last executing test programs: 7m46.782430927s ago: executing program 3 (id=3065): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18, r5}) fcntl$setown(0xffffffffffffffff, 0x8, r0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) writev(r6, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0x535}], 0x2) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r4, @ANYRES16=r3], 0x64}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xc0}}, 0x0) 7m45.602801319s ago: executing program 3 (id=3066): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x61, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x0, 0x50323234, 0x3, @stepwise={0x0, 0x0, 0x16, 0xc, 0x1, 0xffffffff}}) 7m45.478429188s ago: executing program 3 (id=3068): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='gre0\x00', 0x10) sendto$phonet(r1, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x0, 0x1}, 0x10) 7m45.359652741s ago: executing program 3 (id=3070): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r1, r1) (async) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000140)=[{0x400, 0x0, 0x0, 0x0}, {0x5, 0x11, 0x0, 0x0}], 0x2}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 7m42.238793872s ago: executing program 3 (id=3076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) (fail_nth: 9) 7m42.171750177s ago: executing program 3 (id=3078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000029000000390000003200000b00000000200000000000000029000000360000002f010000000000000100c204000000fb14000000c4000000290000003e0000000e00000000000000cdd3cc9b8bf7d5fd177e0e30b8b622627b95c157e1ecea2f50c52c7195f0e27e2e4d99fdbf0ab8bd501f39147301f10f3a9ee2cc65ba2dcb2d8a986a1f7a95aea1477c07073573318ca09879fad68d51866d019718b7b43f34b17709fda1d6080b920f32c858072e47823667fc72181382464b518bfe5db2080fab271a9b5d3c4c28bfb643ad86a23621a461215918616ac685d0a34236d231"], 0x50}}, {{0x0, 0x0, 0x0}}], 0x3, 0x400ff97) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000ff00000000000000000058110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r6, 0xc61b5222c357e05f, 0x70bd27, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc03a, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r9}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x2, 0x0, 0x80000003, 0xbc, 0xad75dd0d214466b5, 0x7c35, 0x7}, 0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) sync_file_range(0xffffffffffffffff, 0x4, 0x8, 0x7) 7m26.699370196s ago: executing program 32 (id=3078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000029000000390000003200000b00000000200000000000000029000000360000002f010000000000000100c204000000fb14000000c4000000290000003e0000000e00000000000000cdd3cc9b8bf7d5fd177e0e30b8b622627b95c157e1ecea2f50c52c7195f0e27e2e4d99fdbf0ab8bd501f39147301f10f3a9ee2cc65ba2dcb2d8a986a1f7a95aea1477c07073573318ca09879fad68d51866d019718b7b43f34b17709fda1d6080b920f32c858072e47823667fc72181382464b518bfe5db2080fab271a9b5d3c4c28bfb643ad86a23621a461215918616ac685d0a34236d231"], 0x50}}, {{0x0, 0x0, 0x0}}], 0x3, 0x400ff97) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000ff00000000000000000058110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001900), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r6, 0xc61b5222c357e05f, 0x70bd27, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xc03a, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r9}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x2, 0x0, 0x80000003, 0xbc, 0xad75dd0d214466b5, 0x7c35, 0x7}, 0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) sync_file_range(0xffffffffffffffff, 0x4, 0x8, 0x7) 10.003265734s ago: executing program 5 (id=4348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0067982608010700004000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000103010100000000f0ff0000000099c86f064d576b0d6a0000f24c7bd220d62fa6a918b9c9d625f5394b"], 0x14}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000800)='@', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6c21, 0x80, 0x0, 0x82}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 8.663199911s ago: executing program 5 (id=4355): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="1f", 0x1, 0x0, &(0x7f0000000040)={0x11, 0x11, r2, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x60, 0x2) 6.959612597s ago: executing program 0 (id=4360): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$tipc(0x1e, 0x5, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000380)=""/234, 0xea}, {&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000480)=""/141, 0x8d}], 0x3, &(0x7f0000000540)=""/72, 0x48}}, {{&(0x7f00000005c0)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000780)=""/99, 0x63}], 0x1}, 0xd}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000d4104f1cfd812ef757d6717cea2e44ffe49fc67ef1330b506634e718441abb5b4583d38cdd45bca449ea88715fa10d1701d0bf230a", @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000030f000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x5) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8926, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r1, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) 6.256577748s ago: executing program 1 (id=4364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4a2240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r3 = socket(0x3, 0x2, 0x5) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000000)) syz_open_dev$sndpcmp(0x0, 0x101, 0xa000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 5.762286812s ago: executing program 0 (id=4366): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x1ff, 0xfffffffe}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0xc00) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) 4.145878908s ago: executing program 5 (id=4371): mount$pvfs2(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2010, &(0x7f00000001c0)={[{'^'}, {'sys_enter\x00'}, {'team_slave_1\x00'}, {'{[+-/+!)}(\xd8.'}, {'@\\$/-'}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x8000}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r6, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6b9}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xe100, 0x4]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c010}, 0x40) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x80000000, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x400c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r7, 0x0, 0x91}, 0x18) stat(0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x220142) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xaa, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) 3.673462123s ago: executing program 0 (id=4376): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1a0000000400000000000000010000000000000034977be1240b5bb35b2a236e05365102804c82eacc9920691edb7a4d620ad2edab3db6e73e779118036a0cf731b6ad4435585fb94bac26727ef30096af3c3418c137172fbc159968d28083ba809e698216c933115b96ac79518a90b5d0298050e4d526093aa1d7b46075085abb0d51b7b94de6a3ee6ad65e7c6326d5eed0ed2d5fb0a4ead9d0b2689f067ae18a7784dfe0ab922be64e6950417126e90f2f5c46baabf70802bf498f1cc035c7fa8ea82d700c253af7e8cb189997bbe94f3352d494bf16e52a83965d98f65cadfe94fbaf2ceb5e64617b65ef02a15bfc0a5ac300"/257, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000da7d00"/28], 0x48) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0xffffffffffffffff, 0x800000800000000a, 0x0) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r7, 0x10000000005, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010080000100fddbdf256600000008000300", @ANYRES32=r6, @ANYBLOB="000000000000000000000000000000004ed14834fe68c065b354c551bf3f064d254434a3f142418c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r8, 0x890b, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, 0x0, 0x0) 3.67050229s ago: executing program 4 (id=4377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0067982608010700004000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000103010100000000f0ff0000000099c86f064d576b0d6a0000f24c7bd220d62fa6a918b9c9d625f5394b"], 0x14}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000800)='@', 0x1}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6c21, 0x80, 0x0, 0x82}, &(0x7f0000000080)=0x0, &(0x7f0000000840)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 3.622799208s ago: executing program 5 (id=4378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x67) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000280)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) r7 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r6}}, 0x18) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0xc0c719fe1969ce50, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0xffffffeffffffe00, {0xf0f, 0xfffffffe, 0x0, {0x6, 0x2, 0x80000005, 0xfffffffffffffffe, 0x7, 0x5, 0x3, 0xfffff4f0, 0x9, 0x8000, 0x6, r10, r11, 0x1, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_INSNLIST(r12, 0x8010640b, &(0x7f00001859c0)={0x666666666666824, &(0x7f0000185780)}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 3.427511383s ago: executing program 2 (id=4379): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES16=0x0], 0x48) r1 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbda400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000b63ccacd4c3a6f4e790537000000000000b70300000800"], &(0x7f0000000080)='syzkaller\x00', 0xc}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES8=r0, @ANYRES32, @ANYBLOB="000000100000000000000000000000000095fc82acd347cdda000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x502) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x400454a4, &(0x7f0000000040)) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) r7 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x4, 0x10, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 3.242945062s ago: executing program 5 (id=4380): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/103], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup2(r3, r3) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) flock(0xffffffffffffffff, 0x6) mprotect(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1000001) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 3.213047326s ago: executing program 2 (id=4381): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa0000c4001680c0000180100006"], 0x104}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x100000000000000) 3.165235746s ago: executing program 0 (id=4382): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000011c0)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x3}, 0xfe}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000180), 0x0, 0x40000102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000001c0)=""/4096) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r8, 0x407, 0x100000) 3.162108203s ago: executing program 4 (id=4383): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 2.928560538s ago: executing program 1 (id=4384): syz_init_net_socket$ax25(0x3, 0x3, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x3eb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001800800"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtclass={0x9c, 0x28, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x6}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xcf}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xfffffe01, 0x56b6, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffffffff, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x401, 0x7866}}]}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_mq={0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r2 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xa0, r3, 0x100, 0x70bd2c, 0x25dfdbfa, {{}, {@void, @val={0xc, 0x99, {0xffffff80, 0x12}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x18, 0x5, 0x0) r4 = msgget$private(0x0, 0x23) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001000000000"], 0x8, 0x0) msgrcv(r4, &(0x7f0000000040)={0x0, ""/219}, 0xe3, 0x0, 0x800) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000240)=""/38) 2.710564638s ago: executing program 4 (id=4385): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x5a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000004000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x402) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2.59156568s ago: executing program 2 (id=4386): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x82c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0xfff1, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x800, 0x2, [@TCA_U32_SEL={0x7f4, 0x5, {0x4, 0x6, 0x7f, 0x8, 0x9, 0x4, 0x3, 0xe0000000, [{0x8001, 0x9094, 0x180000, 0xa}, {0xfbab, 0x7, 0x10, 0x65d1}, {0x0, 0xf30, 0x5, 0x7f7}, {0x2, 0x6, 0x7ff, 0x5}, {0x3, 0x2, 0xd7, 0x8001}, {0x9a73, 0xfffffff7, 0x0, 0x3}, {0x2, 0x0, 0x5, 0xd8}, {0x800, 0xff0c, 0x200, 0x4}, {0x11d, 0xffffffff, 0x3, 0x3}, {0x7, 0x0, 0x7ea3, 0x44}, {0xf2b9, 0x5, 0x8, 0x9}, {0x0, 0x10, 0x2, 0x1}, {0x4, 0x0, 0x200, 0x40}, {0x0, 0x4, 0xf055, 0x4}, {0x3, 0x6, 0x4, 0xfffffffc}, {0x200, 0x4, 0x1, 0x5}, {0x0, 0x3, 0xfffffffe, 0x8}, {0x7, 0x3, 0x5, 0x9}, {0x10, 0xc6c, 0xd7d4, 0x583}, {0x40, 0xfff, 0x8, 0x1}, {0x0, 0x7fffffff, 0xffffe42a, 0x7fffffff}, {0x9, 0x400000, 0x200, 0x6}, {0x5, 0xd159, 0x3, 0x1}, {0x7, 0xfffffff9, 0x1, 0x6}, {0x8000, 0x3, 0x6, 0x9}, {0x4, 0x9, 0xb, 0x8}, {0x2851, 0xba92, 0x4, 0x8}, {0x0, 0xfffff000, 0x2}, {0x2, 0x43, 0x5, 0x100}, {0xfff, 0xfffffffe, 0x3}, {0x400004, 0x1, 0x1, 0x9}, {0x7e, 0x7ff, 0x9, 0x2}, {0x8000000, 0x8, 0x3, 0x7}, {0x1ff, 0xa, 0x2, 0x7fa19284}, {0xfffff4c7, 0x8000, 0xffffffff, 0x9}, {0xc, 0x8, 0x81, 0x8}, {0x76, 0xac9, 0xffffffff}, {0xfffffff8, 0x0, 0x400, 0x920b209}, {0x401, 0xfffffc00, 0x8}, {0x4, 0x6, 0x9, 0x2}, {0x5, 0x1, 0x1e, 0x401}, {0x9e0, 0x3000, 0xd, 0x7ff}, {0x6f, 0xfffffffe, 0x401, 0x8}, {0x0, 0x0, 0x400, 0x1000}, {0x101, 0xe, 0xfffffff7}, {0x4, 0xfffffff8, 0x9, 0x9}, {0xffff798d, 0x9, 0x401, 0x1ff}, {0x1, 0x1, 0x123e, 0x2}, {0x6d1b, 0x1, 0x16, 0xf}, {0x7, 0x7, 0x2, 0x6}, {0x6fe, 0x4, 0x6, 0x1}, {0x41, 0x9, 0x8, 0x2}, {0xda, 0x5}, {0x38, 0x1ff, 0x64500, 0x9}, {0x101, 0xffffc514, 0x2, 0x7}, {0x7fffffff, 0x9, 0x7, 0x3}, {0x7, 0x200, 0x6, 0x5}, {0x6, 0xffffffff, 0x6, 0x3f03}, {0x1000, 0x8, 0x9, 0x24e}, {0x6, 0x3, 0x6, 0x6677}, {0x1, 0xffffff87, 0x6, 0x7}, {0xdac, 0x0, 0xffffffd2, 0x3}, {0x4, 0x5, 0x10000, 0x5}, {0x2, 0x4, 0x38, 0x5}, {0x0, 0x3, 0x2, 0x1}, {0x1, 0x3, 0x1, 0x100}, {0x6, 0x1ff, 0xd744, 0x1}, {0x7ff, 0x2, 0x7}, {0xa0000, 0xfffffffd, 0x2, 0x8000}, {0x4, 0x101, 0x3, 0x40}, {0xc, 0x2, 0xffffffff}, {0x20003, 0x3, 0xffffffff, 0x6}, {0xa9e1, 0x4, 0x3, 0xffff335c}, {0xb1, 0x3, 0xdd, 0x1000}, {0x7, 0xea6, 0x2000, 0x1}, {0x7, 0xfffffffa, 0x7fff, 0x50000000}, {0x0, 0x1ff, 0x400}, {0x9, 0x200, 0x200008, 0x1}, {0x0, 0x76, 0xfff, 0x5}, {0x8001, 0x9, 0x3, 0x4}, {0x5, 0x4, 0x5a8, 0x9}, {0xfffffffe, 0x9, 0xffffffff, 0x6}, {0x9, 0x6, 0x6, 0x5}, {0xffffffff, 0x4, 0x8, 0x8}, {0x8000, 0x2, 0x4}, {0xfffff1a0, 0x80000001, 0x3, 0x7f}, {0x7, 0x4, 0xfff, 0x4}, {0xa, 0x0, 0x3, 0x12000}, {0x1, 0x563, 0x1000, 0x5}, {0x7, 0x8, 0x8001, 0xb}, {0x4, 0x94b4c656, 0x0, 0x1}, {0x9, 0x61d0, 0x7, 0x401}, {0xd, 0x7, 0x2, 0x7fff8}, {0x2, 0xfffffffa, 0xfffffffd, 0x3}, {0x6, 0x1, 0x3, 0x4}, {0x4307, 0x0, 0xec, 0x257b}, {0x9, 0x1, 0x101, 0x3}, {0x5, 0x138, 0x0, 0x401}, {0x5, 0x9, 0x80000000, 0xffffff07}, {0x6, 0x1200000, 0x3ff, 0x2}, {0x81, 0x8106, 0x5, 0x80000000}, {0x10000, 0x4, 0x4, 0x5}, {0x8, 0x200, 0x5, 0x7c0}, {0x1, 0x5, 0x2, 0x5}, {0x8, 0x6, 0x2}, {0xb9, 0x9, 0x4, 0x74f}, {0x4, 0xffff267c, 0x2, 0x8}, {0x3, 0xfffffff8, 0x1, 0x100002}, {0x7, 0x9040, 0x2, 0x8}, {0x8000, 0xff, 0xc7, 0x403}, {0x8000, 0xcf84, 0x2, 0x8}, {0x7, 0x80000001, 0xb79, 0xc}, {0xbb55, 0x53dbf73a, 0x9, 0x8}, {0x9, 0xd0, 0x8, 0x4}, {0xb6d, 0x7, 0xea, 0x3}, {0xb7b, 0x7, 0x800, 0x1}, {0x5, 0x7d9, 0xff, 0x5}, {0x3, 0x2, 0xa458, 0x7}, {0x4, 0x2, 0xf9, 0x6}, {0x5, 0xfff, 0x0, 0x72}, {0x677, 0x4, 0x9, 0x5}, {0xaa1, 0x8, 0x401}, {0x0, 0x401, 0xfffffffe, 0x2}, {0x4, 0x0, 0x4, 0x1}, {0x5, 0x9, 0x9, 0xd}, {0x8, 0x9a, 0x6, 0x972}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xe, 0xa}}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x24008004}, 0x20040004) 2.56232092s ago: executing program 1 (id=4387): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000500010006", 0x7) 2.297541985s ago: executing program 1 (id=4388): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b77f, 0x70bd21, 0x0, {0x0, 0x0, 0x0, r1, {0x8, 0x7}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40020) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000100)="370c099069effa43de3e", 0xa, 0xffffffffffffffff) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000280)='\x00') writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f00000002c0)="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", 0x1000}], 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000080)={0xa, 0x0, 0x200a, 0x7fff, 0x800, 0x0, 0x2, 0x1}) 2.258055975s ago: executing program 5 (id=4389): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f00000001c0)=""/4096) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e600"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x28000, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r8, 0x407, 0x100000) 2.204054427s ago: executing program 2 (id=4390): syz_init_net_socket$ax25(0x3, 0x3, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x3eb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001800800"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@newtclass={0x9c, 0x28, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xb}, {0x3}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x6}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xcf}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xfffffe01, 0x56b6, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffffffff, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x401, 0x7866}}]}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_mq={0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r2 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xa0, r4, 0x100, 0x70bd2c, 0x25dfdbfa, {{}, {@void, @val={0xc, 0x99, {0xffffff80, 0x12}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x18, 0x5, 0x0) r5 = msgget$private(0x0, 0x23) msgsnd(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001000000000"], 0x8, 0x0) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000240)=""/38) 1.631056621s ago: executing program 4 (id=4391): socket$igmp(0x2, 0x3, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x30040, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d1050120f808010203010902"], 0x0) socket(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) read(r6, &(0x7f0000000400)=""/171, 0xab) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8], 0x57) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000100)={0x4, 0x6, 0x3, 0x6, 0x5, "dda409ba09b360513d471334732af6e96fc043", 0xfffffffd, 0x3}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r10 = syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x79af, 0x4000, 0x7fff, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) r13 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r13, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x7, 0x0, 0x1, 0x4, 0x1}) io_uring_enter(r10, 0x1627, 0x1711, 0x10, 0x0, 0x0) 1.327703949s ago: executing program 2 (id=4392): accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) (async) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x5, 0x2, 0x0, 0x5, 0xb, 0xb3}, &(0x7f00000000c0)=0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000007c0), &(0x7f0000000800)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES32=0x1, @ANYBLOB="018000"/15, @ANYRES32=0x0, @ANYBLOB="050000000100000005"], 0x50) sched_setscheduler(0x0, 0x5, &(0x7f00000002c0)=0x8) (async) sched_setscheduler(0x0, 0x5, &(0x7f00000002c0)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000000000000e3ffffffffff"], 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) timerfd_create(0x0, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000540), 0x60000, 0x200) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f0000000600)={0x4, 0x0, [{0xaa3, 0x0, 0xc}, {0x634, 0x0, 0x2}, {0x3c2, 0x0, 0x6}, {0xb1c, 0x0, 0x5}]}) (async) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f0000000600)={0x4, 0x0, [{0xaa3, 0x0, 0xc}, {0x634, 0x0, 0x2}, {0x3c2, 0x0, 0x6}, {0xb1c, 0x0, 0x5}]}) 1.17563909s ago: executing program 2 (id=4393): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000040000ffffff950000000000000000000000000000000000b8859ac01cbeaf4ac33416771530dceab3dbc03ad22342558e991dfa269a8790f1458a941bb9904c57574a68ea3a89640ac2bbc3361c1d4ef95f3186290d89997b78d292553cbdf51e4b7dcea834cda320a33931dfc0499361d62dfba1909a7b2b319790221b61d7d847c8893ed8c11e861fc7fface1330f2cd8c3c3052f3e5e77912d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r0 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x648800, 0xc) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x2006f) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x5, 0xfffffff6, 0x100, 0x5}) ioctl$int_out(r1, 0x5460, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8000, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r4, 0xffff, 0x30, 0x6, 0x55d}, &(0x7f0000000180)=0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x902f, 0x7ff, 0x4, 0x4000002, 0x88d7, 0x8d, 0x1007, 0x1, 0x1002, 0x5, 0x200, 0x7, 0x10000007, 0x6, 0x5, 0x1, 0x8, 0x43, 0x9, 0x8e, 0x10c, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x8, 0xff, 0x1, 0x1]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff0200"/51], 0xfdef) write$bt_hci(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="162d4dd16e4bab1b4abd2caa220b87d5398a19648520675f52bcfddfc0c013b74cd052e4934d205aabcda1873c4db02689f5a4e49760610f272aa7e0f27fb12fcf51e87e603fb864bf4b366aad4a22c405916c9a25421d19016c0080000000000000564f312e12f5a6291cc89a4fd5850fc7ab89862318515382be91db8ccdf63985299ae13335ffc985715b512b29f12c84fc9a060b493f3a9f13e4d3"], 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') socket$inet6(0xa, 0x3, 0x1) 196.029915ms ago: executing program 4 (id=4394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4a2240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r3 = socket(0x3, 0x2, 0x5) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000000)) syz_open_dev$sndpcmp(0x0, 0x101, 0xa000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 195.743426ms ago: executing program 1 (id=4395): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 174.161712ms ago: executing program 4 (id=4396): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0) (fail_nth: 10) 10.446354ms ago: executing program 1 (id=4397): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xb) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000200), 0x0, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FROZEN\x00', 0x7) 442.281µs ago: executing program 0 (id=4398): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3000000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0) 0s ago: executing program 0 (id=4399): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/103], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup2(r3, r3) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) flock(0xffffffffffffffff, 0x6) mprotect(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1000001) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) kernel console output (not intermixed with test programs): 8.430871][ T30] audit: type=1400 audit(1757267908.254:3103): avc: denied { ioctl } for pid=22396 comm="syz.1.3964" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1508.481207][ T30] audit: type=1400 audit(1757267908.334:3104): avc: denied { read } for pid=22401 comm="syz.0.3965" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1508.506356][ T5970] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 1508.569616][ T5970] usb 2-1: config 0 has no interface number 0 [ 1508.596526][ T5970] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 1508.606400][ T5970] usb 2-1: config 0 has no interface number 0 [ 1508.625168][ T30] audit: type=1400 audit(1757267908.334:3105): avc: denied { open } for pid=22401 comm="syz.0.3965" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1508.746821][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1508.764654][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1508.785424][ T10] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 1508.791655][ T5970] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 1508.805499][ T10] usb 3-1: config 1 has no interface number 0 [ 1509.290221][ T5970] usb 2-1: config 0 has no interface number 0 [ 1509.308169][ T5970] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 1509.318513][ T5970] usb 2-1: config 0 has no interface number 0 [ 1509.357640][ T5970] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 1509.367401][ T5970] usb 2-1: config 0 has no interface number 0 [ 1509.447120][ T5970] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.13 [ 1509.447131][ T30] audit: type=1400 audit(1757267908.464:3106): avc: denied { bpf } for pid=22401 comm="syz.0.3965" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1509.447174][ T30] audit: type=1400 audit(1757267908.604:3107): avc: denied { unmount } for pid=18720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1509.525338][ T10] usb 3-1: config 1 interface 138 has no altsetting 0 [ 1509.540802][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=203 [ 1509.563806][ T10] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1509.582925][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.594960][ T10] usb 3-1: Product: syz [ 1509.604842][ T10] usb 3-1: Manufacturer: syz [ 1509.617999][ T10] usb 3-1: SerialNumber: syz [ 1509.703341][ T5970] usb 2-1: Product: syz [ 1509.722684][ T5970] usb 2-1: Manufacturer: syz [ 1509.727309][ T5970] usb 2-1: SerialNumber: syz [ 1509.779971][ T5970] usb 2-1: config 0 descriptor?? [ 1509.807759][ T5970] usb 2-1: bad CDC descriptors [ 1510.271446][T22433] hfsplus: unable to find HFS+ superblock [ 1510.358297][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1510.388046][ T5970] usb 2-1: USB disconnect, device number 103 [ 1510.502972][ T10] usb 3-1: USB disconnect, device number 94 [ 1510.632175][T14757] udevd[14757]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1511.154743][T22451] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1511.170953][T22451] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1511.649624][ T5970] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1511.934783][ T5970] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1512.145325][ T5970] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 1512.272293][ T5970] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.838331][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1513.214375][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1513.214391][ T30] audit: type=1400 audit(1757267914.044:3152): avc: denied { ioctl } for pid=22467 comm="syz.1.3982" path="socket:[83685]" dev="sockfs" ino=83685 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1513.270269][ T30] audit: type=1400 audit(1757267914.094:3153): avc: denied { create } for pid=22470 comm="syz.2.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1513.271915][ T5970] usb 6-1: config 63 has no interface number 0 [ 1513.405141][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1513.649676][ T5970] usb 6-1: config 63 interface 66 has no altsetting 0 [ 1513.659130][ T5970] usb 6-1: language id specifier not provided by device, defaulting to English [ 1513.728533][ T30] audit: type=1400 audit(1757267914.534:3154): avc: denied { ioctl } for pid=22467 comm="syz.1.3982" path="socket:[83692]" dev="sockfs" ino=83692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1513.852370][ T5970] usb 6-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 1513.861732][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.869748][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.869798][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1513.879969][ T5970] usb 6-1: SerialNumber: ₯⬒᥋녽ì¶á‡Žê·€ê¸ˆê´¢Ð“çž£ã„­ï—ƒï‘ [ 1513.956639][ T30] audit: type=1400 audit(1757267914.554:3155): avc: denied { create } for pid=22470 comm="syz.2.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1513.976687][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1514.007594][ T5970] usb 6-1: can't set config #63, error -71 [ 1514.013782][T22469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3982'. [ 1514.023733][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1514.046958][ T5970] usb 6-1: USB disconnect, device number 15 [ 1514.078006][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1514.102378][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1514.116987][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1514.153298][ T10] usb 5-1: Manufacturer: syz [ 1514.182432][ T30] audit: type=1400 audit(1757267915.014:3156): avc: denied { ioctl } for pid=22478 comm="syz.5.3985" path="socket:[84714]" dev="sockfs" ino=84714 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1514.208035][ T10] usb 5-1: config 0 descriptor?? [ 1514.297316][ T30] audit: type=1400 audit(1757267915.124:3157): avc: denied { setopt } for pid=22481 comm="syz.2.3986" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1514.387133][ T30] audit: type=1400 audit(1757267915.214:3158): avc: denied { write } for pid=22481 comm="syz.2.3986" name="rt_cache" dev="proc" ino=4026533846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1514.392724][T22482] 9pnet_fd: Insufficient options for proto=fd [ 1514.427287][ T30] audit: type=1400 audit(1757267915.214:3159): avc: denied { mount } for pid=22481 comm="syz.2.3986" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1514.662255][ T30] audit: type=1400 audit(1757267915.224:3160): avc: denied { mounton } for pid=22481 comm="syz.2.3986" path="/127/file0" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1514.685482][T19680] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1514.694074][ T10] rc_core: IR keymap rc-hauppauge not found [ 1514.711716][T22490] hfsplus: unable to find HFS+ superblock [ 1514.875288][ T10] Registered IR keymap rc-empty [ 1514.891883][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1514.901371][ T30] audit: type=1400 audit(1757267915.684:3161): avc: denied { create } for pid=22453 comm="syz.4.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1514.922448][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1514.950914][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1514.977223][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input99 [ 1515.019523][T19680] usb 6-1: Using ep0 maxpacket: 16 [ 1515.027831][T19680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1515.045169][T19680] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1515.055726][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1515.069018][T19680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.088239][T19680] usb 6-1: Product: syz [ 1515.097759][T19680] usb 6-1: Manufacturer: syz [ 1515.107426][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1515.119550][T19680] usb 6-1: SerialNumber: syz [ 1515.139595][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1515.147307][T19680] usb 6-1: config 0 descriptor?? [ 1515.155630][T19680] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1515.169592][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1515.177007][T19680] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1515.199633][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1515.219630][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1515.263781][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1516.263258][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1516.278562][T22502] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1516.514018][T19680] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1516.520320][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1516.610382][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1516.635813][ T10] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1516.652552][T22511] qrtr: Invalid version 0 [ 1516.857010][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1516.919874][ T10] usb 5-1: USB disconnect, device number 77 [ 1516.991605][T19670] kernel write not supported for file /input/mouse0 (pid: 19670 comm: kworker/1:8) [ 1517.136136][T22520] hfsplus: unable to find HFS+ superblock [ 1517.464148][T19680] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1517.479094][T19680] em28xx 6-1:0.0: board has no eeprom [ 1518.601715][T22486] em28xx 6-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 1518.660381][T19680] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1518.881605][T19680] em28xx 6-1:0.0: dvb set to bulk mode. [ 1518.933424][ T10] em28xx 6-1:0.0: Binding DVB extension [ 1518.953032][T19680] usb 6-1: USB disconnect, device number 16 [ 1518.963799][T19680] em28xx 6-1:0.0: Disconnecting em28xx [ 1519.025190][ T10] em28xx 6-1:0.0: Registering input extension [ 1519.039801][T19680] em28xx 6-1:0.0: Closing input extension [ 1519.124155][T19680] em28xx 6-1:0.0: Freeing device [ 1519.333179][T22540] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.4000'. [ 1519.443572][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 1519.443590][ T30] audit: type=1400 audit(1757267920.274:3314): avc: denied { create } for pid=22539 comm="syz.5.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1519.475391][ T30] audit: type=1400 audit(1757267920.304:3315): avc: denied { bind } for pid=22539 comm="syz.5.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1519.550757][ T30] audit: type=1400 audit(1757267920.374:3316): avc: denied { create } for pid=22539 comm="syz.5.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1520.583983][ T30] audit: type=1400 audit(1757267920.374:3317): avc: denied { ioctl } for pid=22539 comm="syz.5.4002" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1520.609399][ T30] audit: type=1400 audit(1757267920.414:3318): avc: denied { ioctl } for pid=22539 comm="syz.5.4002" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=83823 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1520.670033][ T30] audit: type=1400 audit(1757267920.524:3319): avc: denied { module_request } for pid=22533 comm="syz.1.4000" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1520.849567][ T30] audit: type=1400 audit(1757267921.654:3320): avc: denied { sys_module } for pid=22533 comm="syz.1.4000" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1521.051002][ T30] audit: type=1400 audit(1757267921.874:3321): avc: denied { setopt } for pid=22551 comm="syz.5.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1521.249524][T19680] IPVS: starting estimator thread 0... [ 1521.350183][T22554] IPVS: using max 42 ests per chain, 100800 per kthread [ 1521.367042][ T30] audit: type=1400 audit(1757267922.194:3322): avc: denied { name_bind } for pid=22556 comm="syz.5.4004" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1521.390269][ T30] audit: type=1400 audit(1757267922.224:3323): avc: denied { node_bind } for pid=22556 comm="syz.5.4004" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1521.788626][T22562] netlink: 'syz.5.4004': attribute type 27 has an invalid length. [ 1524.458272][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1524.458288][ T30] audit: type=1400 audit(1757267925.284:3344): avc: denied { read } for pid=22586 comm="syz.2.4011" dev="nsfs" ino=4026533772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1525.021369][ T30] audit: type=1400 audit(1757267925.284:3345): avc: denied { open } for pid=22586 comm="syz.2.4011" path="net:[4026533772]" dev="nsfs" ino=4026533772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1525.068660][ T30] audit: type=1400 audit(1757267925.284:3346): avc: denied { create } for pid=22586 comm="syz.2.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1525.182950][ T30] audit: type=1400 audit(1757267925.304:3347): avc: denied { create } for pid=22586 comm="syz.2.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1525.214923][ T30] audit: type=1400 audit(1757267925.304:3348): avc: denied { write } for pid=22586 comm="syz.2.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1525.365902][T22594] hfsplus: unable to find HFS+ superblock [ 1525.475968][ T30] audit: type=1400 audit(1757267925.304:3349): avc: denied { read } for pid=22586 comm="syz.2.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1525.537023][ T30] audit: type=1400 audit(1757267925.304:3350): avc: denied { map_create } for pid=22586 comm="syz.2.4011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1525.698670][ T30] audit: type=1400 audit(1757267925.484:3351): avc: denied { create } for pid=22584 comm="syz.0.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1525.849842][ T30] audit: type=1400 audit(1757267925.514:3352): avc: denied { connect } for pid=22584 comm="syz.0.4012" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1525.891026][ T30] audit: type=1400 audit(1757267925.524:3353): avc: denied { create } for pid=22584 comm="syz.0.4012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1526.232347][T22613] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.4019'. [ 1526.383367][T22613] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1526.394532][T22613] CPU: 0 UID: 0 PID: 22613 Comm: syz.5.4019 Not tainted syzkaller #0 PREEMPT(full) [ 1526.394560][T22613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1526.394572][T22613] Call Trace: [ 1526.394578][T22613] [ 1526.394586][T22613] dump_stack_lvl+0x16c/0x1f0 [ 1526.394616][T22613] sysfs_warn_dup+0x7f/0xa0 [ 1526.394643][T22613] sysfs_do_create_link_sd+0x124/0x140 [ 1526.394678][T22613] sysfs_create_link+0x61/0xc0 [ 1526.394704][T22613] device_add+0x62c/0x1aa0 [ 1526.394732][T22613] ? __pfx_device_add+0x10/0x10 [ 1526.394756][T22613] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1526.394779][T22613] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1526.394811][T22613] wiphy_register+0x1df4/0x29f0 [ 1526.394828][T22613] ? netdev_run_todo+0x864/0x1320 [ 1526.394846][T22613] ? __dev_printk+0x1f0/0x270 [ 1526.394865][T22613] ? __pfx_wiphy_register+0x10/0x10 [ 1526.394889][T22613] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1526.394909][T22613] ieee80211_register_hw+0x24a9/0x4060 [ 1526.394938][T22613] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1526.394960][T22613] ? find_held_lock+0x2b/0x80 [ 1526.394979][T22613] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1526.394997][T22613] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1526.395013][T22613] ? __hrtimer_setup+0x176/0x280 [ 1526.395032][T22613] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1526.395066][T22613] ? trace_kmalloc+0x2b/0xd0 [ 1526.395083][T22613] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1526.395100][T22613] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1526.395119][T22613] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1526.395139][T22613] ? __asan_memcpy+0x3c/0x60 [ 1526.395164][T22613] hwsim_new_radio_nl+0xb51/0x12c0 [ 1526.395187][T22613] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1526.395218][T22613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1526.395239][T22613] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1526.395265][T22613] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1526.395286][T22613] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1526.395314][T22613] ? bpf_lsm_capable+0x9/0x10 [ 1526.395334][T22613] ? security_capable+0x7e/0x260 [ 1526.395352][T22613] ? ns_capable+0xd7/0x110 [ 1526.395372][T22613] genl_rcv_msg+0x55c/0x800 [ 1526.395394][T22613] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1526.395414][T22613] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1526.395437][T22613] ? __lock_acquire+0x62e/0x1ce0 [ 1526.395462][T22613] netlink_rcv_skb+0x155/0x420 [ 1526.395480][T22613] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1526.395500][T22613] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1526.395527][T22613] ? netlink_deliver_tap+0x1ae/0xd30 [ 1526.395541][T22613] ? selinux_netlink_send+0x578/0x830 [ 1526.395560][T22613] ? is_vmalloc_addr+0x86/0xa0 [ 1526.395576][T22613] genl_rcv+0x28/0x40 [ 1526.395594][T22613] netlink_unicast+0x5aa/0x870 [ 1526.395614][T22613] ? __pfx_netlink_unicast+0x10/0x10 [ 1526.395630][T22613] ? __asan_memset+0x23/0x50 [ 1526.395651][T22613] ? __build_skb_around+0x278/0x3b0 [ 1526.395684][T22613] netlink_sendmsg+0x8d1/0xdd0 [ 1526.395705][T22613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1526.395731][T22613] ____sys_sendmsg+0xa98/0xc70 [ 1526.395752][T22613] ? copy_msghdr_from_user+0x10a/0x160 [ 1526.395767][T22613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1526.395797][T22613] ___sys_sendmsg+0x134/0x1d0 [ 1526.395815][T22613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1526.395861][T22613] __sys_sendmsg+0x16d/0x220 [ 1526.395879][T22613] ? __pfx___sys_sendmsg+0x10/0x10 [ 1526.395907][T22613] ? __secure_computing+0x28e/0x3b0 [ 1526.395932][T22613] do_syscall_64+0xcd/0x4c0 [ 1526.395951][T22613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.395967][T22613] RIP: 0033:0x7f16fe78ebe9 [ 1526.395979][T22613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1526.395994][T22613] RSP: 002b:00007f16ff69a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1526.396008][T22613] RAX: ffffffffffffffda RBX: 00007f16fe9c6090 RCX: 00007f16fe78ebe9 [ 1526.396018][T22613] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 1526.396027][T22613] RBP: 00007f16fe811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1526.396035][T22613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1526.396043][T22613] R13: 00007f16fe9c6128 R14: 00007f16fe9c6090 R15: 00007ffe8f84f5c8 [ 1526.396064][T22613] [ 1527.679143][T22622] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.4017'. [ 1527.792190][T22622] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1527.803123][T22622] CPU: 1 UID: 0 PID: 22622 Comm: syz.1.4017 Not tainted syzkaller #0 PREEMPT(full) [ 1527.803151][T22622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1527.803165][T22622] Call Trace: [ 1527.803173][T22622] [ 1527.803182][T22622] dump_stack_lvl+0x16c/0x1f0 [ 1527.803211][T22622] sysfs_warn_dup+0x7f/0xa0 [ 1527.803238][T22622] sysfs_do_create_link_sd+0x124/0x140 [ 1527.803267][T22622] sysfs_create_link+0x61/0xc0 [ 1527.803293][T22622] device_add+0x62c/0x1aa0 [ 1527.803322][T22622] ? __pfx_device_add+0x10/0x10 [ 1527.803342][T22622] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1527.803364][T22622] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1527.803400][T22622] wiphy_register+0x1df4/0x29f0 [ 1527.803420][T22622] ? netdev_run_todo+0x864/0x1320 [ 1527.803441][T22622] ? __dev_printk+0x1f0/0x270 [ 1527.803463][T22622] ? __pfx_wiphy_register+0x10/0x10 [ 1527.803495][T22622] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1527.803522][T22622] ieee80211_register_hw+0x24a9/0x4060 [ 1527.803554][T22622] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1527.803578][T22622] ? find_held_lock+0x2b/0x80 [ 1527.803600][T22622] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1527.803633][T22622] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1527.803653][T22622] ? __hrtimer_setup+0x176/0x280 [ 1527.803676][T22622] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1527.803711][T22622] ? trace_kmalloc+0x2b/0xd0 [ 1527.803731][T22622] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1527.803750][T22622] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1527.803771][T22622] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1527.803793][T22622] ? __asan_memcpy+0x3c/0x60 [ 1527.803818][T22622] hwsim_new_radio_nl+0xb51/0x12c0 [ 1527.803841][T22622] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1527.803870][T22622] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1527.803892][T22622] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1527.803917][T22622] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1527.803939][T22622] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1527.803967][T22622] ? bpf_lsm_capable+0x9/0x10 [ 1527.803988][T22622] ? security_capable+0x7e/0x260 [ 1527.804006][T22622] ? ns_capable+0xd7/0x110 [ 1527.804026][T22622] genl_rcv_msg+0x55c/0x800 [ 1527.804048][T22622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1527.804068][T22622] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1527.804090][T22622] ? __lock_acquire+0x62e/0x1ce0 [ 1527.804117][T22622] netlink_rcv_skb+0x155/0x420 [ 1527.804136][T22622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1527.804160][T22622] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1527.804187][T22622] ? netlink_deliver_tap+0x1ae/0xd30 [ 1527.804202][T22622] ? selinux_netlink_send+0x578/0x830 [ 1527.804220][T22622] ? is_vmalloc_addr+0x86/0xa0 [ 1527.804237][T22622] genl_rcv+0x28/0x40 [ 1527.804255][T22622] netlink_unicast+0x5aa/0x870 [ 1527.804275][T22622] ? __pfx_netlink_unicast+0x10/0x10 [ 1527.804290][T22622] ? __asan_memset+0x23/0x50 [ 1527.804311][T22622] ? __build_skb_around+0x278/0x3b0 [ 1527.804339][T22622] netlink_sendmsg+0x8d1/0xdd0 [ 1527.804360][T22622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1527.804385][T22622] ____sys_sendmsg+0xa98/0xc70 [ 1527.804406][T22622] ? copy_msghdr_from_user+0x10a/0x160 [ 1527.804421][T22622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1527.804446][T22622] ? __pfx_futex_wake_mark+0x10/0x10 [ 1527.804470][T22622] ___sys_sendmsg+0x134/0x1d0 [ 1527.804487][T22622] ? __pfx____sys_sendmsg+0x10/0x10 [ 1527.804530][T22622] __sys_sendmsg+0x16d/0x220 [ 1527.804546][T22622] ? __pfx___sys_sendmsg+0x10/0x10 [ 1527.804561][T22622] ? __x64_sys_futex+0x1e0/0x4c0 [ 1527.804597][T22622] do_syscall_64+0xcd/0x4c0 [ 1527.804621][T22622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.804636][T22622] RIP: 0033:0x7f90e978ebe9 [ 1527.804649][T22622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1527.804664][T22622] RSP: 002b:00007f90ea526038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1527.804679][T22622] RAX: ffffffffffffffda RBX: 00007f90e99c6360 RCX: 00007f90e978ebe9 [ 1527.804690][T22622] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 1527.804700][T22622] RBP: 00007f90e9811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1527.804709][T22622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1527.804719][T22622] R13: 00007f90e99c63f8 R14: 00007f90e99c6360 R15: 00007ffea568cda8 [ 1527.804741][T22622] [ 1528.835488][T22630] tipc: Enabled bearer , priority 0 [ 1529.884750][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1529.884767][ T30] audit: type=1400 audit(1757267930.714:3394): avc: denied { ioctl } for pid=22649 comm="syz.1.4028" path="socket:[86058]" dev="sockfs" ino=86058 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1530.035947][ T30] audit: type=1400 audit(1757267930.864:3395): avc: denied { read write } for pid=22652 comm="syz.2.4029" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1530.237681][T22656] hfsplus: unable to find HFS+ superblock [ 1530.324107][ T30] audit: type=1400 audit(1757267930.894:3396): avc: denied { open } for pid=22652 comm="syz.2.4029" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1530.348690][ T30] audit: type=1400 audit(1757267930.904:3397): avc: denied { mounton } for pid=22652 comm="syz.2.4029" path="/137/file0" dev="tmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1531.225653][ T30] audit: type=1400 audit(1757267930.904:3398): avc: denied { mount } for pid=22652 comm="syz.2.4029" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1531.258283][ T30] audit: type=1400 audit(1757267930.974:3399): avc: denied { map_read map_write } for pid=22652 comm="syz.2.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1531.284089][ T30] audit: type=1400 audit(1757267931.064:3400): avc: denied { mounton } for pid=22652 comm="syz.2.4029" path="/syzcgroup/unified/syz2" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1531.308159][ T30] audit: type=1400 audit(1757267931.264:3401): avc: denied { read } for pid=22654 comm="syz.1.4030" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1531.331869][ T30] audit: type=1400 audit(1757267931.274:3402): avc: denied { open } for pid=22654 comm="syz.1.4030" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1531.355939][ T30] audit: type=1400 audit(1757267931.324:3403): avc: denied { create } for pid=22654 comm="syz.1.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1531.696908][T22629] tipc: Disabling bearer [ 1532.413469][T22679] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.4035'. [ 1532.425694][T22679] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1532.436805][T22679] CPU: 0 UID: 0 PID: 22679 Comm: syz.5.4035 Not tainted syzkaller #0 PREEMPT(full) [ 1532.436832][T22679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1532.436843][T22679] Call Trace: [ 1532.436850][T22679] [ 1532.436858][T22679] dump_stack_lvl+0x16c/0x1f0 [ 1532.436891][T22679] sysfs_warn_dup+0x7f/0xa0 [ 1532.436918][T22679] sysfs_do_create_link_sd+0x124/0x140 [ 1532.436945][T22679] sysfs_create_link+0x61/0xc0 [ 1532.436968][T22679] device_add+0x62c/0x1aa0 [ 1532.436990][T22679] ? __pfx_device_add+0x10/0x10 [ 1532.437008][T22679] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1532.437027][T22679] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1532.437056][T22679] wiphy_register+0x1df4/0x29f0 [ 1532.437072][T22679] ? netdev_run_todo+0x864/0x1320 [ 1532.437090][T22679] ? __dev_printk+0x1f0/0x270 [ 1532.437109][T22679] ? __pfx_wiphy_register+0x10/0x10 [ 1532.437132][T22679] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1532.437153][T22679] ieee80211_register_hw+0x24a9/0x4060 [ 1532.437179][T22679] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1532.437200][T22679] ? find_held_lock+0x2b/0x80 [ 1532.437220][T22679] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1532.437237][T22679] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1532.437252][T22679] ? __hrtimer_setup+0x176/0x280 [ 1532.437270][T22679] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1532.437302][T22679] ? trace_kmalloc+0x2b/0xd0 [ 1532.437319][T22679] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1532.437336][T22679] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1532.437355][T22679] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1532.437376][T22679] ? __asan_memcpy+0x3c/0x60 [ 1532.437414][T22679] hwsim_new_radio_nl+0xb51/0x12c0 [ 1532.437437][T22679] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1532.437467][T22679] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1532.437491][T22679] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1532.437518][T22679] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1532.437542][T22679] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1532.437572][T22679] ? bpf_lsm_capable+0x9/0x10 [ 1532.437593][T22679] ? security_capable+0x7e/0x260 [ 1532.437613][T22679] ? ns_capable+0xd7/0x110 [ 1532.437633][T22679] genl_rcv_msg+0x55c/0x800 [ 1532.437656][T22679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1532.437676][T22679] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1532.437699][T22679] ? __lock_acquire+0x62e/0x1ce0 [ 1532.437725][T22679] netlink_rcv_skb+0x155/0x420 [ 1532.437742][T22679] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1532.437763][T22679] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1532.437789][T22679] ? netlink_deliver_tap+0x1ae/0xd30 [ 1532.437804][T22679] ? selinux_netlink_send+0x578/0x830 [ 1532.437822][T22679] ? is_vmalloc_addr+0x86/0xa0 [ 1532.437839][T22679] genl_rcv+0x28/0x40 [ 1532.437856][T22679] netlink_unicast+0x5aa/0x870 [ 1532.437881][T22679] ? __pfx_netlink_unicast+0x10/0x10 [ 1532.437897][T22679] ? __asan_memset+0x23/0x50 [ 1532.437918][T22679] ? __build_skb_around+0x278/0x3b0 [ 1532.437946][T22679] netlink_sendmsg+0x8d1/0xdd0 [ 1532.437967][T22679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1532.437993][T22679] ____sys_sendmsg+0xa98/0xc70 [ 1532.438013][T22679] ? copy_msghdr_from_user+0x10a/0x160 [ 1532.438029][T22679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1532.438062][T22679] ___sys_sendmsg+0x134/0x1d0 [ 1532.438081][T22679] ? __pfx____sys_sendmsg+0x10/0x10 [ 1532.438125][T22679] __sys_sendmsg+0x16d/0x220 [ 1532.438141][T22679] ? __pfx___sys_sendmsg+0x10/0x10 [ 1532.438166][T22679] ? __secure_computing+0x28e/0x3b0 [ 1532.438191][T22679] do_syscall_64+0xcd/0x4c0 [ 1532.438210][T22679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.438226][T22679] RIP: 0033:0x7f16fe78ebe9 [ 1532.438239][T22679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.438253][T22679] RSP: 002b:00007f16ff69a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1532.438268][T22679] RAX: ffffffffffffffda RBX: 00007f16fe9c6090 RCX: 00007f16fe78ebe9 [ 1532.438279][T22679] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 1532.438289][T22679] RBP: 00007f16fe811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1532.438298][T22679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.438308][T22679] R13: 00007f16fe9c6128 R14: 00007f16fe9c6090 R15: 00007ffe8f84f5c8 [ 1532.438329][T22679] [ 1534.908227][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1534.908239][ T30] audit: type=1400 audit(1757267935.734:3436): avc: denied { prog_load } for pid=22703 comm="syz.2.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1535.777749][ T30] audit: type=1400 audit(1757267935.764:3437): avc: denied { bpf } for pid=22703 comm="syz.2.4043" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1535.798701][ T30] audit: type=1400 audit(1757267935.764:3438): avc: denied { perfmon } for pid=22703 comm="syz.2.4043" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1535.819672][ C1] vkms_vblank_simulate: vblank timer overrun [ 1535.826338][ T30] audit: type=1400 audit(1757267935.764:3439): avc: denied { prog_run } for pid=22703 comm="syz.2.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1535.845487][ T30] audit: type=1400 audit(1757267935.764:3440): avc: denied { map_create } for pid=22703 comm="syz.2.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1535.864887][ T30] audit: type=1400 audit(1757267935.824:3441): avc: denied { read } for pid=22703 comm="syz.2.4043" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1535.887836][ C1] vkms_vblank_simulate: vblank timer overrun [ 1535.895433][ T30] audit: type=1400 audit(1757267935.824:3442): avc: denied { open } for pid=22703 comm="syz.2.4043" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1536.122751][ T30] audit: type=1400 audit(1757267935.884:3443): avc: denied { create } for pid=22703 comm="syz.2.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1536.148563][ T30] audit: type=1400 audit(1757267935.884:3444): avc: denied { ioctl } for pid=22703 comm="syz.2.4043" path="socket:[86145]" dev="sockfs" ino=86145 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1536.177675][ T30] audit: type=1400 audit(1757267936.894:3445): avc: denied { create } for pid=22708 comm="syz.4.4044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1538.589592][T19670] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1538.751128][T19670] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.770379][T19670] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1538.784316][T19670] usb 5-1: config 0 has no interface number 1 [ 1538.812263][T19670] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1538.840982][T19670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.903083][T19670] usb 5-1: config 0 descriptor?? [ 1538.976398][T19670] usb 5-1: unknown number of interfaces: 2 [ 1539.100511][T22732] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4050'. [ 1539.109651][T22732] xt_policy: neither incoming nor outgoing policy selected [ 1540.228744][T19670] usb 5-1: USB disconnect, device number 78 [ 1540.270808][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1540.270825][ T30] audit: type=1400 audit(1757267941.104:3476): avc: denied { create } for pid=22741 comm="syz.2.4052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1540.315328][T22743] hfsplus: unable to find HFS+ superblock [ 1540.388619][ T30] audit: type=1400 audit(1757267941.144:3477): avc: denied { mounton } for pid=22736 comm="syz.0.4051" path="/syzcgroup/unified/syz0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1541.202185][T22746] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4053'. [ 1541.211283][T22746] xt_policy: neither incoming nor outgoing policy selected [ 1541.906236][ T30] audit: type=1400 audit(1757267942.734:3478): avc: denied { create } for pid=22763 comm="syz.0.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1541.987905][ T30] audit: type=1400 audit(1757267942.764:3479): avc: denied { connect } for pid=22763 comm="syz.0.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1542.081311][ T30] audit: type=1400 audit(1757267942.764:3480): avc: denied { create } for pid=22763 comm="syz.0.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1542.116252][ T30] audit: type=1400 audit(1757267942.764:3481): avc: denied { execute } for pid=22763 comm="syz.0.4059" name="file1" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1542.151858][ T30] audit: type=1400 audit(1757267942.774:3482): avc: denied { execute_no_trans } for pid=22763 comm="syz.0.4059" path="/187/file1" dev="tmpfs" ino=994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1542.465424][ T30] audit: type=1400 audit(1757267942.914:3483): avc: denied { name_bind } for pid=22771 comm="syz.2.4061" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1542.659504][ T5909] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1542.759033][ T30] audit: type=1400 audit(1757267942.914:3484): avc: denied { node_bind } for pid=22771 comm="syz.2.4061" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1543.043748][ T30] audit: type=1400 audit(1757267942.914:3485): avc: denied { read } for pid=22769 comm="syz.1.4062" dev="nsfs" ino=4026533777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1543.212692][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 1543.240205][ T5909] usb 3-1: config 0 has no interfaces? [ 1543.259658][ T5909] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1543.284463][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.371283][ T5909] usb 3-1: config 0 descriptor?? [ 1544.749754][T22800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4068'. [ 1544.799236][T19670] usb 3-1: USB disconnect, device number 95 [ 1544.974292][T22806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4070'. [ 1545.084251][T22800] : entered promiscuous mode [ 1545.502479][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1545.502495][ T30] audit: type=1400 audit(1757267946.334:3513): avc: denied { create } for pid=22814 comm="syz.0.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1545.530835][ T30] audit: type=1400 audit(1757267946.364:3514): avc: denied { write } for pid=22814 comm="syz.0.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1545.552959][ T30] audit: type=1400 audit(1757267946.364:3515): avc: denied { read } for pid=22816 comm="syz.4.4075" dev="nsfs" ino=4026533326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1545.586360][T22822] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4077'. [ 1545.595397][T22822] xt_policy: neither incoming nor outgoing policy selected [ 1545.658370][ T30] audit: type=1400 audit(1757267946.364:3516): avc: denied { open } for pid=22816 comm="syz.4.4075" path="net:[4026533326]" dev="nsfs" ino=4026533326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1545.930137][T22823] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4075'. [ 1545.957402][ T30] audit: type=1400 audit(1757267946.364:3517): avc: denied { create } for pid=22816 comm="syz.4.4075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1546.075644][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.651753][ T30] audit: type=1400 audit(1757267946.384:3518): avc: denied { create } for pid=22820 comm="syz.5.4076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1546.671460][ T30] audit: type=1400 audit(1757267946.404:3519): avc: denied { ioctl } for pid=22816 comm="syz.4.4075" path="socket:[86350]" dev="sockfs" ino=86350 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1546.697840][ T30] audit: type=1400 audit(1757267946.414:3520): avc: denied { read write } for pid=22817 comm="syz.2.4077" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1546.721170][ T30] audit: type=1400 audit(1757267946.414:3521): avc: denied { open } for pid=22817 comm="syz.2.4077" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1546.758565][ T30] audit: type=1400 audit(1757267946.414:3522): avc: denied { allowed } for pid=22817 comm="syz.2.4077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1550.298898][T22858] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1550.373677][T22862] netlink: 'syz.4.4089': attribute type 4 has an invalid length. [ 1550.386147][T19680] lo speed is unknown, defaulting to 1000 [ 1550.519739][T19680] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1550.693207][T19680] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1550.717403][T19680] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1550.828265][T22865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4091'. [ 1550.855436][T19680] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1550.865662][T19680] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1550.890504][T19680] usb 6-1: Product: syz [ 1550.894744][T19680] usb 6-1: Manufacturer: syz [ 1550.899582][T19680] usb 6-1: SerialNumber: syz [ 1550.907281][T19680] usb 6-1: config 0 descriptor?? [ 1550.928333][T19680] usb 6-1: selecting invalid altsetting 0 [ 1550.996906][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1550.996924][ T30] audit: type=1400 audit(1757267951.814:3546): avc: denied { unmount } for pid=19217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1551.103884][ T30] audit: type=1400 audit(1757267951.894:3547): avc: denied { unmount } for pid=19217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1551.231771][T22871] fuse: Bad value for 'fd' [ 1551.443839][ T30] audit: type=1400 audit(1757267951.924:3548): avc: denied { read } for pid=22868 comm="syz.4.4093" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1551.548324][T19670] usb 6-1: USB disconnect, device number 17 [ 1551.765645][ T30] audit: type=1400 audit(1757267951.924:3549): avc: denied { open } for pid=22868 comm="syz.4.4093" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1551.789426][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.811633][ T30] audit: type=1400 audit(1757267952.054:3550): avc: denied { mounton } for pid=22868 comm="syz.4.4093" path="/170/file0" dev="tmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1551.838290][ T30] audit: type=1400 audit(1757267952.134:3551): avc: denied { read write } for pid=22868 comm="syz.4.4093" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1551.883128][ T30] audit: type=1400 audit(1757267952.144:3552): avc: denied { open } for pid=22868 comm="syz.4.4093" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1551.906783][ C1] vkms_vblank_simulate: vblank timer overrun [ 1551.990417][ T30] audit: type=1400 audit(1757267952.154:3553): avc: denied { ioctl } for pid=22868 comm="syz.4.4093" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x942d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1552.073384][ T30] audit: type=1400 audit(1757267952.324:3554): avc: denied { create } for pid=22859 comm="syz.5.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1552.286891][T22889] hfsplus: unable to find HFS+ superblock [ 1552.429969][ T30] audit: type=1400 audit(1757267952.324:3555): avc: denied { module_request } for pid=22859 comm="syz.5.4090" kmod="net-pf-16-proto-19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1555.541731][T22911] netlink: 'syz.0.4101': attribute type 27 has an invalid length. [ 1555.548967][T22918] FAULT_INJECTION: forcing a failure. [ 1555.548967][T22918] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.565053][T22918] CPU: 0 UID: 0 PID: 22918 Comm: syz.4.4105 Not tainted syzkaller #0 PREEMPT(full) [ 1555.565082][T22918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1555.565093][T22918] Call Trace: [ 1555.565100][T22918] [ 1555.565107][T22918] dump_stack_lvl+0x16c/0x1f0 [ 1555.565132][T22918] should_fail_ex+0x512/0x640 [ 1555.565156][T22918] should_failslab+0xc2/0x120 [ 1555.565179][T22918] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1555.565202][T22918] ? sidtab_sid2str_get+0x17a/0x680 [ 1555.565233][T22918] kmemdup_noprof+0x29/0x60 [ 1555.565253][T22918] sidtab_sid2str_get+0x17a/0x680 [ 1555.565282][T22918] sidtab_entry_to_string+0x33/0x110 [ 1555.565310][T22918] security_sid_to_context_core+0x35c/0x640 [ 1555.565339][T22918] avc_audit_post_callback+0x109/0x8f0 [ 1555.565359][T22918] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1555.565375][T22918] ? skb_put+0x138/0x1b0 [ 1555.565400][T22918] ? audit_log_n_string+0x253/0x540 [ 1555.565423][T22918] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 1555.565439][T22918] common_lsm_audit+0x24b/0x300 [ 1555.565465][T22918] ? __pfx_common_lsm_audit+0x10/0x10 [ 1555.565490][T22918] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1555.565509][T22918] ? avc_update_node.isra.0+0x4c0/0xb60 [ 1555.565529][T22918] slow_avc_audit+0x186/0x210 [ 1555.565548][T22918] ? __pfx_slow_avc_audit+0x10/0x10 [ 1555.565569][T22918] ? avc_denied+0x14a/0x190 [ 1555.565596][T22918] ? avc_has_perm_noaudit+0x306/0x3b0 [ 1555.565618][T22918] avc_has_perm+0x1b5/0x1f0 [ 1555.565639][T22918] ? __pfx_avc_has_perm+0x10/0x10 [ 1555.565660][T22918] ? find_held_lock+0x2b/0x80 [ 1555.565687][T22918] sock_has_perm+0x252/0x2f0 [ 1555.565709][T22918] ? __pfx_sock_has_perm+0x10/0x10 [ 1555.565741][T22918] ? find_held_lock+0x2b/0x80 [ 1555.565767][T22918] security_socket_getsockopt+0x211/0x240 [ 1555.565791][T22918] do_sock_getsockopt+0xf5/0x440 [ 1555.565816][T22918] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1555.565837][T22918] ? __fget_files+0x204/0x3c0 [ 1555.565870][T22918] __sys_getsockopt+0x12f/0x260 [ 1555.565894][T22918] __x64_sys_getsockopt+0xbd/0x160 [ 1555.565911][T22918] ? do_syscall_64+0x91/0x4c0 [ 1555.565930][T22918] ? lockdep_hardirqs_on+0x7c/0x110 [ 1555.565949][T22918] do_syscall_64+0xcd/0x4c0 [ 1555.565970][T22918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.565988][T22918] RIP: 0033:0x7f884618ebe9 [ 1555.566003][T22918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.566020][T22918] RSP: 002b:00007f8846fb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1555.566035][T22918] RAX: ffffffffffffffda RBX: 00007f88463c5fa0 RCX: 00007f884618ebe9 [ 1555.566046][T22918] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 1555.566056][T22918] RBP: 00007f8846fb5090 R08: 00002000000002c0 R09: 0000000000000000 [ 1555.566067][T22918] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1555.566078][T22918] R13: 00007f88463c6038 R14: 00007f88463c5fa0 R15: 00007fffa7909e08 [ 1555.566101][T22918] [ 1556.447994][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1556.448013][ T30] audit: type=1400 audit(1757267957.244:3572): avc: denied { execute } for pid=22925 comm="syz.2.4109" name="file1" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1556.778171][ T30] audit: type=1400 audit(1757267957.244:3573): avc: denied { execute_no_trans } for pid=22925 comm="syz.2.4109" path="/155/file1" dev="tmpfs" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1556.802407][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.515844][ T30] audit: type=1400 audit(1757267958.154:3574): avc: denied { setopt } for pid=22945 comm="syz.4.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1557.559541][ T30] audit: type=1400 audit(1757267958.374:3575): avc: denied { mount } for pid=22945 comm="syz.4.4115" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1557.581572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.597429][ T30] audit: type=1400 audit(1757267958.424:3576): avc: denied { read write } for pid=22945 comm="syz.4.4115" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1557.632981][ T30] audit: type=1400 audit(1757267958.424:3577): avc: denied { open } for pid=22945 comm="syz.4.4115" path="/179/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1557.941297][ T30] audit: type=1400 audit(1757267958.774:3578): avc: denied { ioctl } for pid=22951 comm="syz.1.4116" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=85641 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1557.941737][T22953] netlink: 'syz.1.4116': attribute type 9 has an invalid length. [ 1557.967477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.185036][T22959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4118'. [ 1558.209873][ T30] audit: type=1400 audit(1757267959.034:3579): avc: denied { unmount } for pid=19217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1559.250926][ T30] audit: type=1400 audit(1757267959.214:3580): avc: denied { write } for pid=22966 comm="syz.2.4122" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1559.283669][ T30] audit: type=1400 audit(1757267960.074:3581): avc: denied { block_suspend } for pid=22962 comm="syz.4.4120" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1559.546929][T22977] FAULT_INJECTION: forcing a failure. [ 1559.546929][T22977] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.705306][T22977] CPU: 1 UID: 0 PID: 22977 Comm: syz.0.4125 Not tainted syzkaller #0 PREEMPT(full) [ 1559.705332][T22977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1559.705341][T22977] Call Trace: [ 1559.705347][T22977] [ 1559.705354][T22977] dump_stack_lvl+0x16c/0x1f0 [ 1559.705371][T22977] should_fail_ex+0x512/0x640 [ 1559.705383][T22977] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1559.705402][T22977] should_failslab+0xc2/0x120 [ 1559.705415][T22977] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1559.705432][T22977] ? rtnl_newlink+0x11b/0x2000 [ 1559.705450][T22977] ? __pfx_rtnl_newlink+0x10/0x10 [ 1559.705462][T22977] rtnl_newlink+0x11b/0x2000 [ 1559.705474][T22977] ? find_held_lock+0x2b/0x80 [ 1559.705491][T22977] ? __pfx_rtnl_newlink+0x10/0x10 [ 1559.705503][T22977] ? find_held_lock+0x2b/0x80 [ 1559.705516][T22977] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1559.705530][T22977] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1559.705545][T22977] ? __lock_acquire+0x62e/0x1ce0 [ 1559.705569][T22977] ? find_held_lock+0x2b/0x80 [ 1559.705585][T22977] ? __pfx_rtnl_newlink+0x10/0x10 [ 1559.705597][T22977] ? __pfx_rtnl_newlink+0x10/0x10 [ 1559.705608][T22977] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1559.705622][T22977] ? __pfx_rtnl_newlink+0x10/0x10 [ 1559.705634][T22977] rtnetlink_rcv_msg+0x95e/0xe90 [ 1559.705648][T22977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1559.705664][T22977] ? __lock_acquire+0x62e/0x1ce0 [ 1559.705683][T22977] netlink_rcv_skb+0x155/0x420 [ 1559.705698][T22977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1559.705712][T22977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1559.705730][T22977] ? netlink_deliver_tap+0x1ae/0xd30 [ 1559.705741][T22977] ? selinux_netlink_send+0x578/0x830 [ 1559.705755][T22977] ? is_vmalloc_addr+0x86/0xa0 [ 1559.705769][T22977] netlink_unicast+0x5aa/0x870 [ 1559.705784][T22977] ? __pfx_netlink_unicast+0x10/0x10 [ 1559.705802][T22977] netlink_sendmsg+0x8d1/0xdd0 [ 1559.705817][T22977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.705835][T22977] ____sys_sendmsg+0xa98/0xc70 [ 1559.705851][T22977] ? copy_msghdr_from_user+0x10a/0x160 [ 1559.705863][T22977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1559.705884][T22977] ___sys_sendmsg+0x134/0x1d0 [ 1559.705897][T22977] ? __pfx____sys_sendmsg+0x10/0x10 [ 1559.705926][T22977] __sys_sendmsg+0x16d/0x220 [ 1559.705938][T22977] ? __pfx___sys_sendmsg+0x10/0x10 [ 1559.705958][T22977] do_syscall_64+0xcd/0x4c0 [ 1559.705972][T22977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.705984][T22977] RIP: 0033:0x7fa79358ebe9 [ 1559.705993][T22977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.706004][T22977] RSP: 002b:00007fa79440c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1559.706015][T22977] RAX: ffffffffffffffda RBX: 00007fa7937c5fa0 RCX: 00007fa79358ebe9 [ 1559.706022][T22977] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1559.706029][T22977] RBP: 00007fa79440c090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.706035][T22977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.706041][T22977] R13: 00007fa7937c6038 R14: 00007fa7937c5fa0 R15: 00007fff029cd2f8 [ 1559.706055][T22977] [ 1560.089610][T22986] netlink: 'syz.2.4126': attribute type 27 has an invalid length. [ 1560.128972][T22985] fuse: Bad value for 'fd' [ 1560.312033][T22988] hfsplus: unable to find HFS+ superblock [ 1560.533626][T22986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.899671][T22986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1560.984806][T22986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1561.216147][T23001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4131'. [ 1561.455417][T22986] veth0_macvtap: left allmulticast mode [ 1561.461902][T22986] macvtap0: left allmulticast mode [ 1561.714768][T21330] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.736078][T21330] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.747269][ T65] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.777300][ T65] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.967497][T23008] FAULT_INJECTION: forcing a failure. [ 1561.967497][T23008] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.009642][T23008] CPU: 1 UID: 0 PID: 23008 Comm: syz.2.4134 Not tainted syzkaller #0 PREEMPT(full) [ 1562.009670][T23008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1562.009681][T23008] Call Trace: [ 1562.009688][T23008] [ 1562.009695][T23008] dump_stack_lvl+0x16c/0x1f0 [ 1562.009722][T23008] should_fail_ex+0x512/0x640 [ 1562.009742][T23008] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1562.009765][T23008] should_failslab+0xc2/0x120 [ 1562.009786][T23008] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1562.009805][T23008] ? getname_flags.part.0+0x4c/0x550 [ 1562.009838][T23008] getname_flags.part.0+0x4c/0x550 [ 1562.009866][T23008] getname_flags+0x93/0xf0 [ 1562.009884][T23008] user_path_at+0x24/0x60 [ 1562.009903][T23008] __x64_sys_mount+0x1fc/0x310 [ 1562.009926][T23008] ? __pfx___x64_sys_mount+0x10/0x10 [ 1562.009955][T23008] do_syscall_64+0xcd/0x4c0 [ 1562.009976][T23008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.009993][T23008] RIP: 0033:0x7fca7578ebe9 [ 1562.010008][T23008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.010025][T23008] RSP: 002b:00007fca765da038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1562.010043][T23008] RAX: ffffffffffffffda RBX: 00007fca759c5fa0 RCX: 00007fca7578ebe9 [ 1562.010055][T23008] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 1562.010066][T23008] RBP: 00007fca765da090 R08: 0000200000000740 R09: 0000000000000000 [ 1562.010077][T23008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.010087][T23008] R13: 00007fca759c6038 R14: 00007fca759c5fa0 R15: 00007ffc355e8a98 [ 1562.010111][T23008] [ 1562.317113][ T30] audit: type=1400 audit(1757267963.134:3582): avc: denied { read write } for pid=23002 comm="syz.5.4132" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1562.371314][ T30] audit: type=1400 audit(1757267963.134:3583): avc: denied { open } for pid=23002 comm="syz.5.4132" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1562.583344][ T30] audit: type=1400 audit(1757267963.414:3584): avc: denied { read write } for pid=23019 comm="syz.0.4137" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1563.085385][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1563.094431][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1563.105278][T23018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1563.129513][ T30] audit: type=1400 audit(1757267963.414:3585): avc: denied { open } for pid=23019 comm="syz.0.4137" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1563.154836][ T30] audit: type=1400 audit(1757267963.984:3586): avc: denied { write } for pid=23019 comm="syz.0.4137" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1563.187076][ T30] audit: type=1400 audit(1757267963.984:3587): avc: denied { open } for pid=23019 comm="syz.0.4137" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1563.228273][ T30] audit: type=1400 audit(1757267963.984:3588): avc: denied { ioctl } for pid=23019 comm="syz.0.4137" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1563.412949][ T30] audit: type=1400 audit(1757267964.244:3589): avc: denied { create } for pid=23025 comm="syz.4.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1563.989490][ T30] audit: type=1400 audit(1757267964.794:3590): avc: denied { read write } for pid=23036 comm="syz.4.4143" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1564.036362][ T30] audit: type=1400 audit(1757267964.794:3591): avc: denied { open } for pid=23036 comm="syz.4.4143" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1564.424067][T23050] netlink: 'syz.5.4144': attribute type 27 has an invalid length. [ 1565.209491][ T5939] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1565.572982][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.881888][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.926689][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1565.945675][ T5939] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1565.991226][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.035460][ T5939] usb 3-1: config 0 descriptor?? [ 1566.664814][T23085] fuse: Bad value for 'fd' [ 1567.017054][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 1567.042512][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1567.118915][T23094] fuse: Bad value for 'fd' [ 1567.320536][ T5939] usb 3-1: USB disconnect, device number 96 [ 1567.355217][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1567.355232][ T30] audit: type=1400 audit(1757267968.154:3653): avc: denied { open } for pid=23092 comm="syz.0.4156" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1567.397392][ T30] audit: type=1400 audit(1757267968.224:3654): avc: denied { ioctl } for pid=23092 comm="syz.0.4156" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1567.521479][ T30] audit: type=1400 audit(1757267968.354:3655): avc: denied { name_bind } for pid=23099 comm="syz.4.4157" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1567.542771][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.564780][ T30] audit: type=1400 audit(1757267968.394:3656): avc: denied { append } for pid=23097 comm="syz.1.4158" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1567.593895][T23105] netlink: 'syz.5.4159': attribute type 27 has an invalid length. [ 1567.602249][ T30] audit: type=1400 audit(1757267968.414:3657): avc: denied { create } for pid=23100 comm="syz.5.4159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1567.622209][ T30] audit: type=1400 audit(1757267968.424:3658): avc: denied { prog_run } for pid=23100 comm="syz.5.4159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1567.789633][ T5970] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1567.946192][T23109] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1568.069832][ T30] audit: type=1400 audit(1757267968.764:3659): avc: denied { create } for pid=23107 comm="syz.2.4160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1568.109606][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 1568.228605][ T5970] usb 5-1: config 0 has no interfaces? [ 1568.248753][ T5970] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1568.266041][ T30] audit: type=1400 audit(1757267968.794:3660): avc: denied { ioctl } for pid=23107 comm="syz.2.4160" path="socket:[87030]" dev="sockfs" ino=87030 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1568.336170][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.395730][ T5970] usb 5-1: config 0 descriptor?? [ 1568.473138][ T30] audit: type=1400 audit(1757267968.894:3661): avc: denied { read write } for pid=23107 comm="syz.2.4160" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1568.511137][ T30] audit: type=1400 audit(1757267968.894:3662): avc: denied { open } for pid=23107 comm="syz.2.4160" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1568.791870][ T5970] usb 5-1: USB disconnect, device number 79 [ 1570.679534][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4162'. [ 1570.779520][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4162'. [ 1570.788622][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4162'. [ 1570.798163][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4162'. [ 1571.789621][T23145] fuse: Bad value for 'fd' [ 1572.256011][T23151] hfsplus: unable to find HFS+ superblock [ 1572.452588][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1572.452604][ T30] audit: type=1400 audit(1757267973.284:3669): avc: denied { read write } for pid=23152 comm="syz.0.4172" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1572.494180][ T30] audit: type=1400 audit(1757267973.284:3670): avc: denied { open } for pid=23152 comm="syz.0.4172" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1572.562915][T23153] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4172'. [ 1572.572052][T23153] xt_policy: neither incoming nor outgoing policy selected [ 1572.645358][ T30] audit: type=1400 audit(1757267973.434:3671): avc: denied { read write } for pid=23152 comm="syz.0.4172" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1572.778025][ T30] audit: type=1400 audit(1757267973.434:3672): avc: denied { open } for pid=23152 comm="syz.0.4172" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1572.801564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.046102][T19680] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1573.542868][T19680] usb 3-1: Using ep0 maxpacket: 8 [ 1573.553262][T19680] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1573.563491][T19680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.571757][T19680] usb 3-1: Product: syz [ 1573.576116][T19680] usb 3-1: Manufacturer: syz [ 1573.581342][T19680] usb 3-1: SerialNumber: syz [ 1573.588563][T19680] usb 3-1: config 0 descriptor?? [ 1574.184713][T19680] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1574.393381][ T30] audit: type=1400 audit(1757267975.224:3673): avc: denied { create } for pid=23175 comm="syz.4.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1575.134678][ T30] audit: type=1400 audit(1757267975.964:3674): avc: denied { write } for pid=23186 comm="syz.0.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1575.252988][ T30] audit: type=1400 audit(1757267975.964:3675): avc: denied { connect } for pid=23186 comm="syz.0.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1575.278000][ T30] audit: type=1400 audit(1757267975.964:3676): avc: denied { name_connect } for pid=23186 comm="syz.0.4182" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1575.408604][T23198] fuse: Bad value for 'fd' [ 1575.528108][ T30] audit: type=1400 audit(1757267976.044:3677): avc: denied { shutdown } for pid=23186 comm="syz.0.4182" lport=45408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1575.665809][ T30] audit: type=1400 audit(1757267976.054:3678): avc: denied { create } for pid=23186 comm="syz.0.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1575.685907][ C0] vkms_vblank_simulate: vblank timer overrun [ 1575.778498][T19680] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1575.928229][T23211] hfsplus: unable to find HFS+ superblock [ 1576.129700][T19680] usb 3-1: USB disconnect, device number 97 [ 1576.557057][T23224] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4188'. [ 1576.566125][T23224] xt_policy: neither incoming nor outgoing policy selected [ 1578.346208][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1578.356312][ T30] audit: type=1400 audit(1757267979.174:3688): avc: denied { setcheckreqprot } for pid=23245 comm="syz.2.4195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1578.387010][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.522432][ T30] audit: type=1400 audit(1757267979.294:3689): avc: denied { mount } for pid=23245 comm="syz.2.4195" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1580.226528][ T30] audit: type=1400 audit(1757267981.054:3690): avc: denied { ioctl } for pid=23274 comm="syz.0.4203" path="socket:[88131]" dev="sockfs" ino=88131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1580.229629][ T5909] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1580.252270][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.376912][T23279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1580.490078][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 1580.496820][ T5909] usb 6-1: config 0 has no interfaces? [ 1580.502769][ T5909] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1580.514197][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.555225][ T5909] usb 6-1: config 0 descriptor?? [ 1580.695919][T19570] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1580.979513][T19570] usb 5-1: Using ep0 maxpacket: 16 [ 1580.996355][T19570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1581.016568][T19570] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1581.026811][T19570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.027463][ T5909] usb 6-1: USB disconnect, device number 18 [ 1581.043118][T19570] usb 5-1: Product: syz [ 1581.078046][ T30] audit: type=1400 audit(1757267981.904:3691): avc: denied { mounton } for pid=23289 comm="syz.1.4208" path="/240/file0" dev="tmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1581.079793][T19570] usb 5-1: Manufacturer: syz [ 1581.109209][ T30] audit: type=1400 audit(1757267981.934:3692): avc: denied { mount } for pid=23289 comm="syz.1.4208" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1581.132203][ T30] audit: type=1400 audit(1757267981.934:3693): avc: denied { read write } for pid=23289 comm="syz.1.4208" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1581.176589][ T30] audit: type=1400 audit(1757267981.934:3694): avc: denied { open } for pid=23289 comm="syz.1.4208" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1581.179961][T19570] usb 5-1: SerialNumber: syz [ 1581.220250][T19570] usb 5-1: config 0 descriptor?? [ 1581.240609][ T30] audit: type=1400 audit(1757267981.934:3695): avc: denied { ioctl } for pid=23289 comm="syz.1.4208" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1581.247591][T19570] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1581.292015][T19570] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1581.344234][ T30] audit: type=1400 audit(1757267981.934:3696): avc: denied { ioctl } for pid=23283 comm="syz.2.4206" path="socket:[88142]" dev="sockfs" ino=88142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1581.385846][ T30] audit: type=1400 audit(1757267981.994:3697): avc: denied { read } for pid=23289 comm="syz.1.4208" dev="nsfs" ino=4026533777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1581.947939][ T6634] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.979620][ T6634] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.991879][T21332] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.011928][T21332] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1582.052286][T23304] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1582.131230][T19570] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1582.193676][T23309] hfsplus: unable to find HFS+ superblock [ 1582.348116][T23304] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1582.695037][ T5939] kernel write not supported for file /input/mouse0 (pid: 5939 comm: kworker/0:8) [ 1583.837660][ T5909] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1583.867047][T19570] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1584.149739][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1584.165538][ T30] audit: type=1400 audit(1757267984.974:3749): avc: denied { create } for pid=23318 comm="syz.0.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1584.220411][T19570] em28xx 5-1:0.0: board has no eeprom [ 1584.229110][ T30] audit: type=1400 audit(1757267984.984:3750): avc: denied { setopt } for pid=23318 comm="syz.0.4217" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1584.254122][T23325] sctp: [Deprecated]: syz.0.4217 (pid 23325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1584.254122][T23325] Use struct sctp_sack_info instead [ 1584.279688][ T30] audit: type=1400 audit(1757267984.984:3751): avc: denied { watch } for pid=23318 comm="syz.0.4217" path="/219/control" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1584.308958][ T30] audit: type=1400 audit(1757267984.984:3752): avc: denied { read } for pid=23318 comm="syz.0.4217" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1584.319892][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1584.383005][ T30] audit: type=1400 audit(1757267984.984:3753): avc: denied { open } for pid=23318 comm="syz.0.4217" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1584.406716][T19570] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1584.414916][T19570] em28xx 5-1:0.0: dvb set to bulk mode. [ 1584.651601][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1584.663557][T19670] em28xx 5-1:0.0: Binding DVB extension [ 1584.675325][T19570] usb 5-1: USB disconnect, device number 80 [ 1584.695008][T19570] em28xx 5-1:0.0: Disconnecting em28xx [ 1584.717819][ T5909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1584.763033][ T30] audit: type=1400 audit(1757267985.254:3754): avc: denied { ioctl } for pid=23326 comm="syz.2.4218" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=88181 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1584.824185][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.858804][T19670] em28xx 5-1:0.0: Registering input extension [ 1584.974125][T19570] em28xx 5-1:0.0: Closing input extension [ 1584.981251][ T30] audit: type=1400 audit(1757267985.544:3755): avc: denied { create } for pid=23318 comm="syz.0.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1586.165841][ T5909] usb 2-1: config 0 descriptor?? [ 1586.256847][T19570] em28xx 5-1:0.0: Freeing device [ 1586.268810][ T30] audit: type=1400 audit(1757267985.924:3756): avc: denied { create } for pid=23334 comm="syz.4.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1586.311754][ T5909] usb 2-1: can't set config #0, error -71 [ 1586.609883][T19570] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1586.665540][ T30] audit: type=1400 audit(1757267985.924:3757): avc: denied { setopt } for pid=23334 comm="syz.4.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1586.669989][ T5909] usb 2-1: USB disconnect, device number 104 [ 1586.809629][T19570] usb 5-1: Using ep0 maxpacket: 32 [ 1586.816180][T19570] usb 5-1: config 0 has no interfaces? [ 1586.822879][T23353] fuse: Bad value for 'fd' [ 1586.838415][T19570] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1586.853984][ T30] audit: type=1400 audit(1757267985.924:3758): avc: denied { create } for pid=23334 comm="syz.4.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1586.904686][T19570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.939576][T19570] usb 5-1: config 0 descriptor?? [ 1587.079757][T23355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4226'. [ 1587.967057][T23366] o2cb: This node has not been configured. [ 1587.973194][T23366] o2cb: Cluster check failed. Fix errors before retrying. [ 1587.980692][T23366] (syz.0.4228,23366,0):user_dlm_register:674 ERROR: status = -22 [ 1587.988443][T23366] (syz.0.4228,23366,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1588.000988][T19570] usb 5-1: USB disconnect, device number 81 [ 1589.689668][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1589.689689][ T30] audit: type=1400 audit(1757267989.764:3794): avc: denied { map_create } for pid=23373 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1589.895798][ T30] audit: type=1400 audit(1757267989.764:3795): avc: denied { map_read map_write } for pid=23373 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1589.917703][ T30] audit: type=1400 audit(1757267989.884:3796): avc: denied { perfmon } for pid=23373 comm="syz.5.4231" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1590.080790][ T30] audit: type=1400 audit(1757267990.184:3797): avc: denied { read write } for pid=23374 comm="syz.4.4232" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1590.108133][ T30] audit: type=1400 audit(1757267990.184:3798): avc: denied { open } for pid=23374 comm="syz.4.4232" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1590.137753][T23384] Scaler: ================= START STATUS ================= [ 1590.142346][T23387] Scaler: ================= START STATUS ================= [ 1590.145662][ T5909] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1590.184911][T23384] Scaler: ================== END STATUS ================== [ 1590.199630][T23387] Scaler: ================== END STATUS ================== [ 1590.207888][ T30] audit: type=1400 audit(1757267990.294:3799): avc: denied { create } for pid=23373 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1590.289525][ T30] audit: type=1400 audit(1757267990.294:3800): avc: denied { mounton } for pid=23374 comm="syz.4.4232" path="/202/file0" dev="tmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1590.364112][ T30] audit: type=1400 audit(1757267990.304:3801): avc: denied { mount } for pid=23374 comm="syz.4.4232" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1590.428674][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.437562][ T30] audit: type=1400 audit(1757267990.634:3802): avc: denied { setopt } for pid=23373 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1590.447756][ T5909] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1590.645230][ T30] audit: type=1400 audit(1757267990.644:3803): avc: denied { write } for pid=23373 comm="syz.5.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1590.695164][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1590.701933][ T5909] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1590.735664][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.766761][ T5909] usb 2-1: config 0 descriptor?? [ 1590.797351][ T5909] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1590.839611][T19670] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1590.999503][T19670] usb 6-1: Using ep0 maxpacket: 16 [ 1591.256067][T19670] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1591.290831][T23402] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1591.317068][T23402] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1591.352625][T19670] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1591.368766][T19670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.381349][T23402] CPU: 0 UID: 0 PID: 23402 Comm: syz.2.4237 Not tainted syzkaller #0 PREEMPT(full) [ 1591.381380][T23402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1591.381392][T23402] Call Trace: [ 1591.381399][T23402] [ 1591.381407][T23402] dump_stack_lvl+0x16c/0x1f0 [ 1591.381434][T23402] sysfs_warn_dup+0x7f/0xa0 [ 1591.381456][T23402] sysfs_do_create_link_sd+0x124/0x140 [ 1591.381479][T23402] sysfs_create_link+0x61/0xc0 [ 1591.381498][T23402] device_add+0x62c/0x1aa0 [ 1591.381522][T23402] ? __pfx_device_add+0x10/0x10 [ 1591.381552][T23402] wiphy_register+0x1df4/0x29f0 [ 1591.381572][T23402] ? netdev_run_todo+0x864/0x1320 [ 1591.381590][T23402] ? __dev_printk+0x1f0/0x270 [ 1591.381610][T23402] ? __pfx_wiphy_register+0x10/0x10 [ 1591.381636][T23402] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1591.381658][T23402] ieee80211_register_hw+0x24a9/0x4060 [ 1591.381685][T23402] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1591.381708][T23402] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1591.381729][T23402] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1591.381745][T23402] ? __hrtimer_setup+0x176/0x280 [ 1591.381764][T23402] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1591.381796][T23402] ? trace_kmalloc+0x2b/0xd0 [ 1591.381814][T23402] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1591.381831][T23402] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1591.381850][T23402] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1591.381871][T23402] ? __asan_memcpy+0x3c/0x60 [ 1591.381896][T23402] hwsim_new_radio_nl+0xb51/0x12c0 [ 1591.381919][T23402] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1591.381946][T23402] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1591.381968][T23402] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1591.381993][T23402] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1591.382015][T23402] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1591.382043][T23402] ? bpf_lsm_capable+0x9/0x10 [ 1591.382063][T23402] ? security_capable+0x7e/0x260 [ 1591.382082][T23402] ? ns_capable+0xd7/0x110 [ 1591.382102][T23402] genl_rcv_msg+0x55c/0x800 [ 1591.382125][T23402] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1591.382145][T23402] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1591.382168][T23402] ? __pfx___schedule+0x10/0x10 [ 1591.382187][T23402] netlink_rcv_skb+0x155/0x420 [ 1591.382204][T23402] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1591.382225][T23402] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1591.382252][T23402] ? __pfx_genl_rcv+0x10/0x10 [ 1591.382273][T23402] genl_rcv+0x28/0x40 [ 1591.382290][T23402] netlink_unicast+0x5aa/0x870 [ 1591.382317][T23402] ? __pfx_netlink_unicast+0x10/0x10 [ 1591.382345][T23402] netlink_sendmsg+0x8d1/0xdd0 [ 1591.382365][T23402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1591.382385][T23402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1591.382407][T23402] ____sys_sendmsg+0xa98/0xc70 [ 1591.382430][T23402] ? copy_msghdr_from_user+0x10a/0x160 [ 1591.382448][T23402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1591.382480][T23402] ___sys_sendmsg+0x134/0x1d0 [ 1591.382499][T23402] ? __pfx____sys_sendmsg+0x10/0x10 [ 1591.382546][T23402] __sys_sendmsg+0x16d/0x220 [ 1591.382564][T23402] ? __pfx___sys_sendmsg+0x10/0x10 [ 1591.382590][T23402] ? __secure_computing+0x28e/0x3b0 [ 1591.382617][T23402] do_syscall_64+0xcd/0x4c0 [ 1591.382636][T23402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.382651][T23402] RIP: 0033:0x7fca7578ebe9 [ 1591.382665][T23402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.382680][T23402] RSP: 002b:00007fca76598038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1591.382695][T23402] RAX: ffffffffffffffda RBX: 00007fca759c6180 RCX: 00007fca7578ebe9 [ 1591.382705][T23402] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 1591.382714][T23402] RBP: 00007fca75811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1591.382723][T23402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1591.382732][T23402] R13: 00007fca759c6218 R14: 00007fca759c6180 R15: 00007ffc355e8a98 [ 1591.382752][T23402] [ 1591.783574][T19670] usb 6-1: Product: syz [ 1591.787801][T19670] usb 6-1: Manufacturer: syz [ 1591.792414][T19670] usb 6-1: SerialNumber: syz [ 1591.840207][T19670] usb 6-1: config 0 descriptor?? [ 1591.867314][T19670] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1591.878143][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4239'. [ 1591.895510][T19670] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1591.951422][T23406] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.4238'. [ 1591.963444][T23406] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1592.031559][T23406] CPU: 1 UID: 0 PID: 23406 Comm: syz.0.4238 Not tainted syzkaller #0 PREEMPT(full) [ 1592.031590][T23406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1592.031602][T23406] Call Trace: [ 1592.031610][T23406] [ 1592.031618][T23406] dump_stack_lvl+0x16c/0x1f0 [ 1592.031645][T23406] sysfs_warn_dup+0x7f/0xa0 [ 1592.031669][T23406] sysfs_do_create_link_sd+0x124/0x140 [ 1592.031695][T23406] sysfs_create_link+0x61/0xc0 [ 1592.031719][T23406] device_add+0x62c/0x1aa0 [ 1592.031747][T23406] ? __pfx_device_add+0x10/0x10 [ 1592.031769][T23406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1592.031791][T23406] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1592.031828][T23406] wiphy_register+0x1df4/0x29f0 [ 1592.031850][T23406] ? netdev_run_todo+0x864/0x1320 [ 1592.031873][T23406] ? __dev_printk+0x1f0/0x270 [ 1592.031896][T23406] ? __pfx_wiphy_register+0x10/0x10 [ 1592.031927][T23406] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1592.031954][T23406] ieee80211_register_hw+0x24a9/0x4060 [ 1592.031988][T23406] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1592.032014][T23406] ? find_held_lock+0x2b/0x80 [ 1592.032045][T23406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1592.032069][T23406] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1592.032090][T23406] ? __hrtimer_setup+0x176/0x280 [ 1592.032116][T23406] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1592.032159][T23406] ? trace_kmalloc+0x2b/0xd0 [ 1592.032185][T23406] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1592.032208][T23406] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1592.032233][T23406] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1592.032261][T23406] ? __asan_memcpy+0x3c/0x60 [ 1592.032292][T23406] hwsim_new_radio_nl+0xb51/0x12c0 [ 1592.032322][T23406] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1592.032358][T23406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1592.032386][T23406] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1592.032418][T23406] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1592.032447][T23406] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1592.032482][T23406] ? bpf_lsm_capable+0x9/0x10 [ 1592.032509][T23406] ? security_capable+0x7e/0x260 [ 1592.032533][T23406] ? ns_capable+0xd7/0x110 [ 1592.032558][T23406] genl_rcv_msg+0x55c/0x800 [ 1592.032588][T23406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1592.032614][T23406] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1592.032644][T23406] ? __lock_acquire+0x62e/0x1ce0 [ 1592.032678][T23406] netlink_rcv_skb+0x155/0x420 [ 1592.032701][T23406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1592.032728][T23406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1592.032763][T23406] ? netlink_deliver_tap+0x1ae/0xd30 [ 1592.032782][T23406] ? selinux_netlink_send+0x578/0x830 [ 1592.032806][T23406] ? is_vmalloc_addr+0x86/0xa0 [ 1592.032829][T23406] genl_rcv+0x28/0x40 [ 1592.032851][T23406] netlink_unicast+0x5aa/0x870 [ 1592.032879][T23406] ? __pfx_netlink_unicast+0x10/0x10 [ 1592.032899][T23406] ? __asan_memset+0x23/0x50 [ 1592.032928][T23406] ? __build_skb_around+0x278/0x3b0 [ 1592.032963][T23406] netlink_sendmsg+0x8d1/0xdd0 [ 1592.032992][T23406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.033026][T23406] ____sys_sendmsg+0xa98/0xc70 [ 1592.033059][T23406] ? copy_msghdr_from_user+0x10a/0x160 [ 1592.033080][T23406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.033119][T23406] ___sys_sendmsg+0x134/0x1d0 [ 1592.033143][T23406] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.033201][T23406] __sys_sendmsg+0x16d/0x220 [ 1592.033224][T23406] ? __pfx___sys_sendmsg+0x10/0x10 [ 1592.033258][T23406] ? __secure_computing+0x28e/0x3b0 [ 1592.033292][T23406] do_syscall_64+0xcd/0x4c0 [ 1592.033317][T23406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.033337][T23406] RIP: 0033:0x7fa79358ebe9 [ 1592.033353][T23406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1592.033372][T23406] RSP: 002b:00007fa7943ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.033393][T23406] RAX: ffffffffffffffda RBX: 00007fa7937c6180 RCX: 00007fa79358ebe9 [ 1592.033405][T23406] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 1592.033417][T23406] RBP: 00007fa793611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1592.033429][T23406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.033440][T23406] R13: 00007fa7937c6218 R14: 00007fa7937c6180 R15: 00007fff029cd2f8 [ 1592.033467][T23406] [ 1592.495931][ T5982] usb 2-1: USB disconnect, device number 105 [ 1592.590990][T23412] fuse: Bad value for 'fd' [ 1593.219369][T19670] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1593.866195][ T5982] kernel write not supported for file /input/mouse0 (pid: 5982 comm: kworker/1:6) [ 1594.604635][T19670] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1594.639846][T19670] em28xx 6-1:0.0: board has no eeprom [ 1594.753417][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1594.753432][ T30] audit: type=1400 audit(1757267995.584:3836): avc: denied { prog_load } for pid=23434 comm="syz.2.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1594.753474][ T30] audit: type=1400 audit(1757267995.584:3837): avc: denied { bpf } for pid=23434 comm="syz.2.4249" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1594.753511][ T30] audit: type=1400 audit(1757267995.584:3838): avc: denied { perfmon } for pid=23434 comm="syz.2.4249" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1594.757612][ T30] audit: type=1400 audit(1757267995.584:3839): avc: denied { prog_run } for pid=23434 comm="syz.2.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1594.759557][T19670] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1594.805541][ C1] vkms_vblank_simulate: vblank timer overrun [ 1594.887835][ T30] audit: type=1400 audit(1757267995.704:3840): avc: denied { read write } for pid=19217 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1594.925689][ T30] audit: type=1400 audit(1757267995.704:3841): avc: denied { open } for pid=19217 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1595.005946][ T30] audit: type=1400 audit(1757267995.714:3842): avc: denied { create } for pid=23428 comm="syz.1.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1595.045142][T19670] em28xx 6-1:0.0: dvb set to bulk mode. [ 1595.159365][ T5982] em28xx 6-1:0.0: Binding DVB extension [ 1595.474492][ T30] audit: type=1400 audit(1757267995.714:3843): avc: denied { write } for pid=23428 comm="syz.1.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1595.497334][T23446] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.4250'. [ 1595.507038][ T30] audit: type=1400 audit(1757267995.714:3844): avc: denied { write } for pid=23428 comm="syz.1.4247" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1595.539244][ T30] audit: type=1400 audit(1757267995.714:3845): avc: denied { ioctl } for pid=19217 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1595.590448][T19670] usb 6-1: USB disconnect, device number 19 [ 1595.596917][T19670] em28xx 6-1:0.0: Disconnecting em28xx [ 1595.612978][T23446] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1595.623989][T23446] CPU: 1 UID: 0 PID: 23446 Comm: syz.4.4250 Not tainted syzkaller #0 PREEMPT(full) [ 1595.624013][T23446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1595.624025][T23446] Call Trace: [ 1595.624032][T23446] [ 1595.624040][T23446] dump_stack_lvl+0x16c/0x1f0 [ 1595.624070][T23446] sysfs_warn_dup+0x7f/0xa0 [ 1595.624103][T23446] sysfs_do_create_link_sd+0x124/0x140 [ 1595.624130][T23446] sysfs_create_link+0x61/0xc0 [ 1595.624155][T23446] device_add+0x62c/0x1aa0 [ 1595.624186][T23446] ? __pfx_device_add+0x10/0x10 [ 1595.624211][T23446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1595.624234][T23446] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1595.624268][T23446] wiphy_register+0x1df4/0x29f0 [ 1595.624285][T23446] ? netdev_run_todo+0x864/0x1320 [ 1595.624303][T23446] ? __dev_printk+0x1f0/0x270 [ 1595.624322][T23446] ? __pfx_wiphy_register+0x10/0x10 [ 1595.624346][T23446] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1595.624369][T23446] ieee80211_register_hw+0x24a9/0x4060 [ 1595.624397][T23446] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1595.624418][T23446] ? find_held_lock+0x2b/0x80 [ 1595.624436][T23446] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1595.624453][T23446] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1595.624469][T23446] ? __hrtimer_setup+0x176/0x280 [ 1595.624487][T23446] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1595.624519][T23446] ? trace_kmalloc+0x2b/0xd0 [ 1595.624537][T23446] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1595.624554][T23446] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1595.624573][T23446] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1595.624594][T23446] ? __asan_memcpy+0x3c/0x60 [ 1595.624619][T23446] hwsim_new_radio_nl+0xb51/0x12c0 [ 1595.624641][T23446] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1595.624668][T23446] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1595.624690][T23446] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1595.624715][T23446] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1595.624736][T23446] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1595.624764][T23446] ? bpf_lsm_capable+0x9/0x10 [ 1595.624783][T23446] ? security_capable+0x7e/0x260 [ 1595.624802][T23446] ? ns_capable+0xd7/0x110 [ 1595.624821][T23446] genl_rcv_msg+0x55c/0x800 [ 1595.624843][T23446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1595.624862][T23446] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1595.624891][T23446] netlink_rcv_skb+0x155/0x420 [ 1595.624908][T23446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1595.624928][T23446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1595.624954][T23446] ? netlink_deliver_tap+0x1ae/0xd30 [ 1595.624974][T23446] genl_rcv+0x28/0x40 [ 1595.624991][T23446] netlink_unicast+0x5aa/0x870 [ 1595.625011][T23446] ? __pfx_netlink_unicast+0x10/0x10 [ 1595.625027][T23446] ? __asan_memset+0x23/0x50 [ 1595.625048][T23446] ? __build_skb_around+0x278/0x3b0 [ 1595.625080][T23446] netlink_sendmsg+0x8d1/0xdd0 [ 1595.625101][T23446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1595.625127][T23446] ____sys_sendmsg+0xa98/0xc70 [ 1595.625149][T23446] ? copy_msghdr_from_user+0x10a/0x160 [ 1595.625165][T23446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1595.625197][T23446] ___sys_sendmsg+0x134/0x1d0 [ 1595.625216][T23446] ? __pfx____sys_sendmsg+0x10/0x10 [ 1595.625263][T23446] __sys_sendmsg+0x16d/0x220 [ 1595.625280][T23446] ? __pfx___sys_sendmsg+0x10/0x10 [ 1595.625297][T23446] ? __x64_sys_futex+0x1e0/0x4c0 [ 1595.625333][T23446] do_syscall_64+0xcd/0x4c0 [ 1595.625352][T23446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.625367][T23446] RIP: 0033:0x7f884618ebe9 [ 1595.625380][T23446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1595.625395][T23446] RSP: 002b:00007f8846f52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.625410][T23446] RAX: ffffffffffffffda RBX: 00007f88463c6270 RCX: 00007f884618ebe9 [ 1595.625420][T23446] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 1595.625428][T23446] RBP: 00007f8846211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1595.625437][T23446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1595.625445][T23446] R13: 00007f88463c6308 R14: 00007f88463c6270 R15: 00007fffa7909e08 [ 1595.625466][T23446] [ 1596.030614][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.118007][ T5982] em28xx 6-1:0.0: Registering input extension [ 1596.223128][T23452] fuse: Bad value for 'fd' [ 1596.462118][T19670] em28xx 6-1:0.0: Closing input extension [ 1596.497002][T23454] fuse: Bad value for 'group_id' [ 1596.556024][T23454] fuse: Bad value for 'group_id' [ 1596.589342][T19670] em28xx 6-1:0.0: Freeing device [ 1596.937005][T23458] fuse: Bad value for 'fd' [ 1599.535735][T23473] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4260'. [ 1599.544900][T23473] xt_policy: neither incoming nor outgoing policy selected [ 1599.820537][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1599.820555][ T30] audit: type=1400 audit(1757268000.654:3878): avc: denied { read append } for pid=23476 comm="syz.1.4261" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1599.929563][ T30] audit: type=1400 audit(1757268000.654:3879): avc: denied { open } for pid=23476 comm="syz.1.4261" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1600.034967][ T30] audit: type=1400 audit(1757268000.694:3880): avc: denied { map_create } for pid=23471 comm="syz.5.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1600.054198][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.061874][ T30] audit: type=1400 audit(1757268000.694:3881): avc: denied { map_read map_write } for pid=23471 comm="syz.5.4260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1600.085722][ T30] audit: type=1400 audit(1757268000.724:3882): avc: denied { module_request } for pid=23474 comm="syz.0.4262" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1600.111486][ T30] audit: type=1400 audit(1757268000.724:3883): avc: denied { ioctl } for pid=23476 comm="syz.1.4261" path="/dev/comedi3" dev="devtmpfs" ino=1279 ioctlcmd=0x640c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1600.136314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.162640][ T30] audit: type=1400 audit(1757268000.784:3884): avc: denied { create } for pid=23474 comm="syz.0.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1600.447159][ T30] audit: type=1400 audit(1757268000.784:3885): avc: denied { write } for pid=23474 comm="syz.0.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1600.559547][T19680] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1600.587874][ T30] audit: type=1400 audit(1757268000.784:3886): avc: denied { create } for pid=23474 comm="syz.0.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1600.589342][T23492] FAULT_INJECTION: forcing a failure. [ 1600.589342][T23492] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.614798][ T30] audit: type=1400 audit(1757268000.974:3887): avc: denied { write } for pid=23487 comm="syz.2.4265" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1600.620460][T23492] CPU: 1 UID: 0 PID: 23492 Comm: syz.4.4266 Not tainted syzkaller #0 PREEMPT(full) [ 1600.620482][T23492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1600.620493][T23492] Call Trace: [ 1600.620499][T23492] [ 1600.620507][T23492] dump_stack_lvl+0x16c/0x1f0 [ 1600.620530][T23492] should_fail_ex+0x512/0x640 [ 1600.620553][T23492] should_failslab+0xc2/0x120 [ 1600.620572][T23492] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1600.620597][T23492] ? mptcp_pm_alloc_anno_list+0x1e3/0x4d0 [ 1600.620617][T23492] mptcp_pm_alloc_anno_list+0x1e3/0x4d0 [ 1600.620636][T23492] mptcp_pm_create_subflow_or_signal_addr+0x692/0x1e00 [ 1600.620662][T23492] ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10 [ 1600.620681][T23492] ? __lock_acquire+0xb97/0x1ce0 [ 1600.620714][T23492] ? __lock_acquire+0xb97/0x1ce0 [ 1600.620747][T23492] ? do_raw_spin_lock+0x12c/0x2b0 [ 1600.620765][T23492] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1600.620788][T23492] mptcp_pm_nl_add_addr_doit+0x58e/0xc80 [ 1600.620809][T23492] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 1600.620839][T23492] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1600.620863][T23492] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1600.620889][T23492] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1600.620913][T23492] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1600.620942][T23492] ? bpf_lsm_capable+0x9/0x10 [ 1600.620964][T23492] ? security_capable+0x7e/0x260 [ 1600.620983][T23492] ? ns_capable+0xd7/0x110 [ 1600.621004][T23492] genl_rcv_msg+0x55c/0x800 [ 1600.621028][T23492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1600.621049][T23492] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 1600.621074][T23492] netlink_rcv_skb+0x155/0x420 [ 1600.621092][T23492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1600.621114][T23492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1600.621142][T23492] ? netlink_deliver_tap+0x1ae/0xd30 [ 1600.621162][T23492] genl_rcv+0x28/0x40 [ 1600.621181][T23492] netlink_unicast+0x5aa/0x870 [ 1600.621203][T23492] ? __pfx_netlink_unicast+0x10/0x10 [ 1600.621222][T23492] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1600.621251][T23492] netlink_sendmsg+0x8d1/0xdd0 [ 1600.621274][T23492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1600.621301][T23492] ____sys_sendmsg+0xa98/0xc70 [ 1600.621327][T23492] ? copy_msghdr_from_user+0x10a/0x160 [ 1600.621345][T23492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1600.621377][T23492] ___sys_sendmsg+0x134/0x1d0 [ 1600.621395][T23492] ? __pfx____sys_sendmsg+0x10/0x10 [ 1600.621441][T23492] __sys_sendmsg+0x16d/0x220 [ 1600.621459][T23492] ? __pfx___sys_sendmsg+0x10/0x10 [ 1600.621491][T23492] do_syscall_64+0xcd/0x4c0 [ 1600.621512][T23492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.621528][T23492] RIP: 0033:0x7f884618ebe9 [ 1600.621542][T23492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.621558][T23492] RSP: 002b:00007f8846fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1600.621574][T23492] RAX: ffffffffffffffda RBX: 00007f88463c5fa0 RCX: 00007f884618ebe9 [ 1600.621584][T23492] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000009 [ 1600.621594][T23492] RBP: 00007f8846fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 1600.621603][T23492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.621612][T23492] R13: 00007f88463c6038 R14: 00007f88463c5fa0 R15: 00007fffa7909e08 [ 1600.621634][T23492] [ 1601.078123][T23497] fuse: Bad value for 'fd' [ 1601.404985][T23503] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1601.435794][T19680] usb 3-1: Using ep0 maxpacket: 32 [ 1601.448425][T23503] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1601.466923][T23503] CPU: 1 UID: 0 PID: 23503 Comm: syz.0.4268 Not tainted syzkaller #0 PREEMPT(full) [ 1601.466955][T23503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1601.466968][T23503] Call Trace: [ 1601.466975][T23503] [ 1601.466983][T23503] dump_stack_lvl+0x16c/0x1f0 [ 1601.467011][T23503] sysfs_warn_dup+0x7f/0xa0 [ 1601.467036][T23503] sysfs_do_create_link_sd+0x124/0x140 [ 1601.467066][T23503] sysfs_create_link+0x61/0xc0 [ 1601.467092][T23503] device_add+0x62c/0x1aa0 [ 1601.467116][T23503] ? __pfx_device_add+0x10/0x10 [ 1601.467131][T23503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1601.467146][T23503] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1601.467177][T23503] wiphy_register+0x1df4/0x29f0 [ 1601.467191][T23503] ? netdev_run_todo+0x864/0x1320 [ 1601.467206][T23503] ? __dev_printk+0x1f0/0x270 [ 1601.467219][T23503] ? __pfx_wiphy_register+0x10/0x10 [ 1601.467237][T23503] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1601.467255][T23503] ieee80211_register_hw+0x24a9/0x4060 [ 1601.467276][T23503] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1601.467294][T23503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1601.467308][T23503] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1601.467322][T23503] ? __hrtimer_setup+0x176/0x280 [ 1601.467337][T23503] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1601.467360][T23503] ? trace_kmalloc+0x2b/0xd0 [ 1601.467374][T23503] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1601.467387][T23503] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1601.467402][T23503] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1601.467418][T23503] ? __asan_memcpy+0x3c/0x60 [ 1601.467438][T23503] hwsim_new_radio_nl+0xb51/0x12c0 [ 1601.467456][T23503] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1601.467476][T23503] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1601.467493][T23503] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1601.467512][T23503] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1601.467529][T23503] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1601.467550][T23503] ? bpf_lsm_capable+0x9/0x10 [ 1601.467565][T23503] ? security_capable+0x7e/0x260 [ 1601.467580][T23503] ? ns_capable+0xd7/0x110 [ 1601.467595][T23503] genl_rcv_msg+0x55c/0x800 [ 1601.467612][T23503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1601.467627][T23503] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1601.467644][T23503] ? __lock_acquire+0x62e/0x1ce0 [ 1601.467664][T23503] netlink_rcv_skb+0x155/0x420 [ 1601.467677][T23503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1601.467693][T23503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1601.467712][T23503] ? netlink_deliver_tap+0x1ae/0xd30 [ 1601.467724][T23503] ? selinux_netlink_send+0x578/0x830 [ 1601.467738][T23503] ? is_vmalloc_addr+0x86/0xa0 [ 1601.467751][T23503] genl_rcv+0x28/0x40 [ 1601.467765][T23503] netlink_unicast+0x5aa/0x870 [ 1601.467780][T23503] ? __pfx_netlink_unicast+0x10/0x10 [ 1601.467792][T23503] ? __asan_memset+0x23/0x50 [ 1601.467809][T23503] ? __build_skb_around+0x278/0x3b0 [ 1601.467830][T23503] netlink_sendmsg+0x8d1/0xdd0 [ 1601.467845][T23503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1601.467865][T23503] ____sys_sendmsg+0xa98/0xc70 [ 1601.467881][T23503] ? copy_msghdr_from_user+0x10a/0x160 [ 1601.467893][T23503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1601.467917][T23503] ___sys_sendmsg+0x134/0x1d0 [ 1601.467931][T23503] ? __pfx____sys_sendmsg+0x10/0x10 [ 1601.467962][T23503] __sys_sendmsg+0x16d/0x220 [ 1601.467975][T23503] ? __pfx___sys_sendmsg+0x10/0x10 [ 1601.467987][T23503] ? __x64_sys_futex+0x1e0/0x4c0 [ 1601.468013][T23503] do_syscall_64+0xcd/0x4c0 [ 1601.468028][T23503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.468040][T23503] RIP: 0033:0x7fa79358ebe9 [ 1601.468051][T23503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1601.468062][T23503] RSP: 002b:00007fa7943a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1601.468075][T23503] RAX: ffffffffffffffda RBX: 00007fa7937c6270 RCX: 00007fa79358ebe9 [ 1601.468084][T23503] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 1601.468092][T23503] RBP: 00007fa793611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1601.468100][T23503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1601.468107][T23503] R13: 00007fa7937c6308 R14: 00007fa7937c6270 R15: 00007fff029cd2f8 [ 1601.468121][T23503] [ 1601.880968][ C1] vkms_vblank_simulate: vblank timer overrun [ 1601.936783][T19680] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1602.122099][T19680] usb 3-1: config 0 has no interface number 0 [ 1602.178107][T19680] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1602.607071][T19680] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1602.631252][T19680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.669981][T19680] usb 3-1: Product: syz [ 1602.680767][T19680] usb 3-1: Manufacturer: syz [ 1602.686136][T19680] usb 3-1: SerialNumber: syz [ 1602.840540][T23515] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4272'. [ 1603.077025][T23519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4271'. [ 1603.181947][T19680] usb 3-1: config 0 descriptor?? [ 1603.206356][T19680] usb 3-1: can't set config #0, error -71 [ 1603.213811][T19680] usb 3-1: USB disconnect, device number 98 [ 1603.959710][T23539] hfsplus: unable to find HFS+ superblock [ 1604.367463][T23532] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1604.687665][T23554] FAULT_INJECTION: forcing a failure. [ 1604.687665][T23554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1604.737570][T23554] CPU: 1 UID: 0 PID: 23554 Comm: syz.2.4284 Not tainted syzkaller #0 PREEMPT(full) [ 1604.737597][T23554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1604.737606][T23554] Call Trace: [ 1604.737612][T23554] [ 1604.737617][T23554] dump_stack_lvl+0x16c/0x1f0 [ 1604.737639][T23554] should_fail_ex+0x512/0x640 [ 1604.737659][T23554] _copy_to_user+0x32/0xd0 [ 1604.737680][T23554] simple_read_from_buffer+0xcb/0x170 [ 1604.737697][T23554] proc_fail_nth_read+0x197/0x240 [ 1604.737716][T23554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1604.737734][T23554] ? rw_verify_area+0xcf/0x6c0 [ 1604.737756][T23554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1604.737772][T23554] vfs_read+0x1e1/0xcf0 [ 1604.737789][T23554] ? __pfx___mutex_lock+0x10/0x10 [ 1604.737807][T23554] ? __pfx_vfs_read+0x10/0x10 [ 1604.737827][T23554] ? __fget_files+0x20e/0x3c0 [ 1604.737849][T23554] ksys_read+0x12a/0x250 [ 1604.737863][T23554] ? __pfx_ksys_read+0x10/0x10 [ 1604.737878][T23554] ? __x64_sys_pidfd_send_signal+0x2a7/0x430 [ 1604.737906][T23554] do_syscall_64+0xcd/0x4c0 [ 1604.737925][T23554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.737940][T23554] RIP: 0033:0x7fca7578d5fc [ 1604.737954][T23554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1604.737968][T23554] RSP: 002b:00007fca765da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1604.737984][T23554] RAX: ffffffffffffffda RBX: 00007fca759c5fa0 RCX: 00007fca7578d5fc [ 1604.737994][T23554] RDX: 000000000000000f RSI: 00007fca765da0a0 RDI: 0000000000000006 [ 1604.738003][T23554] RBP: 00007fca765da090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.738012][T23554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1604.738020][T23554] R13: 00007fca759c6038 R14: 00007fca759c5fa0 R15: 00007ffc355e8a98 [ 1604.738040][T23554] [ 1604.923457][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.003848][ T5939] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1605.057236][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1605.057248][ T30] audit: type=1400 audit(1757268005.884:3946): avc: denied { write } for pid=23559 comm="syz.0.4285" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1605.103391][T23560] netlink: 'syz.0.4285': attribute type 4 has an invalid length. [ 1605.180527][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 1605.205262][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.220411][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.249164][ T30] audit: type=1326 audit(1757268006.064:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23561 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e978ebe9 code=0x7ffc0000 [ 1605.254795][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1605.272698][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.295755][ T5939] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1605.307550][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.338667][ T5939] usb 6-1: config 0 descriptor?? [ 1605.346249][T23565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4287'. [ 1605.346255][ T30] audit: type=1326 audit(1757268006.064:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23561 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f90e978ebe9 code=0x7ffc0000 [ 1605.346726][ T30] audit: type=1326 audit(1757268006.064:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23561 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e978ebe9 code=0x7ffc0000 [ 1605.402895][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.454020][ T30] audit: type=1326 audit(1757268006.064:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23561 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90e978ebe9 code=0x7ffc0000 [ 1605.598258][T23551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.608328][T23551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.630453][ T5939] usbhid 6-1:0.0: can't add hid device: -71 [ 1605.636429][ T5939] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1605.702210][ T5939] usb 6-1: USB disconnect, device number 20 [ 1605.718254][ T30] audit: type=1326 audit(1757268006.064:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23561 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e978ebe9 code=0x7ffc0000 [ 1605.784680][ T30] audit: type=1326 audit(1757268006.064:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23561 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f90e978ebe9 code=0x7ffc0000 [ 1605.808227][T23571] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1605.824643][ T30] audit: type=1326 audit(1757268006.074:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23561 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e978ebe9 code=0x7ffc0000 [ 1605.858662][T23571] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1605.875318][T23568] loop6: detected capacity change from 0 to 63 [ 1605.915285][T23571] CPU: 0 UID: 0 PID: 23571 Comm: syz.0.4288 Not tainted syzkaller #0 PREEMPT(full) [ 1605.915304][T23571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1605.915312][T23571] Call Trace: [ 1605.915317][T23571] [ 1605.915322][T23571] dump_stack_lvl+0x16c/0x1f0 [ 1605.915340][T23571] sysfs_warn_dup+0x7f/0xa0 [ 1605.915355][T23571] sysfs_do_create_link_sd+0x124/0x140 [ 1605.915372][T23571] sysfs_create_link+0x61/0xc0 [ 1605.915388][T23571] device_add+0x62c/0x1aa0 [ 1605.915405][T23571] ? __pfx_device_add+0x10/0x10 [ 1605.915420][T23571] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1605.915435][T23571] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1605.915457][T23571] wiphy_register+0x1df4/0x29f0 [ 1605.915470][T23571] ? netdev_run_todo+0x864/0x1320 [ 1605.915484][T23571] ? __dev_printk+0x1f0/0x270 [ 1605.915498][T23571] ? __pfx_wiphy_register+0x10/0x10 [ 1605.915516][T23571] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 1605.915531][T23571] ieee80211_register_hw+0x24a9/0x4060 [ 1605.915550][T23571] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1605.915566][T23571] ? find_held_lock+0x2b/0x80 [ 1605.915580][T23571] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1605.915595][T23571] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1605.915608][T23571] ? __hrtimer_setup+0x176/0x280 [ 1605.915622][T23571] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 1605.915645][T23571] ? trace_kmalloc+0x2b/0xd0 [ 1605.915659][T23571] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1605.915672][T23571] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1605.915687][T23571] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 1605.915703][T23571] ? __asan_memcpy+0x3c/0x60 [ 1605.915722][T23571] hwsim_new_radio_nl+0xb51/0x12c0 [ 1605.915739][T23571] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1605.915759][T23571] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1605.915776][T23571] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1605.915796][T23571] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1605.915812][T23571] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1605.915832][T23571] ? bpf_lsm_capable+0x9/0x10 [ 1605.915847][T23571] ? security_capable+0x7e/0x260 [ 1605.915861][T23571] ? ns_capable+0xd7/0x110 [ 1605.915876][T23571] genl_rcv_msg+0x55c/0x800 [ 1605.915901][T23571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1605.915918][T23571] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1605.915937][T23571] ? __lock_acquire+0x62e/0x1ce0 [ 1605.915957][T23571] netlink_rcv_skb+0x155/0x420 [ 1605.915972][T23571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1605.915989][T23571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1605.916010][T23571] ? netlink_deliver_tap+0x1ae/0xd30 [ 1605.916022][T23571] ? selinux_netlink_send+0x578/0x830 [ 1605.916037][T23571] ? is_vmalloc_addr+0x86/0xa0 [ 1605.916051][T23571] genl_rcv+0x28/0x40 [ 1605.916064][T23571] netlink_unicast+0x5aa/0x870 [ 1605.916079][T23571] ? __pfx_netlink_unicast+0x10/0x10 [ 1605.916092][T23571] ? __asan_memset+0x23/0x50 [ 1605.916108][T23571] ? __build_skb_around+0x278/0x3b0 [ 1605.916128][T23571] netlink_sendmsg+0x8d1/0xdd0 [ 1605.916146][T23571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1605.916165][T23571] ____sys_sendmsg+0xa98/0xc70 [ 1605.916181][T23571] ? copy_msghdr_from_user+0x10a/0x160 [ 1605.916193][T23571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1605.916214][T23571] ___sys_sendmsg+0x134/0x1d0 [ 1605.916227][T23571] ? __pfx____sys_sendmsg+0x10/0x10 [ 1605.916257][T23571] __sys_sendmsg+0x16d/0x220 [ 1605.916270][T23571] ? __pfx___sys_sendmsg+0x10/0x10 [ 1605.916281][T23571] ? __x64_sys_futex+0x1e0/0x4c0 [ 1605.916311][T23571] do_syscall_64+0xcd/0x4c0 [ 1605.916325][T23571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.916337][T23571] RIP: 0033:0x7fa79358ebe9 [ 1605.916347][T23571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1605.916358][T23571] RSP: 002b:00007fa7943a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1605.916371][T23571] RAX: ffffffffffffffda RBX: 00007fa7937c6270 RCX: 00007fa79358ebe9 [ 1605.916378][T23571] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000007 [ 1605.916386][T23571] RBP: 00007fa793611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1605.916393][T23571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.916400][T23571] R13: 00007fa7937c6308 R14: 00007fa7937c6270 R15: 00007fff029cd2f8 [ 1605.916415][T23571] [ 1605.934492][T23563] buffer_io_error: 11 callbacks suppressed [ 1605.934508][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1605.999493][ T5909] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1606.042830][T23568] Buffer I/O error on dev loop6, logical block 0, async page read [ 1606.329904][ T30] audit: type=1326 audit(1757268006.144:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23561 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f90e978ebe9 code=0x7ffc0000 [ 1606.394123][ T30] audit: type=1326 audit(1757268006.144:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23561 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90e978ebe9 code=0x7ffc0000 [ 1606.476400][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1606.562927][ T5909] usb 3-1: device descriptor read/64, error -71 [ 1606.809910][T23563] Buffer I/O error on dev loop6, logical block 0, async page read [ 1606.818824][T14766] Buffer I/O error on dev loop6, logical block 0, async page read [ 1606.827872][T14766] Buffer I/O error on dev loop6, logical block 0, async page read [ 1606.871633][T23568] Buffer I/O error on dev loop6, logical block 0, async page read [ 1606.912988][T14766] Buffer I/O error on dev loop6, logical block 0, async page read [ 1606.922652][T14766] Buffer I/O error on dev loop6, logical block 0, async page read [ 1606.929537][ T5909] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1606.947471][T23568] Buffer I/O error on dev loop6, logical block 0, async page read [ 1607.111091][ T5909] usb 3-1: device descriptor read/64, error -71 [ 1607.179466][T19670] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1607.239603][ T5909] usb usb3-port1: attempt power cycle [ 1607.259608][ T5939] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1607.329638][T19670] usb 5-1: Using ep0 maxpacket: 16 [ 1607.353107][T23594] hfsplus: unable to find HFS+ superblock [ 1607.353467][T19670] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.375264][T19670] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1607.386412][T19670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.438755][T19670] usb 5-1: config 0 descriptor?? [ 1607.483810][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.588353][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 1607.599264][ T5939] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1607.607790][ T5939] usb 6-1: config 0 has no interface number 0 [ 1607.619038][ T5939] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1607.633882][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.743618][T23599] usb usb8: usbfs: process 23599 (syz.0.4295) did not claim interface 0 before use [ 1607.753370][ T5909] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1607.780415][ T5939] usb 6-1: Product: syz [ 1607.784736][ T5939] usb 6-1: Manufacturer: syz [ 1607.790308][ T5909] usb 3-1: device descriptor read/8, error -71 [ 1607.797672][ T5939] usb 6-1: SerialNumber: syz [ 1607.807312][ T5939] usb 6-1: config 0 descriptor?? [ 1607.827422][ T5939] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1608.020768][ T5939] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1608.196857][ T5939] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1608.202028][T19670] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1608.249507][ T5909] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1608.280270][ T5909] usb 3-1: device descriptor read/8, error -71 [ 1608.395540][ T5909] usb usb3-port1: unable to enumerate USB device [ 1608.810266][T23610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4297'. [ 1609.374885][ T5909] usb 5-1: USB disconnect, device number 82 [ 1610.084150][ T5909] libceph: connect (1)[b::]:6789 error -101 [ 1610.090644][T19670] libceph: connect (1)[c::]:6789 error -101 [ 1610.096735][T19670] libceph: mon0 (1)[c::]:6789 connect error [ 1610.104901][ T5909] libceph: mon0 (1)[b::]:6789 connect error [ 1610.118238][T19670] libceph: connect (1)[c::]:6789 error -101 [ 1610.125890][T19670] libceph: mon0 (1)[c::]:6789 connect error [ 1610.163193][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1610.163215][ T30] audit: type=1400 audit(1757268010.944:4032): avc: denied { mounton } for pid=23612 comm="syz.2.4300" path="/188/file0" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1610.329441][ T30] audit: type=1400 audit(1757268010.954:4033): avc: denied { mount } for pid=23612 comm="syz.2.4300" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1610.367872][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1610.422192][ T5939] libceph: connect (1)[b::]:6789 error -101 [ 1610.434763][ T5909] usb 6-1: USB disconnect, device number 21 [ 1610.450674][ T5939] libceph: mon0 (1)[b::]:6789 connect error [ 1610.512037][T19670] libceph: connect (1)[c::]:6789 error -101 [ 1610.538846][ T5909] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1610.554309][ T5909] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1610.597069][T19670] libceph: mon0 (1)[c::]:6789 connect error [ 1610.612753][ T5909] quatech2 6-1:0.51: device disconnected [ 1610.701660][ T30] audit: type=1400 audit(1757268011.524:4034): avc: denied { read } for pid=23631 comm="syz.5.4303" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1610.835782][T23617] ceph: No mds server is up or the cluster is laggy [ 1610.842665][T23619] ceph: No mds server is up or the cluster is laggy [ 1610.864060][ T30] audit: type=1400 audit(1757268011.524:4035): avc: denied { open } for pid=23631 comm="syz.5.4303" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1610.992754][ T30] audit: type=1400 audit(1757268011.604:4036): avc: denied { ioctl } for pid=23631 comm="syz.5.4303" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1611.042590][ T5909] libceph: connect (1)[b::]:6789 error -101 [ 1611.054798][ T5909] libceph: mon0 (1)[b::]:6789 connect error [ 1611.088276][T23639] FAULT_INJECTION: forcing a failure. [ 1611.088276][T23639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.111952][T23639] CPU: 0 UID: 0 PID: 23639 Comm: syz.4.4304 Not tainted syzkaller #0 PREEMPT(full) [ 1611.111975][T23639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1611.111985][T23639] Call Trace: [ 1611.111989][T23639] [ 1611.111994][T23639] dump_stack_lvl+0x16c/0x1f0 [ 1611.112012][T23639] should_fail_ex+0x512/0x640 [ 1611.112027][T23639] _copy_from_user+0x2e/0xd0 [ 1611.112042][T23639] core_sys_select+0x2c8/0xc10 [ 1611.112059][T23639] ? __pfx_core_sys_select+0x10/0x10 [ 1611.112084][T23639] ? set_user_sigmask+0x21b/0x2b0 [ 1611.112097][T23639] ? __pfx_set_user_sigmask+0x10/0x10 [ 1611.112112][T23639] do_pselect.constprop.0+0x19f/0x1e0 [ 1611.112125][T23639] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1611.112142][T23639] __x64_sys_pselect6+0x182/0x240 [ 1611.112155][T23639] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 1611.112171][T23639] do_syscall_64+0xcd/0x4c0 [ 1611.112188][T23639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.112199][T23639] RIP: 0033:0x7f884618ebe9 [ 1611.112209][T23639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1611.112220][T23639] RSP: 002b:00007f8846f94038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1611.112231][T23639] RAX: ffffffffffffffda RBX: 00007f88463c6090 RCX: 00007f884618ebe9 [ 1611.112238][T23639] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1611.112244][T23639] RBP: 00007f8846f94090 R08: 0000000000000000 R09: 0000000000000000 [ 1611.112251][T23639] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1611.112257][T23639] R13: 00007f88463c6128 R14: 00007f88463c6090 R15: 00007fffa7909e08 [ 1611.112271][T23639] [ 1611.129655][T19670] libceph: connect (1)[c::]:6789 error -101 [ 1611.447535][T19670] libceph: mon0 (1)[c::]:6789 connect error [ 1611.539065][T23643] FAULT_INJECTION: forcing a failure. [ 1611.539065][T23643] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.569677][T23643] CPU: 0 UID: 0 PID: 23643 Comm: syz.4.4306 Not tainted syzkaller #0 PREEMPT(full) [ 1611.569703][T23643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1611.569714][T23643] Call Trace: [ 1611.569720][T23643] [ 1611.569728][T23643] dump_stack_lvl+0x16c/0x1f0 [ 1611.569753][T23643] should_fail_ex+0x512/0x640 [ 1611.569774][T23643] ? __kvmalloc_node_noprof+0x124/0x620 [ 1611.569795][T23643] should_failslab+0xc2/0x120 [ 1611.569816][T23643] __kvmalloc_node_noprof+0x137/0x620 [ 1611.569835][T23643] ? io_alloc_cache_init+0x33/0x170 [ 1611.569861][T23643] ? io_alloc_cache_init+0x33/0x170 [ 1611.569886][T23643] io_alloc_cache_init+0x33/0x170 [ 1611.569909][T23643] io_uring_setup+0x680/0x2120 [ 1611.569931][T23643] ? __pfx_io_uring_setup+0x10/0x10 [ 1611.569947][T23643] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1611.569970][T23643] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1611.569999][T23643] ? ksys_write+0x1ac/0x250 [ 1611.570017][T23643] ? __pfx_ksys_write+0x10/0x10 [ 1611.570040][T23643] __x64_sys_io_uring_setup+0xc2/0x170 [ 1611.570059][T23643] do_syscall_64+0xcd/0x4c0 [ 1611.570082][T23643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.570101][T23643] RIP: 0033:0x7f884618ebe9 [ 1611.570116][T23643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1611.570133][T23643] RSP: 002b:00007f8846fb4fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1611.570150][T23643] RAX: ffffffffffffffda RBX: 00007f88463c5fa0 RCX: 00007f884618ebe9 [ 1611.570161][T23643] RDX: 0000200000000000 RSI: 0000200000000280 RDI: 0000000000000a27 [ 1611.570172][T23643] RBP: 0000200000000280 R08: 0000000000000000 R09: 0000200000000000 [ 1611.570181][T23643] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 1611.570190][T23643] R13: 00002000000000c0 R14: 0000000000000a27 R15: 0000200000000000 [ 1611.570213][T23643] [ 1611.771928][T23643] 9pnet_fd: Insufficient options for proto=fd [ 1611.949831][ T30] audit: type=1400 audit(1757268012.664:4037): avc: denied { unmount } for pid=19525 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1612.219461][ T5982] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1612.309782][T23651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1612.499518][ T5982] usb 3-1: Using ep0 maxpacket: 16 [ 1612.655055][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1612.684145][ T5982] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1612.698785][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.709296][ T5982] usb 3-1: Product: syz [ 1612.715572][ T5982] usb 3-1: Manufacturer: syz [ 1612.729523][ T5982] usb 3-1: SerialNumber: syz [ 1612.750333][ T5982] usb 3-1: config 0 descriptor?? [ 1612.764099][ T5982] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1612.775501][ T5982] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1612.838918][T23653] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4310'. [ 1612.987440][T23657] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4312'. [ 1612.996615][T23657] xt_policy: neither incoming nor outgoing policy selected [ 1613.007562][ T30] audit: type=1400 audit(1757268013.834:4038): avc: denied { read write } for pid=23656 comm="syz.4.4312" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1613.065293][ T30] audit: type=1400 audit(1757268013.834:4039): avc: denied { open } for pid=23656 comm="syz.4.4312" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1613.412266][ T5982] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1613.933385][T23670] fuse: Bad value for 'fd' [ 1614.333709][ T30] audit: type=1400 audit(1757268014.794:4040): avc: denied { read write } for pid=23660 comm="syz.5.4314" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1614.473337][T19570] kernel write not supported for file /input/mouse0 (pid: 19570 comm: kworker/1:1) [ 1614.502217][T23669] sp0: Synchronizing with TNC [ 1614.783144][ T30] audit: type=1400 audit(1757268014.794:4041): avc: denied { open } for pid=23660 comm="syz.5.4314" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1614.806856][ C1] vkms_vblank_simulate: vblank timer overrun [ 1615.181487][ T5982] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1615.193441][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1615.193457][ T30] audit: type=1400 audit(1757268015.964:4046): avc: denied { mount } for pid=23662 comm="syz.1.4315" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1615.221065][ T5982] em28xx 3-1:0.0: board has no eeprom [ 1615.374116][T23679] hfsplus: unable to find HFS+ superblock [ 1615.572245][ T30] audit: type=1400 audit(1757268016.334:4047): avc: denied { search } for pid=5515 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.599576][ T5982] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1615.607489][ T5982] em28xx 3-1:0.0: dvb set to bulk mode. [ 1615.626333][ T30] audit: type=1400 audit(1757268016.334:4048): avc: denied { search } for pid=5515 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.695347][T19670] em28xx 3-1:0.0: Binding DVB extension [ 1615.727954][ T5982] usb 3-1: USB disconnect, device number 103 [ 1615.755373][ T5982] em28xx 3-1:0.0: Disconnecting em28xx [ 1615.840177][ T30] audit: type=1400 audit(1757268016.334:4049): avc: denied { search } for pid=5515 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.935626][ T30] audit: type=1400 audit(1757268016.334:4050): avc: denied { read } for pid=5515 comm="dhcpcd" name="n137" dev="tmpfs" ino=15042 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1615.938235][T19670] em28xx 3-1:0.0: Registering input extension [ 1615.958872][ T30] audit: type=1400 audit(1757268016.334:4051): avc: denied { open } for pid=5515 comm="dhcpcd" path="/run/udev/data/n137" dev="tmpfs" ino=15042 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1616.017121][ T30] audit: type=1400 audit(1757268016.334:4052): avc: denied { getattr } for pid=5515 comm="dhcpcd" path="/run/udev/data/n137" dev="tmpfs" ino=15042 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1616.050070][ T30] audit: type=1400 audit(1757268016.484:4053): avc: denied { create } for pid=23680 comm="syz.0.4318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1616.061692][ T5982] em28xx 3-1:0.0: Closing input extension [ 1616.108360][ T5982] em28xx 3-1:0.0: Freeing device [ 1616.135645][ T30] audit: type=1400 audit(1757268016.514:4054): avc: denied { setopt } for pid=23680 comm="syz.0.4318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1616.165722][ T30] audit: type=1400 audit(1757268016.844:4055): avc: denied { read write } for pid=23686 comm="syz.4.4320" name="sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1616.189859][ C1] vkms_vblank_simulate: vblank timer overrun [ 1616.555314][T23701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1617.778481][T23722] netlink: 'syz.0.4329': attribute type 27 has an invalid length. [ 1617.928994][T23722] 9pnet_fd: Insufficient options for proto=fd [ 1617.961120][T23731] hfsplus: unable to find HFS+ superblock [ 1618.151965][T23732] overlay: ./file0 is not a directory [ 1618.333689][T23742] FAULT_INJECTION: forcing a failure. [ 1618.333689][T23742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1618.384060][T23742] CPU: 0 UID: 0 PID: 23742 Comm: syz.1.4335 Not tainted syzkaller #0 PREEMPT(full) [ 1618.384089][T23742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1618.384099][T23742] Call Trace: [ 1618.384106][T23742] [ 1618.384113][T23742] dump_stack_lvl+0x16c/0x1f0 [ 1618.384138][T23742] should_fail_ex+0x512/0x640 [ 1618.384163][T23742] _copy_from_user+0x2e/0xd0 [ 1618.384188][T23742] kstrtouint_from_user+0xd6/0x1d0 [ 1618.384207][T23742] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1618.384224][T23742] ? __lock_acquire+0xb97/0x1ce0 [ 1618.384264][T23742] proc_fail_nth_write+0x83/0x220 [ 1618.384288][T23742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1618.384313][T23742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1618.384331][T23742] vfs_write+0x29d/0x11d0 [ 1618.384355][T23742] ? __pfx___mutex_lock+0x10/0x10 [ 1618.384376][T23742] ? __pfx_vfs_write+0x10/0x10 [ 1618.384401][T23742] ? __fget_files+0x20e/0x3c0 [ 1618.384430][T23742] ksys_write+0x12a/0x250 [ 1618.384448][T23742] ? __pfx_ksys_write+0x10/0x10 [ 1618.384474][T23742] do_syscall_64+0xcd/0x4c0 [ 1618.384502][T23742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.384521][T23742] RIP: 0033:0x7f90e978d69f [ 1618.384536][T23742] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1618.384553][T23742] RSP: 002b:00007f90ea5aa030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1618.384571][T23742] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f90e978d69f [ 1618.384584][T23742] RDX: 0000000000000001 RSI: 00007f90ea5aa0a0 RDI: 0000000000000004 [ 1618.384595][T23742] RBP: 00007f90ea5aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1618.384606][T23742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1618.384617][T23742] R13: 00007f90e99c6038 R14: 00007f90e99c5fa0 R15: 00007ffea568cda8 [ 1618.384642][T23742] [ 1618.673153][T23744] netlink: 'syz.2.4336': attribute type 1 has an invalid length. [ 1618.937786][T23744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1618.978852][T23748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1618.996302][T23748] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1619.022748][T23748] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1619.063818][T23749] mkiss: ax0: crc mode is auto. [ 1619.179532][ T5909] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1619.231367][T23744] gretap1: entered promiscuous mode [ 1619.255022][T23744] bond1: (slave gretap1): making interface the new active one [ 1619.265124][T23744] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1619.434550][T23766] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1619.797185][T23753] macvlan2: entered promiscuous mode [ 1619.808427][T23753] macvlan2: entered allmulticast mode [ 1619.814300][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 1619.822427][ T5909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1619.832964][T23753] bond1: entered promiscuous mode [ 1619.838697][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1619.854978][T23753] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1619.862665][ T5909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1619.876756][ T5909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1619.898599][T23753] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1619.920014][ T5909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1619.931251][T23753] bond1: left promiscuous mode [ 1619.932637][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.157349][T23772] fuse: Bad value for 'fd' [ 1620.383579][ T5909] usb 2-1: GET_CAPABILITIES returned 0 [ 1620.409481][ T5909] usbtmc 2-1:16.0: can't read capabilities [ 1621.271594][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1621.271635][ T30] audit: type=1400 audit(1757268021.674:4072): avc: denied { create } for pid=23777 comm="syz.5.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1621.361388][ T30] audit: type=1400 audit(1757268021.694:4073): avc: denied { bind } for pid=23777 comm="syz.5.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1621.645163][ T30] audit: type=1400 audit(1757268021.694:4074): avc: denied { connect } for pid=23777 comm="syz.5.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1621.661835][ T5939] usb 2-1: USB disconnect, device number 106 [ 1621.718563][ T30] audit: type=1400 audit(1757268021.734:4075): avc: denied { mount } for pid=23777 comm="syz.5.4344" name="/" dev="ramfs" ino=90368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1621.779151][ T30] audit: type=1400 audit(1757268022.544:4076): avc: denied { create } for pid=23784 comm="syz.0.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1621.804167][ T30] audit: type=1400 audit(1757268022.604:4077): avc: denied { ioctl } for pid=23784 comm="syz.0.4346" path="socket:[90385]" dev="sockfs" ino=90385 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1621.834838][ T30] audit: type=1400 audit(1757268022.604:4078): avc: denied { create } for pid=23784 comm="syz.0.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1621.867038][T23790] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4348'. [ 1621.876158][T23790] xt_policy: neither incoming nor outgoing policy selected [ 1621.913470][ T30] audit: type=1400 audit(1757268022.604:4079): avc: denied { bind } for pid=23784 comm="syz.0.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1622.141119][ T30] audit: type=1400 audit(1757268022.604:4080): avc: denied { setopt } for pid=23784 comm="syz.0.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1622.163696][ T30] audit: type=1400 audit(1757268022.604:4081): avc: denied { write } for pid=23784 comm="syz.0.4346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1623.794288][T23815] syz_tun: entered allmulticast mode [ 1624.833800][T23832] mkiss: ax0: crc mode is auto. [ 1625.032892][T23807] syz_tun: left allmulticast mode [ 1625.483374][T23842] FAULT_INJECTION: forcing a failure. [ 1625.483374][T23842] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.499526][T23842] CPU: 0 UID: 0 PID: 23842 Comm: syz.4.4362 Not tainted syzkaller #0 PREEMPT(full) [ 1625.499552][T23842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1625.499563][T23842] Call Trace: [ 1625.499569][T23842] [ 1625.499577][T23842] dump_stack_lvl+0x16c/0x1f0 [ 1625.499603][T23842] should_fail_ex+0x512/0x640 [ 1625.499622][T23842] ? __kmalloc_node_noprof+0xc5/0x500 [ 1625.499643][T23842] should_failslab+0xc2/0x120 [ 1625.499664][T23842] __kmalloc_node_noprof+0xd8/0x500 [ 1625.499682][T23842] ? fifo_init+0x393/0x710 [ 1625.499706][T23842] ? qdisc_alloc+0xbb/0xc50 [ 1625.499727][T23842] qdisc_alloc+0xbb/0xc50 [ 1625.499750][T23842] qdisc_create_dflt+0x94/0x490 [ 1625.499771][T23842] taprio_init+0x48f/0x910 [ 1625.499802][T23842] ? __pfx_taprio_init+0x10/0x10 [ 1625.499826][T23842] ? qdisc_alloc+0x94f/0xc50 [ 1625.499845][T23842] ? __pfx_taprio_init+0x10/0x10 [ 1625.499870][T23842] qdisc_create+0x454/0xfc0 [ 1625.499898][T23842] tc_modify_qdisc+0x11d8/0x2170 [ 1625.499924][T23842] ? rcu_is_watching+0x12/0xc0 [ 1625.499949][T23842] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1625.499982][T23842] ? __lock_acquire+0x62e/0x1ce0 [ 1625.500029][T23842] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1625.500055][T23842] rtnetlink_rcv_msg+0x3c6/0xe90 [ 1625.500080][T23842] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1625.500109][T23842] ? ref_tracker_free+0x37c/0x830 [ 1625.500133][T23842] netlink_rcv_skb+0x155/0x420 [ 1625.500157][T23842] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1625.500179][T23842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1625.500210][T23842] ? netlink_deliver_tap+0x1ae/0xd30 [ 1625.500236][T23842] netlink_unicast+0x5aa/0x870 [ 1625.500261][T23842] ? __pfx_netlink_unicast+0x10/0x10 [ 1625.500282][T23842] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1625.500310][T23842] netlink_sendmsg+0x8d1/0xdd0 [ 1625.500336][T23842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1625.500367][T23842] ____sys_sendmsg+0xa98/0xc70 [ 1625.500392][T23842] ? copy_msghdr_from_user+0x10a/0x160 [ 1625.500411][T23842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1625.500448][T23842] ___sys_sendmsg+0x134/0x1d0 [ 1625.500469][T23842] ? __pfx____sys_sendmsg+0x10/0x10 [ 1625.500521][T23842] __sys_sendmsg+0x16d/0x220 [ 1625.500540][T23842] ? __pfx___sys_sendmsg+0x10/0x10 [ 1625.500577][T23842] do_syscall_64+0xcd/0x4c0 [ 1625.500599][T23842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.500618][T23842] RIP: 0033:0x7f884618ebe9 [ 1625.500634][T23842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.500651][T23842] RSP: 002b:00007f8846fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1625.500669][T23842] RAX: ffffffffffffffda RBX: 00007f88463c5fa0 RCX: 00007f884618ebe9 [ 1625.500681][T23842] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 1625.500692][T23842] RBP: 00007f8846fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.500702][T23842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1625.500712][T23842] R13: 00007f88463c6038 R14: 00007f88463c5fa0 R15: 00007fffa7909e08 [ 1625.500737][T23842] [ 1627.982124][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1627.982136][ T30] audit: type=1400 audit(1757268028.814:4097): avc: denied { mount } for pid=23873 comm="syz.5.4371" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1628.010011][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.100550][T23882] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4377'. [ 1628.109638][T23882] xt_policy: neither incoming nor outgoing policy selected [ 1628.126549][ T30] audit: type=1400 audit(1757268028.954:4098): avc: denied { unmount } for pid=18720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1628.146470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.677541][ T30] audit: type=1400 audit(1757268029.504:4099): avc: denied { ioctl } for pid=23898 comm="syz.0.4382" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=91154 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1628.776141][T23904] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4381'. [ 1628.801650][T23906] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4380'. [ 1629.039486][T23904] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1629.376578][ T30] audit: type=1400 audit(1757268030.204:4100): avc: denied { bind } for pid=23916 comm="syz.1.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1629.400398][T23917] Bluetooth: MGMT ver 1.23 [ 1629.419903][ T30] audit: type=1400 audit(1757268030.234:4101): avc: denied { write } for pid=23916 comm="syz.1.4387" path="socket:[91181]" dev="sockfs" ino=91181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1629.899601][ T5909] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1630.050069][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 1630.065087][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1630.091694][ T5909] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1630.091720][ T5982] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1630.109414][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.124838][ T5909] usb 2-1: config 0 descriptor?? [ 1630.309426][ T5982] usb 6-1: Using ep0 maxpacket: 16 [ 1630.326191][ T5982] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1630.336495][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1630.348219][ T5982] usb 6-1: Product: syz [ 1630.353721][ T5982] usb 6-1: Manufacturer: syz [ 1630.358339][ T5982] usb 6-1: SerialNumber: syz [ 1630.368327][ T5982] usb 6-1: config 0 descriptor?? [ 1630.399899][T19670] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1630.555088][ T5909] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1630.607512][T19670] usb 5-1: Using ep0 maxpacket: 16 [ 1630.626494][T19670] usb 5-1: config 0 has no interfaces? [ 1630.633914][T19670] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.f8 [ 1630.644427][T19670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.674390][T19670] usb 5-1: Product: syz [ 1630.678662][T19670] usb 5-1: Manufacturer: syz [ 1630.692091][T19670] usb 5-1: SerialNumber: syz [ 1630.710379][T19670] usb 5-1: config 0 descriptor?? [ 1630.919513][ T5982] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1630.943151][ T30] audit: type=1400 audit(1757268031.764:4102): avc: denied { write } for pid=23936 comm="syz.4.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1630.971306][T19670] usb 5-1: USB disconnect, device number 83 [ 1630.986956][ T5909] usb 2-1: USB disconnect, device number 107 [ 1631.017175][ T30] audit: type=1400 audit(1757268031.764:4103): avc: denied { read } for pid=23936 comm="syz.4.4391" path="socket:[90632]" dev="sockfs" ino=90632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1631.170287][ T30] audit: type=1400 audit(1757268031.764:4104): avc: denied { create } for pid=23936 comm="syz.4.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1631.231562][ T30] audit: type=1404 audit(1757268031.784:4105): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1631.248257][ T30] audit: type=1400 audit(1757268031.794:4106): avc: denied { ioctl } for pid=23941 comm="syz.2.4393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1631.571487][T23942] comedi comedi2: reset error (fatal) [ 1631.585280][T23949] netlink: 'syz.4.4396': attribute type 10 has an invalid length. [ 1631.604465][T23949] bond0: (slave netdevsim0): Releasing backup interface [ 1631.635575][T23949] bridge0: port 2(netdevsim0) entered blocking state [ 1631.649041][T23949] bridge0: port 2(netdevsim0) entered disabled state [ 1631.679290][T23949] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1631.689014][T23949] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1632.553941][ T10] usb 6-1: USB disconnect, device number 22 [ 1632.898312][T23968] wlan0 speed is unknown, defaulting to 1000 [ 1632.919130][T23968] lo speed is unknown, defaulting to 1000 [ 1633.046214][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1633.046233][ T30] audit: type=1400 audit(1757268033.874:4181): avc: denied { recv } for pid=23964 comm="syz.5.4403" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1633.133010][ T30] audit: type=1400 audit(1757268033.914:4182): avc: denied { recv } for pid=6489 comm="kworker/u8:10" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1633.593132][ T30] audit: type=1400 audit(1757268034.424:4183): avc: denied { read write } for pid=18720 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1634.714077][ T30] audit: type=1400 audit(1757268035.544:4184): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1634.840100][ T30] audit: type=1400 audit(1757268035.674:4185): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1638.006263][ T30] audit: type=1400 audit(1757268038.834:4186): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1638.280154][ T30] audit: type=1400 audit(1757268039.114:4187): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1644.662805][ T30] audit: type=1400 audit(1757268045.494:4188): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1645.240809][ T30] audit: type=1400 audit(1757268046.074:4189): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1657.974675][ T30] audit: type=1400 audit(1757268058.804:4190): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1659.320638][ T30] audit: type=1400 audit(1757268060.154:4191): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1668.922893][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1685.110379][ T30] audit: type=1400 audit(1757268085.944:4192): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1686.840731][ T30] audit: type=1400 audit(1757268087.674:4193): avc: denied { recv } for pid=18134 comm="kworker/u8:9" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1730.360983][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.357956][ T30] audit: type=1400 audit(1757268139.184:4194): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1745.721238][ T30] audit: type=1400 audit(1757268146.554:4195): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1791.810953][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1844.852919][ T30] audit: type=1400 audit(1757268245.684:4196): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1853.241075][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.366110][ T30] audit: type=1400 audit(1757268259.194:4197): avc: denied { recv } for pid=21321 comm="kworker/u8:15" saddr=10.128.0.169 src=30006 daddr=10.128.1.180 dest=36668 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1866.661042][ T30] audit: type=1400 audit(1757268267.494:4198): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1866.876049][ T30] audit: type=1400 audit(1757268267.704:4199): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1867.092059][ T30] audit: type=1400 audit(1757268267.924:4200): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1867.540173][ T30] audit: type=1400 audit(1757268268.374:4201): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1868.404137][ T30] audit: type=1400 audit(1757268269.234:4202): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1870.132031][ T30] audit: type=1400 audit(1757268270.964:4203): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1873.779990][ T30] audit: type=1400 audit(1757268274.614:4204): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1880.692757][ T30] audit: type=1400 audit(1757268281.524:4205): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1894.516558][ T30] audit: type=1400 audit(1757268295.344:4206): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1914.691037][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1922.676247][ T30] audit: type=1400 audit(1757268323.504:4207): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=36546 daddr=10.128.1.180 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0