7004] [ 147.154855][ T7015] netlink: 'syz.0.280': attribute type 12 has an invalid length. [ 147.343885][ T7021] binder: 7020:7021 ioctl c0306201 2000000001c0 returned -14 [ 147.640315][ T7026] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 148.111694][ T5882] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.195592][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 148.460340][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 148.565687][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 148.572916][ T5882] usb 2-1: can't read configurations, error -61 [ 148.592087][ T7034] misc userio: No port type given on /dev/userio [ 148.722000][ T5882] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.507815][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 149.507830][ T30] audit: type=1400 audit(1751057930.883:442): avc: denied { execute } for pid=7039 comm="syz.2.289" name="file1" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.667010][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 149.675146][ T5882] usb 2-1: can't read configurations, error -61 [ 149.682250][ T30] audit: type=1400 audit(1751057930.893:443): avc: denied { write } for pid=7039 comm="syz.2.289" name="ip6_mr_cache" dev="proc" ino=4026533449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 149.710302][ T30] audit: type=1400 audit(1751057931.033:444): avc: denied { name_bind } for pid=7045 comm="syz.4.290" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 149.712459][ T5882] usb usb2-port1: attempt power cycle [ 149.745120][ T30] audit: type=1400 audit(1751057931.033:445): avc: denied { node_bind } for pid=7045 comm="syz.4.290" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 149.858869][ T30] audit: type=1400 audit(1751057931.223:446): avc: denied { read write } for pid=7038 comm="syz.0.291" name="video5" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 149.910017][ T30] audit: type=1400 audit(1751057931.233:447): avc: denied { open } for pid=7038 comm="syz.0.291" path="/dev/video5" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 149.981258][ T30] audit: type=1400 audit(1751057931.233:448): avc: denied { ioctl } for pid=7038 comm="syz.0.291" path="/dev/video5" dev="devtmpfs" ino=937 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.341950][ T30] audit: type=1400 audit(1751057931.263:449): avc: denied { create } for pid=7049 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 150.370182][ T30] audit: type=1400 audit(1751057931.323:450): avc: denied { allowed } for pid=7049 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.393052][ T30] audit: type=1400 audit(1751057931.323:451): avc: denied { create } for pid=7049 comm="syz.4.292" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 150.421918][ T5882] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 150.458004][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 150.469692][ T5882] usb 2-1: can't read configurations, error -61 [ 150.895744][ T7067] warning: `syz.1.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.952968][ T7078] netlink: 'syz.1.297': attribute type 12 has an invalid length. [ 151.970671][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 152.028857][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 152.261203][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.300'. [ 152.887299][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 153.103348][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 153.128837][ T43] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 153.166506][ T43] usb 3-1: config 0 has no interface number 0 [ 153.187486][ T43] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.208533][ T43] usb 3-1: config 0 interface 85 has no altsetting 0 [ 153.219606][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 153.238958][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.269285][ T43] usb 3-1: Product: syz [ 153.273751][ T43] usb 3-1: Manufacturer: syz [ 153.279032][ T43] usb 3-1: SerialNumber: syz [ 153.307596][ T43] usb 3-1: config 0 descriptor?? [ 153.556806][ T7102] block nbd4: shutting down sockets [ 154.379504][ T43] appletouch 3-1:0.85: Geyser mode initialized. [ 154.591200][ T7111] netlink: 'syz.2.301': attribute type 11 has an invalid length. [ 155.284009][ T43] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input12 [ 156.632869][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 156.632884][ T30] audit: type=1400 audit(1751057938.013:473): avc: denied { read } for pid=5170 comm="acpid" name="mouse1" dev="devtmpfs" ino=2887 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.672930][ T30] audit: type=1400 audit(1751057938.013:474): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2887 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.698848][ T30] audit: type=1400 audit(1751057938.013:475): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2887 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.855415][ T5922] usb 3-1: USB disconnect, device number 12 [ 156.855415][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 156.891118][ T30] audit: type=1400 audit(1751057938.233:476): avc: denied { load_policy } for pid=7113 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 157.003968][ T30] audit: type=1400 audit(1751057938.383:477): avc: denied { sys_module } for pid=7117 comm="syz.3.309" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 157.059214][ T5922] appletouch 3-1:0.85: input: appletouch disconnected [ 157.076474][ T30] audit: type=1326 audit(1751057938.413:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7117 comm="syz.3.309" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa42bf8e929 code=0x0 [ 157.201693][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.281911][ T2149] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.351663][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 157.408232][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 157.451732][ T2149] usb 2-1: Using ep0 maxpacket: 8 [ 157.665978][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.686317][ T2149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 157.697971][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.746927][ T2149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.758228][ T7135] cgroup: Invalid name [ 157.764399][ T30] audit: type=1400 audit(1751057939.133:479): avc: denied { mounton } for pid=7134 comm="syz.3.315" path="/58" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 157.786082][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.793675][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 157.823404][ T2149] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.878811][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 157.914155][ T2149] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 157.924993][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.948572][ T2149] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 158.123756][ T43] usb 5-1: config 0 descriptor?? [ 158.128909][ T2149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.142897][ T7121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.153097][ T2149] usb 2-1: config 0 descriptor?? [ 158.160425][ T7124] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 158.417206][ T7121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11747 sclass=netlink_route_socket pid=7121 comm=syz.4.311 [ 158.557121][ T30] audit: type=1400 audit(1751057939.903:480): avc: denied { block_suspend } for pid=7120 comm="syz.4.311" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.584770][ T7124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11747 sclass=netlink_route_socket pid=7124 comm=syz.1.312 [ 158.598222][ T7147] netlink: 36 bytes leftover after parsing attributes in process `syz.4.311'. [ 158.769761][ T7149] netlink: 216 bytes leftover after parsing attributes in process `syz.0.317'. [ 158.815559][ T7152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.312'. [ 158.819278][ T7147] nfs: Unknown parameter 'usrquota' [ 158.825630][ T30] audit: type=1400 audit(1751057940.193:481): avc: denied { mount } for pid=7123 comm="syz.1.312" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.851847][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.866760][ T7152] nfs: Unknown parameter 'usrquota' [ 159.610932][ T7155] FAULT_INJECTION: forcing a failure. [ 159.610932][ T7155] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.632288][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.3.318 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 159.632317][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.632327][ T7155] Call Trace: [ 159.632332][ T7155] [ 159.632339][ T7155] dump_stack_lvl+0x16c/0x1f0 [ 159.632366][ T7155] should_fail_ex+0x512/0x640 [ 159.632391][ T7155] _copy_to_user+0x32/0xd0 [ 159.632416][ T7155] simple_read_from_buffer+0xcb/0x170 [ 159.632439][ T7155] proc_fail_nth_read+0x197/0x270 [ 159.632460][ T7155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.632483][ T7155] ? rw_verify_area+0xcf/0x680 [ 159.632502][ T7155] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.632523][ T7155] vfs_read+0x1e1/0xc60 [ 159.632546][ T7155] ? __pfx___mutex_lock+0x10/0x10 [ 159.632571][ T7155] ? __pfx_vfs_read+0x10/0x10 [ 159.632599][ T7155] ? __fget_files+0x20e/0x3c0 [ 159.632630][ T7155] ksys_read+0x12a/0x250 [ 159.632651][ T7155] ? __pfx_ksys_read+0x10/0x10 [ 159.632680][ T7155] do_syscall_64+0xcd/0x4c0 [ 159.632708][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.632726][ T7155] RIP: 0033:0x7fa42bf8d33c [ 159.632739][ T7155] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.632755][ T7155] RSP: 002b:00007fa429df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.632773][ T7155] RAX: ffffffffffffffda RBX: 00007fa42c1b6080 RCX: 00007fa42bf8d33c [ 159.632784][ T7155] RDX: 000000000000000f RSI: 00007fa429df60a0 RDI: 0000000000000009 [ 159.632794][ T7155] RBP: 00007fa429df6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.632803][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.632812][ T7155] R13: 0000000000000000 R14: 00007fa42c1b6080 R15: 00007ffebbc7c1b8 [ 159.632835][ T7155] [ 159.891751][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 160.061699][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 160.071353][ T43] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 160.083568][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.095254][ T43] usb 3-1: Product: syz [ 160.101487][ T43] usb 3-1: Manufacturer: syz [ 160.139581][ T5814] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 160.139774][ T2149] usb 2-1: USB disconnect, device number 10 [ 160.231767][ T30] audit: type=1400 audit(1751057941.573:482): avc: denied { ioctl } for pid=7165 comm="syz.0.322" path="socket:[12288]" dev="sockfs" ino=12288 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.259519][ T43] usb 3-1: SerialNumber: syz [ 160.284257][ T51] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 160.301775][ T5875] usb 5-1: USB disconnect, device number 7 [ 160.348994][ T43] usb 3-1: config 0 descriptor?? [ 160.383738][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 160.406630][ T6068] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.433100][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 160.452298][ T43] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 160.463771][ T7169] lo: entered promiscuous mode [ 160.481574][ T7169] tunl0: entered promiscuous mode [ 160.504317][ T7169] gre0: entered promiscuous mode [ 160.613756][ T7169] gretap0: entered promiscuous mode [ 160.647769][ T7169] erspan0: entered promiscuous mode [ 160.671773][ T7169] ip_vti0: entered promiscuous mode [ 160.694960][ T7169] ip6_vti0: entered promiscuous mode [ 160.722575][ T7169] sit0: entered promiscuous mode [ 160.922918][ T7169] ip6tnl0: entered promiscuous mode [ 160.934349][ T7169] ip6gre0: entered promiscuous mode [ 160.954466][ T7169] syz_tun: entered promiscuous mode [ 160.970336][ T7169] ip6gretap0: entered promiscuous mode [ 160.980241][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.987765][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.997922][ T7169] bridge0: entered promiscuous mode [ 161.009212][ T7169] vcan0: entered promiscuous mode [ 161.029578][ T7169] bond0: entered promiscuous mode [ 161.050247][ T7169] bond_slave_0: entered promiscuous mode [ 161.058137][ T7169] bond_slave_1: entered promiscuous mode [ 161.071152][ T7169] team0: entered promiscuous mode [ 161.076456][ T7169] team_slave_0: entered promiscuous mode [ 161.084446][ T7169] team_slave_1: entered promiscuous mode [ 161.095273][ T7169] dummy0: entered promiscuous mode [ 161.110442][ T7169] nlmon0: entered promiscuous mode [ 161.118818][ T7169] caif0: entered promiscuous mode [ 161.143954][ T7169] batadv0: entered promiscuous mode [ 161.204562][ T7169] vxcan0: entered promiscuous mode [ 161.226313][ T7169] vxcan1: entered promiscuous mode [ 161.235808][ T7169] veth0: entered promiscuous mode [ 161.249605][ T7169] veth1: entered promiscuous mode [ 161.344311][ T7169] wg0: entered promiscuous mode [ 161.483447][ T7169] wg1: entered promiscuous mode [ 161.490364][ T7169] wg2: entered promiscuous mode [ 161.496865][ T7169] veth0_to_bridge: entered promiscuous mode [ 161.528009][ T7169] veth1_to_bridge: entered promiscuous mode [ 161.537466][ T7169] veth0_to_bond: entered promiscuous mode [ 161.596357][ T7169] veth1_to_bond: entered promiscuous mode [ 161.663336][ T7169] veth0_to_team: entered promiscuous mode [ 161.686301][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 161.686312][ T30] audit: type=1400 audit(1751057943.063:498): avc: denied { write } for pid=7181 comm="syz.3.325" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.723294][ T7169] veth1_to_team: entered promiscuous mode [ 161.738611][ T30] audit: type=1400 audit(1751057943.113:499): avc: denied { map } for pid=7181 comm="syz.3.325" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.790011][ T7169] veth0_to_batadv: entered promiscuous mode [ 161.798923][ T7169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.814394][ T30] audit: type=1400 audit(1751057943.193:500): avc: denied { write } for pid=7181 comm="syz.3.325" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.839902][ T7169] batadv_slave_0: entered promiscuous mode [ 161.858483][ T7169] veth1_to_batadv: entered promiscuous mode [ 161.867563][ T7169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.876714][ T7169] batadv_slave_1: entered promiscuous mode [ 161.890069][ T7169] xfrm0: entered promiscuous mode [ 161.898768][ T7169] veth0_to_hsr: entered promiscuous mode [ 161.917961][ T7169] veth1_to_hsr: entered promiscuous mode [ 161.939182][ T7169] hsr0: entered promiscuous mode [ 161.961308][ T7169] veth1_virt_wifi: entered promiscuous mode [ 161.986302][ T7169] veth0_virt_wifi: entered promiscuous mode [ 161.997575][ T7169] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 162.126295][ T7169] vlan0: entered promiscuous mode [ 162.132718][ T7169] vlan1: entered promiscuous mode [ 162.159193][ T7169] macvlan0: entered promiscuous mode [ 162.168620][ T7169] macvlan1: entered promiscuous mode [ 162.177860][ T7169] ipvlan0: entered promiscuous mode [ 162.183510][ T7169] ipvlan1: entered promiscuous mode [ 162.258481][ T7169] veth0_macvtap: entered promiscuous mode [ 162.266462][ T7169] macvtap0: entered promiscuous mode [ 162.275376][ T7169] macsec0: entered promiscuous mode [ 162.288937][ T7169] geneve0: entered promiscuous mode [ 162.299891][ T7169] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.311861][ T7169] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.455514][ T5875] usb 3-1: USB disconnect, device number 13 [ 162.465373][ T5814] Bluetooth: hci5: command 0x1003 tx timeout [ 162.474198][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 162.526550][ T7169] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.702290][ T7169] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.731344][ T7169] geneve1: entered promiscuous mode [ 162.747344][ T7169] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 162.760834][ T7169] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 162.776507][ T7169] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 162.826190][ T7169] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 162.878951][ T7169] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 162.890409][ T7169] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 162.945094][ T7169] batadv1: entered promiscuous mode [ 162.953137][ T7169] syztnl1: entered promiscuous mode [ 163.218068][ T7201] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 163.226035][ T7201] netlink: 224 bytes leftover after parsing attributes in process `syz.0.330'. [ 163.256276][ T30] audit: type=1400 audit(1751057944.543:501): avc: denied { setopt } for pid=7197 comm="syz.0.330" lport=131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 164.114243][ T30] audit: type=1400 audit(1751057945.483:502): avc: denied { setopt } for pid=7204 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 164.446155][ T30] audit: type=1400 audit(1751057945.483:503): avc: denied { setopt } for pid=7204 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.481301][ T30] audit: type=1400 audit(1751057945.493:504): avc: denied { read } for pid=7204 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.608888][ T30] audit: type=1400 audit(1751057945.983:505): avc: denied { create } for pid=7217 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 164.647169][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.335'. [ 164.670211][ T30] audit: type=1400 audit(1751057946.013:506): avc: denied { create } for pid=7217 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.967413][ T30] audit: type=1400 audit(1751057946.013:507): avc: denied { setopt } for pid=7217 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.223125][ T7230] netlink: 'syz.0.336': attribute type 12 has an invalid length. [ 167.648019][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 167.648037][ T30] audit: type=1400 audit(1751057949.023:511): avc: denied { create } for pid=7261 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 167.748929][ T30] audit: type=1400 audit(1751057949.023:512): avc: denied { write } for pid=7261 comm="syz.0.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 167.919211][ T30] audit: type=1400 audit(1751057949.273:513): avc: denied { name_bind 0x1000000 } for pid=7266 comm="syz.0.347" path="socket:[13244]" dev="sockfs" ino=13244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 167.947467][ T7266] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 168.046858][ T7270] bridge_slave_0: left allmulticast mode [ 168.054895][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.064183][ T7270] bridge_slave_1: left allmulticast mode [ 168.070095][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.149984][ T30] audit: type=1400 audit(1751057949.273:514): avc: denied { read } for pid=7266 comm="syz.0.347" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 168.207966][ T30] audit: type=1400 audit(1751057949.273:515): avc: denied { open } for pid=7266 comm="syz.0.347" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 168.245778][ T7270] bond0: (slave bond_slave_0): Releasing backup interface [ 168.276918][ T7270] bond0: (slave bond_slave_1): Releasing backup interface [ 168.306905][ T30] audit: type=1400 audit(1751057949.283:516): avc: denied { ioctl } for pid=7266 comm="syz.0.347" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 168.431559][ T7270] team0: Port device team_slave_0 removed [ 168.509840][ T30] audit: type=1400 audit(1751057949.483:517): avc: denied { create } for pid=7269 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.530405][ T7270] team0: Port device team_slave_1 removed [ 168.537266][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.547380][ T7270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.555853][ T30] audit: type=1400 audit(1751057949.643:518): avc: denied { setopt } for pid=7269 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.612817][ T30] audit: type=1400 audit(1751057949.643:519): avc: denied { getopt } for pid=7269 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.934238][ T7288] page: refcount:515 mapcount:0 mapping:ffff8880364a6080 index:0x0 pfn:0x4ea00 [ 168.943465][ T7288] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 168.951946][ T7288] aops:hugetlbfs_aops ino:381f dentry name(?):"anon_hugepage" [ 168.959388][ T7288] flags: 0xfff000000000c1(locked|waiters|head|node=0|zone=1|lastcpupid=0x7ff) [ 168.968222][ T7288] page_type: f4(hugetlb) [ 168.972454][ T7288] raw: 00fff000000000c1 ffffc9000bf0fd68 ffffc9000bf0fd68 ffff8880364a6080 [ 168.981023][ T7288] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 168.989585][ T7288] head: 00fff000000000c1 ffffc9000bf0fd68 ffffc9000bf0fd68 ffff8880364a6080 [ 168.998247][ T7288] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 169.006911][ T7288] head: 00fff00000000009 ffffea00013a8001 0000000000000000 0000000000000000 [ 169.015569][ T7288] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 169.024222][ T7288] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 169.031484][ T7288] page_owner tracks the page as allocated [ 169.037497][ T7288] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 6378, tgid 6376 (syz.2.108), ts 100237971680, free_ts 97324091271 [ 169.057914][ T7288] post_alloc_hook+0x1c0/0x230 [ 169.062673][ T7288] get_page_from_freelist+0x1321/0x3890 [ 169.068208][ T7288] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 169.074090][ T7288] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 169.079888][ T7288] alloc_hugetlb_folio+0xed4/0x1560 [ 169.085079][ T7288] hugetlb_fault+0x2005/0x3070 [ 169.089826][ T7288] handle_mm_fault+0xbfa/0xd10 [ 169.094579][ T7288] do_user_addr_fault+0x7a6/0x1370 [ 169.099681][ T7288] exc_page_fault+0x5c/0xb0 [ 169.104174][ T7288] asm_exc_page_fault+0x26/0x30 [ 169.109008][ T7288] page last free pid 6381 tgid 6376 stack trace: [ 169.115314][ T7288] free_unref_folios+0xa65/0x1800 [ 169.120329][ T7288] folios_put_refs+0x56f/0x740 [ 169.125081][ T7288] free_pages_and_swap_cache+0x3f0/0x4a0 [ 169.130704][ T7288] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 169.136678][ T7288] tlb_finish_mmu+0x168/0x7c0 [ 169.141344][ T7288] vms_clear_ptes+0x55e/0x770 [ 169.146010][ T7288] __mmap_region+0x572/0x25e0 [ 169.150676][ T7288] mmap_region+0x32b/0x3f0 [ 169.155081][ T7288] do_mmap+0xa3e/0x1210 [ 169.159221][ T7288] vm_mmap_pgoff+0x281/0x450 [ 169.163805][ T7288] ksys_mmap_pgoff+0x1c8/0x5c0 [ 169.168560][ T7288] __x64_sys_mmap+0x125/0x190 [ 169.173232][ T7288] do_syscall_64+0xcd/0x4c0 [ 169.177745][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.183720][ T7288] ------------[ cut here ]------------ [ 169.189160][ T7288] kernel BUG at mm/filemap.c:154! [ 169.194171][ T7288] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 169.200570][ T7288] CPU: 0 UID: 0 PID: 7288 Comm: syz.2.351 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 169.212439][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.222478][ T7288] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 169.228620][ T7288] Code: 87 76 c8 ff 89 ee 31 ff 4c 8d 6b 30 e8 ba 71 c8 ff 85 ed 7e 17 e8 71 76 c8 ff 48 c7 c6 a0 17 b9 8b 48 89 df e8 32 ba 11 00 90 <0f> 0b e8 5a 76 c8 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 169.248215][ T7288] RSP: 0018:ffffc9000beff3d0 EFLAGS: 00010046 [ 169.254268][ T7288] RAX: 0000000000080000 RBX: ffffea00013a8000 RCX: ffffc90011cae000 [ 169.262225][ T7288] RDX: 0000000000080000 RSI: ffffffff81f3aa0e RDI: ffff88802d792884 [ 169.270182][ T7288] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 169.278134][ T7288] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880364a6080 [ 169.286087][ T7288] R13: ffffea00013a8030 R14: 0000000000000000 R15: ffffea00013a8000 [ 169.294042][ T7288] FS: 00007f70a7f616c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 169.302959][ T7288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.309529][ T7288] CR2: 00007f70a7f60f98 CR3: 00000000364cb000 CR4: 00000000003526f0 [ 169.317486][ T7288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.325440][ T7288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.333396][ T7288] Call Trace: [ 169.336671][ T7288] [ 169.339589][ T7288] filemap_remove_folio+0xf1/0x250 [ 169.344691][ T7288] remove_inode_hugepages+0x74a/0xed0 [ 169.350052][ T7288] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.355239][ T7288] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 169.361038][ T7288] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 169.366917][ T7288] ? wake_up_q+0xb0/0x160 [ 169.371232][ T7288] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.376428][ T7288] ? up_write+0x1b2/0x520 [ 169.380748][ T7288] hugetlbfs_fallocate+0xf3f/0x12e0 [ 169.385937][ T7288] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 169.391560][ T7288] ? lock_acquire+0x62/0x350 [ 169.396147][ T7288] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 169.401764][ T7288] ? vfs_fallocate+0x608/0x10c0 [ 169.406603][ T7288] vfs_fallocate+0x608/0x10c0 [ 169.411268][ T7288] ? __pfx_vfs_fallocate+0x10/0x10 [ 169.416369][ T7288] ? madvise_vma_behavior+0x222c/0x2420 [ 169.421906][ T7288] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.427786][ T7288] madvise_vma_behavior+0x21ca/0x2420 [ 169.433149][ T7288] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 169.438858][ T7288] ? __pfx_mas_prev+0x10/0x10 [ 169.443528][ T7288] ? find_vma_prev+0xda/0x160 [ 169.448187][ T7288] ? trace_sched_exit_tp+0xde/0x130 [ 169.453374][ T7288] ? __pfx_find_vma_prev+0x10/0x10 [ 169.458468][ T7288] ? __schedule+0x1181/0x5de0 [ 169.463135][ T7288] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 169.468844][ T7288] madvise_walk_vmas+0x1ce/0x2c0 [ 169.473773][ T7288] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 169.479223][ T7288] madvise_do_behavior+0x15d/0x3f0 [ 169.484325][ T7288] ? __pfx_madvise_do_behavior+0x10/0x10 [ 169.489951][ T7288] ? do_madvise+0x134/0x230 [ 169.494460][ T7288] ? __sanitizer_cov_trace_switch+0x40/0x90 [ 169.500338][ T7288] do_madvise+0x161/0x230 [ 169.504657][ T7288] ? __pfx_do_madvise+0x10/0x10 [ 169.509498][ T7288] ? handle_mm_fault+0x2ab/0xd10 [ 169.514425][ T7288] ? do_user_addr_fault+0x843/0x1370 [ 169.519702][ T7288] __x64_sys_madvise+0xa9/0x110 [ 169.524549][ T7288] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.529738][ T7288] do_syscall_64+0xcd/0x4c0 [ 169.534234][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.540110][ T7288] RIP: 0033:0x7f70a718e929 [ 169.544509][ T7288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.564101][ T7288] RSP: 002b:00007f70a7f61038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 169.572496][ T7288] RAX: ffffffffffffffda RBX: 00007f70a73b6320 RCX: 00007f70a718e929 [ 169.580450][ T7288] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 169.588405][ T7288] RBP: 00007f70a7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 169.596360][ T7288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.604315][ T7288] R13: 0000000000000001 R14: 00007f70a73b6320 R15: 00007ffe264d1998 [ 169.612275][ T7288] [ 169.615278][ T7288] Modules linked in: [ 169.619158][ T7288] ---[ end trace 0000000000000000 ]--- [ 169.624592][ T7288] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 169.630737][ T7288] Code: 87 76 c8 ff 89 ee 31 ff 4c 8d 6b 30 e8 ba 71 c8 ff 85 ed 7e 17 e8 71 76 c8 ff 48 c7 c6 a0 17 b9 8b 48 89 df e8 32 ba 11 00 90 <0f> 0b e8 5a 76 c8 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 169.650330][ T7288] RSP: 0018:ffffc9000beff3d0 EFLAGS: 00010046 [ 169.656381][ T7288] RAX: 0000000000080000 RBX: ffffea00013a8000 RCX: ffffc90011cae000 [ 169.664335][ T7288] RDX: 0000000000080000 RSI: ffffffff81f3aa0e RDI: ffff88802d792884 [ 169.672289][ T7288] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 169.680242][ T7288] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880364a6080 [ 169.688196][ T7288] R13: ffffea00013a8030 R14: 0000000000000000 R15: ffffea00013a8000 [ 169.696163][ T7288] FS: 00007f70a7f616c0(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 169.705083][ T7288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.711651][ T7288] CR2: 00007f70a7f60f98 CR3: 00000000364cb000 CR4: 00000000003526f0 [ 169.719616][ T7288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.727569][ T7288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.735540][ T7288] Kernel panic - not syncing: Fatal exception [ 169.741785][ T7288] Kernel Offset: disabled [ 169.746084][ T7288] Rebooting in 86400 seconds..